{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12968","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12968/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12968/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12968/events","html_url":"https://github.com/kubernetes/kubernetes/issues/12968","id":102085607,"number":12968,"title":"Is ReadOnly port in Kubelet still needed.","user":{"login":"gmarek","id":1703842,"avatar_url":"https://avatars.githubusercontent.com/u/1703842?v=3","gravatar_id":"","url":"https://api.github.com/users/gmarek","html_url":"https://github.com/gmarek","followers_url":"https://api.github.com/users/gmarek/followers","following_url":"https://api.github.com/users/gmarek/following{/other_user}","gists_url":"https://api.github.com/users/gmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/gmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmarek/subscriptions","organizations_url":"https://api.github.com/users/gmarek/orgs","repos_url":"https://api.github.com/users/gmarek/repos","events_url":"https://api.github.com/users/gmarek/events{/privacy}","received_events_url":"https://api.github.com/users/gmarek/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/cleanup","name":"kind/cleanup","color":"c7def8"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/node","name":"team/node","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":22,"created_at":"2015-08-20T08:06:52Z","updated_at":"2015-09-01T14:08:43Z","closed_at":null,"body":"There are some voices that it's no longer necessary/won't be necessary for original purpose, as Heapster is/will be using secured port to scrape cAdvisor data. @roberthbailey @vishh @bgrant0607.\r\n\r\nOn the other hand with @fgrzadkowski we used it to debug some problems Filip was having, so it isn't completely useless.\r\n\r\n@dchen1107 @yujuhong - any thoughts?"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/136733937","html_url":"https://github.com/kubernetes/kubernetes/issues/12968#issuecomment-136733937","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12968","id":136733937,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2015-09-01T14:08:43Z","updated_at":"2015-09-01T14:08:43Z","body":"> Jordan mentioned we needed two ports if we want to do client certs but also allow some users not to have client certs?\r\n\r\nThat's not strictly true, we can move the cert validation from connection time into an auth filter, just like the API does. If we're going to add multiple authn/authz methods to the kubelet, that's probably the right thing to do."}}