Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / openshift/apiserver-library-go issues and pull requests

#108 - pkg/securitycontextconstraints/sccadmission: simplify retrieving SCCs

Pull Request - State: open - Opened by s-urbaniak over 1 year ago - 5 comments
Labels: do-not-merge/hold, approved, lgtm

#107 - pkg/securitycontextconstraints/sccadmission: simplify finding applicable SCCs

Pull Request - State: closed - Opened by s-urbaniak over 1 year ago - 4 comments
Labels: approved

#106 - Make some functions public

Pull Request - State: open - Opened by jwendell over 1 year ago - 4 comments

#105 - Always try to respect SCC Hints

Pull Request - State: open - Opened by andreaskaris over 1 year ago - 3 comments
Labels: do-not-merge/hold

#104 - Can only specify one valid set of seLinuxOptions per SCC

Issue - State: open - Opened by Raniz85 over 1 year ago

#103 - SCC: Cannot specify partial seLinuxOptions

Issue - State: open - Opened by Raniz85 over 1 year ago

#102 - OCPBUGS-7268: Add SeccompProfile field if the annotation is specified

Pull Request - State: closed - Opened by stlaz over 1 year ago - 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/valid-bug, jira/valid-reference

#101 - STOR-1263: Bump k8s 1.27

Pull Request - State: closed - Opened by bertinatto over 1 year ago - 4 comments
Labels: approved, lgtm, jira/valid-reference

#100 - OCPBUGS-7267: SCC: Add SeccompProfile field if the annotation is specified

Pull Request - State: closed - Opened by stlaz over 1 year ago - 13 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/valid-reference

#99 - Add SCC history field to track former SCC assignments

Pull Request - State: closed - Opened by andreaskaris over 1 year ago - 5 comments
Labels: do-not-merge/hold

#98 - [release-4.12] OCPBUGS-5769: sccadmission: use the actual pod/container seccomp profile to match SCC

Pull Request - State: closed - Opened by openshift-cherrypick-robot over 1 year ago - 21 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/valid-bug, jira/valid-reference

#97 - OCPBUGS-6030: sccadmission: use the actual pod/container seccomp profile to match SCC

Pull Request - State: closed - Opened by stlaz over 1 year ago - 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/valid-reference

#96 - [4.11] OCPBUGS-6683: add message about working with restricted, but not restricted-v2

Pull Request - State: closed - Opened by stlaz over 1 year ago - 19 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, backport-risk-assessed, jira/severity-important, jira/valid-bug, jira/valid-reference

#95 - OCPBUGS-6255: bump(k8s): 1.26

Pull Request - State: closed - Opened by sanchezl almost 2 years ago - 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, jira/valid-bug, jira/severity-critical

#94 - use cached namespaces instead of live lookups for UID ranges

Pull Request - State: closed - Opened by deads2k almost 2 years ago - 3 comments
Labels: approved, lgtm

#93 - SCC errors regarding seccomp are missing provider name

Issue - State: closed - Opened by akalenyu almost 2 years ago - 5 comments
Labels: lifecycle/rotten

#92 - Switch from github.com/hashicorp/golang-lru to k8s.io/utils/lru

Pull Request - State: closed - Opened by soltysh about 2 years ago - 8 comments
Labels: do-not-merge/hold, approved, needs-rebase, lifecycle/rotten

#91 - k8s 1.25.0

Pull Request - State: closed - Opened by soltysh about 2 years ago - 4 comments
Labels: approved, lgtm

#90 - add mechanism to force an SCC selection as the only valid one to consider

Pull Request - State: open - Opened by deads2k about 2 years ago - 10 comments
Labels: approved, needs-rebase

#89 - bug 2117374: add message about working with restricted, but not restricted-v2

Pull Request - State: closed - Opened by deads2k about 2 years ago - 27 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#88 - Add a Getter for `standardSCCNames`

Issue - State: closed - Opened by acornett21 about 2 years ago - 4 comments
Labels: lifecycle/rotten

#87 - Copy k8s.io/kubernetes/pkg/security/podsecuritypolicy/sysctl packge from k8s 1.24 to pkg/securitycontextconstraints/sysctl

Pull Request - State: closed - Opened by soltysh about 2 years ago - 6 comments
Labels: approved, lifecycle/rotten

#86 - [release-4.9] Bug 2104482: fix clusterresourcequota admission

Pull Request - State: closed - Opened by openshift-cherrypick-robot about 2 years ago - 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium, backport-risk-assessed

#85 - Bug 2086519: scc: set container nonroot=true if the pod/container RunAsUser is non-zero

Pull Request - State: closed - Opened by stlaz over 2 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#84 - Bug 2093440: include pluginName in caches not syncd error

Pull Request - State: closed - Opened by neisw over 2 years ago - 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-unspecified

#83 - expect new more restrictive SCCs

Pull Request - State: closed - Opened by stlaz over 2 years ago - 3 comments
Labels: approved, lgtm

#82 - Bug 2079965: Ignore non-linux pods while applying SCCs

Pull Request - State: closed - Opened by ravisantoshgudimetla over 2 years ago - 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#81 - Bug 2086092: bump to k8s v0.24.0

Pull Request - State: closed - Opened by tkashem over 2 years ago - 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#80 - Update owners in subdirectories based on their past commit history

Pull Request - State: closed - Opened by soltysh over 2 years ago - 4 comments
Labels: do-not-merge/hold, approved

#79 - scc, scope authorizer: add the auth team ownership

Pull Request - State: closed - Opened by stlaz over 2 years ago - 3 comments
Labels: approved, lgtm

#78 - SCC admission: check the securityContext.seccompProfile fields

Pull Request - State: closed - Opened by stlaz over 2 years ago - 7 comments
Labels: approved, lgtm

#77 - Add .ci-operator.yaml

Pull Request - State: closed - Opened by damemi almost 3 years ago - 1 comment
Labels: approved, lgtm

#76 - Rebase 1.23

Pull Request - State: closed - Opened by damemi almost 3 years ago - 5 comments
Labels: approved, lgtm

#75 - [release-4.6] Bug 2026380: Image policy should mutate DeploymentConfigs and StatefulSets

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 3 years ago - 12 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, qe-approved, backport-risk-assessed

#74 - Bug 2023342: scc admission: add ephemeralContainers to admission consideration

Pull Request - State: closed - Opened by stlaz almost 3 years ago - 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#73 - [release-4.7] Bug 2022188: Image policy should mutate DeploymentConfigs and StatefulSets

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 3 years ago - 12 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed

#72 - [release-4.8] Bug 2020644: Image policy should mutate DeploymentConfigs and StatefulSets

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 3 years ago - 19 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed

#71 - Add batch/v1.CronJob to pod mutators

Pull Request - State: closed - Opened by soltysh almost 3 years ago - 2 comments
Labels: approved, lgtm

#70 - [release-4.9] Bug 2018442: Image policy should mutate DeploymentConfigs and StatefulSets

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 3 years ago - 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed

#69 - Bug 2000216: Image policy should mutate DeploymentConfigs and StatefulSets

Pull Request - State: closed - Opened by dmage almost 3 years ago - 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#68 - [release-4.8] Bug 2017027: backport SCC fixes

Pull Request - State: closed - Opened by s-urbaniak almost 3 years ago - 46 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed

#67 - [release-4.9] Bug 2017020: backport SCC fixes

Pull Request - State: closed - Opened by s-urbaniak almost 3 years ago - 23 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high, backport-risk-assessed

#66 - Bug 1970331: pkg/securitycontextconstraints: wait for MCS/UID labels on namespaces, bump verbosity on errors

Pull Request - State: closed - Opened by s-urbaniak almost 3 years ago - 15 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#65 - SCCs: handle errors during provider creation, bump log verbosity

Pull Request - State: closed - Opened by s-urbaniak almost 3 years ago - 7 comments
Labels: needs-rebase

#64 - require standard SCCs before evaluating SCC admission

Pull Request - State: closed - Opened by deads2k almost 3 years ago - 4 comments
Labels: approved, lgtm

#63 - [release-4.6] Bug 2008266: bump(k8s): to 1.19.14

Pull Request - State: closed - Opened by damemi about 3 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high

#62 - Bug 1965368: fix clusterresourcequota admission

Pull Request - State: closed - Opened by atiratree about 3 years ago - 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium

#61 - Bug 1986003: bump(k8s.io/*): v0.22.1

Pull Request - State: closed - Opened by soltysh about 3 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#60 - Bug 1996646: pkg/securitycontextconstraints: fix points groups

Pull Request - State: closed - Opened by s-urbaniak about 3 years ago - 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium

#59 - [release-4.6] Bug 1989061: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged

Pull Request - State: closed - Opened by openshift-cherrypick-robot about 3 years ago - 42 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high

#58 - [release-4.7] Bug 1967359: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged

Pull Request - State: closed - Opened by openshift-cherrypick-robot about 3 years ago - 9 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-high

#57 - Bug 1986003: Bump k8s.io to 1.22.0-rc.0

Pull Request - State: closed - Opened by soltysh about 3 years ago - 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#56 - Bug 1981784: fix Deployment creates a huge number of ReplicaSets

Pull Request - State: closed - Opened by atiratree about 3 years ago - 78 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium

#55 - Bug 1981775: fix Deployment creates a huge number of ReplicaSets

Pull Request - State: closed - Opened by atiratree about 3 years ago - 49 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium

#54 - Bug 1981770: fix Deployment creates a huge number of ReplicaSets

Pull Request - State: closed - Opened by atiratree about 3 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium, staff-eng-approved

#53 - [release-4.8] Bug 1977924: Ensure scc compatibility with BoundServiceAccountTokenVolume

Pull Request - State: closed - Opened by openshift-cherrypick-robot over 3 years ago - 9 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent, staff-eng-approved

#52 - Bug 1977920: Ensure scc compatibility with BoundServiceAccountTokenVolume

Pull Request - State: closed - Opened by stlaz over 3 years ago - 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#51 - Bug 1977920: Ensure scc compatibility with BoundServiceAccountTokenVolume

Pull Request - State: closed - Opened by marun over 3 years ago - 8 comments
Labels: lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#50 - Bug 1925180: fix Deployment creates a huge number of ReplicaSets

Pull Request - State: closed - Opened by atiratree over 3 years ago - 4 comments
Labels: approved, lgtm

#49 - Bug 1949050: Bump k8s to 1.21

Pull Request - State: closed - Opened by soltysh over 3 years ago - 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-high

#48 - Bug 1923847: labelselector: fix empty value parsing

Pull Request - State: closed - Opened by sttts over 3 years ago - 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-medium

#47 - Bug 1934400: scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged

Pull Request - State: closed - Opened by sttts over 3 years ago - 10 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#46 - Allow ':' in usernames if they are prepended by 'b64'

Pull Request - State: closed - Opened by stlaz over 3 years ago - 2 comments
Labels: approved, lgtm

#45 - bump(k8s.io/*): 1.21

Pull Request - State: closed - Opened by soltysh over 3 years ago - 3 comments
Labels: approved, lgtm

#44 - Drop batch/v2alpha1 which is not being used

Pull Request - State: closed - Opened by soltysh over 3 years ago - 2 comments
Labels: approved, lgtm

#43 - indicate every attempted security context constraint

Pull Request - State: closed - Opened by deads2k over 3 years ago - 3 comments
Labels: approved, lgtm

#42 - Prototype: Bug 1920699: clusterresourcequota: retry quota object updates on conflict

Pull Request - State: closed - Opened by sttts over 3 years ago - 7 comments
Labels: do-not-merge/hold, bugzilla/invalid-bug, approved, bugzilla/severity-high

#41 - Remove tnozicka from OWNERS

Pull Request - State: closed - Opened by soltysh over 3 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug

#40 - add validation functions for usernames and groupnames

Pull Request - State: closed - Opened by stlaz almost 4 years ago - 2 comments
Labels: approved, lgtm

#39 - Bug 1907373: kube 1.20.0

Pull Request - State: closed - Opened by tnozicka almost 4 years ago - 6 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#38 - scc-admission: add audit annotations with reason

Pull Request - State: closed - Opened by sttts almost 4 years ago - 6 comments
Labels: approved, lgtm

#37 - Update to kubernetes v1.19.2

Pull Request - State: closed - Opened by tnozicka almost 4 years ago - 1 comment
Labels: approved, lgtm

#36 - Bug 1882364: Replace bitbucket.org/ww/goautoneg with its mirror

Pull Request - State: closed - Opened by dmage about 4 years ago - 7 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, bugzilla/severity-medium

#35 - do not ignore the errors when resolving scc providers

Pull Request - State: closed - Opened by vareti about 4 years ago - 3 comments

#34 - Bug 1873043: Bump to kube 1.19.0

Pull Request - State: closed - Opened by marun about 4 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#33 - Switch to klog v2

Pull Request - State: closed - Opened by marun about 4 years ago - 2 comments
Labels: approved, lgtm

#32 - Fix field paths in SCC validation error messages

Pull Request - State: closed - Opened by luksa over 4 years ago - 3 comments
Labels: approved, lgtm, needs-ok-to-test

#31 - bump(*) to v1.19.0-rc.2

Pull Request - State: closed - Opened by marun over 4 years ago - 3 comments
Labels: approved, lgtm

#30 - Bug 1826230: Bump to kube 1.18.3

Pull Request - State: closed - Opened by marun over 4 years ago - 3 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#29 - Bug 1826230: Switch to go-bindata/go-bindata for consistency with upstream

Pull Request - State: closed - Opened by marun over 4 years ago - 4 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#28 - Bug 1826230: Bump kube to v1.18.2

Pull Request - State: closed - Opened by marun over 4 years ago - 5 comments
Labels: approved, lgtm, bugzilla/valid-bug, bugzilla/severity-urgent

#27 - Bump kube to 1.18.0

Pull Request - State: closed - Opened by stlaz over 4 years ago - 2 comments
Labels: approved, lgtm

#26 - rebase on kube 1.18 beta.2

Pull Request - State: closed - Opened by stlaz over 4 years ago - 3 comments
Labels: size/XXL, approved, lgtm

#25 - [4.2] Bug 1757565: Add service/externalips with network.openshift.io group as escalating

Pull Request - State: closed - Opened by stlaz over 4 years ago - 6 comments
Labels: size/XS, bugzilla/valid-bug

#24 - Bug 1801095: Fix imagepolicyresolve plugin to resolve when enabled on an existing object

Pull Request - State: closed - Opened by tnozicka over 4 years ago - 4 comments
Labels: size/L, approved, lgtm, bugzilla/valid-bug

#23 - Bug 1801095: add all supported versions for pod mutators

Pull Request - State: closed - Opened by soltysh over 4 years ago - 5 comments
Labels: size/L, approved, lgtm, bugzilla/valid-bug

#22 - picks kube 1.17.1

Pull Request - State: closed - Opened by p0lyn0mial over 4 years ago - 2 comments
Labels: size/XXL, approved, lgtm

#21 - [release-4.3] Bug 1793587: sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx"

Pull Request - State: closed - Opened by sanchezl over 4 years ago - 8 comments
Labels: approved, lgtm, bugzilla/valid-bug, cherry-pick-approved, size/S

#20 - Bug 1792107: sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx"

Pull Request - State: closed - Opened by sanchezl over 4 years ago - 11 comments
Labels: approved, lgtm, bugzilla/valid-bug, size/S

#19 - Bump: library-go to get verify-deps for go mod

Pull Request - State: closed - Opened by tnozicka almost 5 years ago - 2 comments
Labels: size/XXL, approved, lgtm

#18 - Migrate to go.mod and kubernetes 1.17.0

Pull Request - State: closed - Opened by mfojtik almost 5 years ago - 11 comments
Labels: size/XXL, approved, lgtm

#17 - [release-4.3] Bug 1757553: fix the externalIP scope escalation

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 5 years ago - 10 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug

#16 - Bump to kubernetes-1.17.0-rc.2

Pull Request - State: closed - Opened by tkashem almost 5 years ago - 6 comments
Labels: size/XXL, approved, lgtm

#15 - Bug 1779694: fix the externalIP scope escalation

Pull Request - State: closed - Opened by stlaz almost 5 years ago - 10 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug

#14 - Pin dependencies for release-4.3

Pull Request - State: closed - Opened by mfojtik almost 5 years ago - 4 comments
Labels: size/XXL, approved, lgtm

#13 - Future Release Branches Frozen For Merging | branch:release-4.14 branch:release-4.15

Issue - State: open - Opened by openshift-merge-robot almost 5 years ago - 3 comments
Labels: tide/merge-blocker, lifecycle/rotten

#12 - [openshift-apiserver-4.3-kubernetes-1.17.0-beta.2] Bug 1723248: do not wrap not found when getting a pod

Pull Request - State: closed - Opened by openshift-cherrypick-robot almost 5 years ago - 3 comments
Labels: bugzilla/invalid-bug, size/XS

#11 - Bug 1723248: do not wrap not found when getting a pod

Pull Request - State: closed - Opened by mfojtik almost 5 years ago - 7 comments
Labels: size/XS, approved, lgtm, bugzilla/valid-bug

#10 - Bug 1757553: Escalating external ip 1.17.0 beta.2

Pull Request - State: closed - Opened by stlaz almost 5 years ago - 2 comments
Labels: size/XS, bugzilla/valid-bug

#7 - Future Release Branches Frozen For Merging | branch:release-4.5 branch:release-4.4

Issue - State: closed - Opened by openshift-merge-robot almost 5 years ago
Labels: tide/merge-blocker