Ecosyste.ms: Issues
An open API service for providing issue and pull request metadata for open source projects.
GitHub / openshift/apiserver-library-go issues and pull requests
#108 - pkg/securitycontextconstraints/sccadmission: simplify retrieving SCCs
Pull Request -
State: open - Opened by s-urbaniak over 1 year ago
- 5 comments
Labels: do-not-merge/hold, approved, lgtm
#107 - pkg/securitycontextconstraints/sccadmission: simplify finding applicable SCCs
Pull Request -
State: closed - Opened by s-urbaniak over 1 year ago
- 4 comments
Labels: approved
#106 - Make some functions public
Pull Request -
State: open - Opened by jwendell over 1 year ago
- 4 comments
#105 - Always try to respect SCC Hints
Pull Request -
State: open - Opened by andreaskaris over 1 year ago
- 3 comments
Labels: do-not-merge/hold
#104 - Can only specify one valid set of seLinuxOptions per SCC
Issue -
State: open - Opened by Raniz85 over 1 year ago
#103 - SCC: Cannot specify partial seLinuxOptions
Issue -
State: open - Opened by Raniz85 over 1 year ago
#102 - OCPBUGS-7268: Add SeccompProfile field if the annotation is specified
Pull Request -
State: closed - Opened by stlaz over 1 year ago
- 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/valid-bug, jira/valid-reference
#101 - STOR-1263: Bump k8s 1.27
Pull Request -
State: closed - Opened by bertinatto over 1 year ago
- 4 comments
Labels: approved, lgtm, jira/valid-reference
#100 - OCPBUGS-7267: SCC: Add SeccompProfile field if the annotation is specified
Pull Request -
State: closed - Opened by stlaz over 1 year ago
- 13 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/valid-reference
#99 - Add SCC history field to track former SCC assignments
Pull Request -
State: closed - Opened by andreaskaris over 1 year ago
- 5 comments
Labels: do-not-merge/hold
#98 - [release-4.12] OCPBUGS-5769: sccadmission: use the actual pod/container seccomp profile to match SCC
Pull Request -
State: closed - Opened by openshift-cherrypick-robot over 1 year ago
- 21 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/valid-bug, jira/valid-reference
#97 - OCPBUGS-6030: sccadmission: use the actual pod/container seccomp profile to match SCC
Pull Request -
State: closed - Opened by stlaz over 1 year ago
- 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/valid-reference
#96 - [4.11] OCPBUGS-6683: add message about working with restricted, but not restricted-v2
Pull Request -
State: closed - Opened by stlaz over 1 year ago
- 19 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/severity-important, jira/valid-bug, jira/valid-reference
#95 - OCPBUGS-6255: bump(k8s): 1.26
Pull Request -
State: closed - Opened by sanchezl almost 2 years ago
- 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/severity-critical
#94 - use cached namespaces instead of live lookups for UID ranges
Pull Request -
State: closed - Opened by deads2k almost 2 years ago
- 3 comments
Labels: approved, lgtm
#93 - SCC errors regarding seccomp are missing provider name
Issue -
State: closed - Opened by akalenyu almost 2 years ago
- 5 comments
Labels: lifecycle/rotten
#92 - Switch from github.com/hashicorp/golang-lru to k8s.io/utils/lru
Pull Request -
State: closed - Opened by soltysh about 2 years ago
- 8 comments
Labels: do-not-merge/hold, approved, needs-rebase, lifecycle/rotten
#91 - k8s 1.25.0
Pull Request -
State: closed - Opened by soltysh about 2 years ago
- 4 comments
Labels: approved, lgtm
#90 - add mechanism to force an SCC selection as the only valid one to consider
Pull Request -
State: open - Opened by deads2k about 2 years ago
- 10 comments
Labels: approved, needs-rebase
#89 - bug 2117374: add message about working with restricted, but not restricted-v2
Pull Request -
State: closed - Opened by deads2k about 2 years ago
- 27 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#88 - Add a Getter for `standardSCCNames`
Issue -
State: closed - Opened by acornett21 about 2 years ago
- 4 comments
Labels: lifecycle/rotten
#87 - Copy k8s.io/kubernetes/pkg/security/podsecuritypolicy/sysctl packge from k8s 1.24 to pkg/securitycontextconstraints/sysctl
Pull Request -
State: closed - Opened by soltysh about 2 years ago
- 6 comments
Labels: approved, lifecycle/rotten
#86 - [release-4.9] Bug 2104482: fix clusterresourcequota admission
Pull Request -
State: closed - Opened by openshift-cherrypick-robot about 2 years ago
- 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium, backport-risk-assessed
#85 - Bug 2086519: scc: set container nonroot=true if the pod/container RunAsUser is non-zero
Pull Request -
State: closed - Opened by stlaz over 2 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#84 - Bug 2093440: include pluginName in caches not syncd error
Pull Request -
State: closed - Opened by neisw over 2 years ago
- 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-unspecified
#83 - expect new more restrictive SCCs
Pull Request -
State: closed - Opened by stlaz over 2 years ago
- 3 comments
Labels: approved, lgtm
#82 - Bug 2079965: Ignore non-linux pods while applying SCCs
Pull Request -
State: closed - Opened by ravisantoshgudimetla over 2 years ago
- 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#81 - Bug 2086092: bump to k8s v0.24.0
Pull Request -
State: closed - Opened by tkashem over 2 years ago
- 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#80 - Update owners in subdirectories based on their past commit history
Pull Request -
State: closed - Opened by soltysh over 2 years ago
- 4 comments
Labels: do-not-merge/hold, approved
#79 - scc, scope authorizer: add the auth team ownership
Pull Request -
State: closed - Opened by stlaz over 2 years ago
- 3 comments
Labels: approved, lgtm
#78 - SCC admission: check the securityContext.seccompProfile fields
Pull Request -
State: closed - Opened by stlaz over 2 years ago
- 7 comments
Labels: approved, lgtm
#77 - Add .ci-operator.yaml
Pull Request -
State: closed - Opened by damemi almost 3 years ago
- 1 comment
Labels: approved, lgtm
#76 - Rebase 1.23
Pull Request -
State: closed - Opened by damemi almost 3 years ago
- 5 comments
Labels: approved, lgtm
#75 - [release-4.6] Bug 2026380: Image policy should mutate DeploymentConfigs and StatefulSets
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 3 years ago
- 12 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, qe-approved, backport-risk-assessed
#74 - Bug 2023342: scc admission: add ephemeralContainers to admission consideration
Pull Request -
State: closed - Opened by stlaz almost 3 years ago
- 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#73 - [release-4.7] Bug 2022188: Image policy should mutate DeploymentConfigs and StatefulSets
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 3 years ago
- 12 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed
#72 - [release-4.8] Bug 2020644: Image policy should mutate DeploymentConfigs and StatefulSets
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 3 years ago
- 19 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed
#71 - Add batch/v1.CronJob to pod mutators
Pull Request -
State: closed - Opened by soltysh almost 3 years ago
- 2 comments
Labels: approved, lgtm
#70 - [release-4.9] Bug 2018442: Image policy should mutate DeploymentConfigs and StatefulSets
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 3 years ago
- 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed
#69 - Bug 2000216: Image policy should mutate DeploymentConfigs and StatefulSets
Pull Request -
State: closed - Opened by dmage almost 3 years ago
- 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#68 - [release-4.8] Bug 2017027: backport SCC fixes
Pull Request -
State: closed - Opened by s-urbaniak almost 3 years ago
- 46 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed
#67 - [release-4.9] Bug 2017020: backport SCC fixes
Pull Request -
State: closed - Opened by s-urbaniak almost 3 years ago
- 23 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed
#66 - Bug 1970331: pkg/securitycontextconstraints: wait for MCS/UID labels on namespaces, bump verbosity on errors
Pull Request -
State: closed - Opened by s-urbaniak almost 3 years ago
- 15 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#65 - SCCs: handle errors during provider creation, bump log verbosity
Pull Request -
State: closed - Opened by s-urbaniak almost 3 years ago
- 7 comments
Labels: needs-rebase
#64 - require standard SCCs before evaluating SCC admission
Pull Request -
State: closed - Opened by deads2k almost 3 years ago
- 4 comments
Labels: approved, lgtm
#63 - [release-4.6] Bug 2008266: bump(k8s): to 1.19.14
Pull Request -
State: closed - Opened by damemi about 3 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high
#62 - Bug 1965368: fix clusterresourcequota admission
Pull Request -
State: closed - Opened by atiratree about 3 years ago
- 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium
#61 - Bug 1986003: bump(k8s.io/*): v0.22.1
Pull Request -
State: closed - Opened by soltysh about 3 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#60 - Bug 1996646: pkg/securitycontextconstraints: fix points groups
Pull Request -
State: closed - Opened by s-urbaniak about 3 years ago
- 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium
#59 - [release-4.6] Bug 1989061: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged
Pull Request -
State: closed - Opened by openshift-cherrypick-robot about 3 years ago
- 42 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high
#58 - [release-4.7] Bug 1967359: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged
Pull Request -
State: closed - Opened by openshift-cherrypick-robot about 3 years ago
- 9 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high
#57 - Bug 1986003: Bump k8s.io to 1.22.0-rc.0
Pull Request -
State: closed - Opened by soltysh about 3 years ago
- 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#56 - Bug 1981784: fix Deployment creates a huge number of ReplicaSets
Pull Request -
State: closed - Opened by atiratree about 3 years ago
- 78 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium
#55 - Bug 1981775: fix Deployment creates a huge number of ReplicaSets
Pull Request -
State: closed - Opened by atiratree about 3 years ago
- 49 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium
#54 - Bug 1981770: fix Deployment creates a huge number of ReplicaSets
Pull Request -
State: closed - Opened by atiratree about 3 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium, staff-eng-approved
#53 - [release-4.8] Bug 1977924: Ensure scc compatibility with BoundServiceAccountTokenVolume
Pull Request -
State: closed - Opened by openshift-cherrypick-robot over 3 years ago
- 9 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent, staff-eng-approved
#52 - Bug 1977920: Ensure scc compatibility with BoundServiceAccountTokenVolume
Pull Request -
State: closed - Opened by stlaz over 3 years ago
- 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#51 - Bug 1977920: Ensure scc compatibility with BoundServiceAccountTokenVolume
Pull Request -
State: closed - Opened by marun over 3 years ago
- 8 comments
Labels: lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#50 - Bug 1925180: fix Deployment creates a huge number of ReplicaSets
Pull Request -
State: closed - Opened by atiratree over 3 years ago
- 4 comments
Labels: approved, lgtm
#49 - Bug 1949050: Bump k8s to 1.21
Pull Request -
State: closed - Opened by soltysh over 3 years ago
- 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high
#48 - Bug 1923847: labelselector: fix empty value parsing
Pull Request -
State: closed - Opened by sttts over 3 years ago
- 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium
#47 - Bug 1934400: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged
Pull Request -
State: closed - Opened by sttts over 3 years ago
- 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#46 - Allow ':' in usernames if they are prepended by 'b64'
Pull Request -
State: closed - Opened by stlaz over 3 years ago
- 2 comments
Labels: approved, lgtm
#45 - bump(k8s.io/*): 1.21
Pull Request -
State: closed - Opened by soltysh over 3 years ago
- 3 comments
Labels: approved, lgtm
#44 - Drop batch/v2alpha1 which is not being used
Pull Request -
State: closed - Opened by soltysh over 3 years ago
- 2 comments
Labels: approved, lgtm
#43 - indicate every attempted security context constraint
Pull Request -
State: closed - Opened by deads2k over 3 years ago
- 3 comments
Labels: approved, lgtm
#42 - Prototype: Bug 1920699: clusterresourcequota: retry quota object updates on conflict
Pull Request -
State: closed - Opened by sttts over 3 years ago
- 7 comments
Labels: do-not-merge/hold, bugzilla/invalid-bug, approved, bugzilla/severity-high
#41 - Remove tnozicka from OWNERS
Pull Request -
State: closed - Opened by soltysh over 3 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug
#40 - add validation functions for usernames and groupnames
Pull Request -
State: closed - Opened by stlaz almost 4 years ago
- 2 comments
Labels: approved, lgtm
#39 - Bug 1907373: kube 1.20.0
Pull Request -
State: closed - Opened by tnozicka almost 4 years ago
- 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#38 - scc-admission: add audit annotations with reason
Pull Request -
State: closed - Opened by sttts almost 4 years ago
- 6 comments
Labels: approved, lgtm
#37 - Update to kubernetes v1.19.2
Pull Request -
State: closed - Opened by tnozicka almost 4 years ago
- 1 comment
Labels: approved, lgtm
#36 - Bug 1882364: Replace bitbucket.org/ww/goautoneg with its mirror
Pull Request -
State: closed - Opened by dmage about 4 years ago
- 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium
#35 - do not ignore the errors when resolving scc providers
Pull Request -
State: closed - Opened by vareti about 4 years ago
- 3 comments
#34 - Bug 1873043: Bump to kube 1.19.0
Pull Request -
State: closed - Opened by marun about 4 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#33 - Switch to klog v2
Pull Request -
State: closed - Opened by marun about 4 years ago
- 2 comments
Labels: approved, lgtm
#32 - Fix field paths in SCC validation error messages
Pull Request -
State: closed - Opened by luksa over 4 years ago
- 3 comments
Labels: approved, lgtm, needs-ok-to-test
#31 - bump(*) to v1.19.0-rc.2
Pull Request -
State: closed - Opened by marun over 4 years ago
- 3 comments
Labels: approved, lgtm
#30 - Bug 1826230: Bump to kube 1.18.3
Pull Request -
State: closed - Opened by marun over 4 years ago
- 3 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#29 - Bug 1826230: Switch to go-bindata/go-bindata for consistency with upstream
Pull Request -
State: closed - Opened by marun over 4 years ago
- 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#28 - Bug 1826230: Bump kube to v1.18.2
Pull Request -
State: closed - Opened by marun over 4 years ago
- 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent
#27 - Bump kube to 1.18.0
Pull Request -
State: closed - Opened by stlaz over 4 years ago
- 2 comments
Labels: approved, lgtm
#26 - rebase on kube 1.18 beta.2
Pull Request -
State: closed - Opened by stlaz over 4 years ago
- 3 comments
Labels: size/XXL, approved, lgtm
#25 - [4.2] Bug 1757565: Add service/externalips with network.openshift.io group as escalating
Pull Request -
State: closed - Opened by stlaz over 4 years ago
- 6 comments
Labels: size/XS, bugzilla/valid-bug
#24 - Bug 1801095: Fix imagepolicyresolve plugin to resolve when enabled on an existing object
Pull Request -
State: closed - Opened by tnozicka over 4 years ago
- 4 comments
Labels: size/L, approved, lgtm, bugzilla/valid-bug
#23 - Bug 1801095: add all supported versions for pod mutators
Pull Request -
State: closed - Opened by soltysh over 4 years ago
- 5 comments
Labels: size/L, approved, lgtm, bugzilla/valid-bug
#22 - picks kube 1.17.1
Pull Request -
State: closed - Opened by p0lyn0mial over 4 years ago
- 2 comments
Labels: size/XXL, approved, lgtm
#21 - [release-4.3] Bug 1793587: sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx"
Pull Request -
State: closed - Opened by sanchezl over 4 years ago
- 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, size/S
#20 - Bug 1792107: sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx"
Pull Request -
State: closed - Opened by sanchezl over 4 years ago
- 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, size/S
#19 - Bump: library-go to get verify-deps for go mod
Pull Request -
State: closed - Opened by tnozicka almost 5 years ago
- 2 comments
Labels: size/XXL, approved, lgtm
#18 - Migrate to go.mod and kubernetes 1.17.0
Pull Request -
State: closed - Opened by mfojtik almost 5 years ago
- 11 comments
Labels: size/XXL, approved, lgtm
#17 - [release-4.3] Bug 1757553: fix the externalIP scope escalation
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 5 years ago
- 10 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug
#16 - Bump to kubernetes-1.17.0-rc.2
Pull Request -
State: closed - Opened by tkashem almost 5 years ago
- 6 comments
Labels: size/XXL, approved, lgtm
#15 - Bug 1779694: fix the externalIP scope escalation
Pull Request -
State: closed - Opened by stlaz almost 5 years ago
- 10 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug
#14 - Pin dependencies for release-4.3
Pull Request -
State: closed - Opened by mfojtik almost 5 years ago
- 4 comments
Labels: size/XXL, approved, lgtm
#13 - Future Release Branches Frozen For Merging | branch:release-4.14 branch:release-4.15
Issue -
State: open - Opened by openshift-merge-robot almost 5 years ago
- 3 comments
Labels: tide/merge-blocker, lifecycle/rotten
#12 - [openshift-apiserver-4.3-kubernetes-1.17.0-beta.2] Bug 1723248: do not wrap not found when getting a pod
Pull Request -
State: closed - Opened by openshift-cherrypick-robot almost 5 years ago
- 3 comments
Labels: bugzilla/invalid-bug, size/XS
#11 - Bug 1723248: do not wrap not found when getting a pod
Pull Request -
State: closed - Opened by mfojtik almost 5 years ago
- 7 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug
#10 - Bug 1757553: Escalating external ip 1.17.0 beta.2
Pull Request -
State: closed - Opened by stlaz almost 5 years ago
- 2 comments
Labels: size/XS, bugzilla/valid-bug
#7 - Future Release Branches Frozen For Merging | branch:release-4.5 branch:release-4.4
Issue -
State: closed - Opened by openshift-merge-robot almost 5 years ago
Labels: tide/merge-blocker