diff --git a/groups/restrictions.yaml b/groups/restrictions.yaml index 24ce58e67fb..894e80e56f0 100644 --- a/groups/restrictions.yaml +++ b/groups/restrictions.yaml @@ -156,6 +156,7 @@ restrictions: allowedGroups: - "^k8s-infra-push-cni@kubernetes.io$" - "^k8s-infra-staging-networking@kubernetes.io$" + - "^k8s-infra-staging-blixt@kubernetes.io$" - "^k8s-infra-staging-coredns@kubernetes.io$" - "^k8s-infra-staging-cpa@kubernetes.io$" - "^k8s-infra-staging-dns@kubernetes.io$" diff --git a/groups/sig-network/groups.yaml b/groups/sig-network/groups.yaml index fe239d03fcc..c650b2ecb52 100644 --- a/groups/sig-network/groups.yaml +++ b/groups/sig-network/groups.yaml @@ -77,6 +77,20 @@ groups: - srepakula@google.com - zihongz@google.com + - email-id: k8s-infra-staging-blixt@kubernetes.io + name: k8s-infra-staging-blixt + description: |- + ACL for staging blixt images. + settings: + ReconcileMembers: "true" + members: + - antonio.ojea.garcia@gmail.com + - danwinship@redhat.com + - michael.zappa@gmail.com + - ricardo.katz@gmail.com + - sutt@redhat.com + - thockin@google.com + - email-id: k8s-infra-staging-cpa@kubernetes.io name: k8s-infra-staging-cpa description: |- diff --git a/infra/gcp/infra.yaml b/infra/gcp/infra.yaml index 02c56c0ff4f..f7d2c67fa66 100644 --- a/infra/gcp/infra.yaml +++ b/infra/gcp/infra.yaml @@ -303,6 +303,7 @@ infra: k8s-staging-apisnoop: k8s-staging-artifact-promoter: k8s-staging-autoscaling: + k8s-staging-blixt: k8s-staging-boskos: k8s-staging-bom: k8s-staging-build-image: diff --git a/infra/gcp/terraform/k8s-staging-images/registries.tf b/infra/gcp/terraform/k8s-staging-images/registries.tf index ed4564253e8..aee5359fa26 100644 --- a/infra/gcp/terraform/k8s-staging-images/registries.tf +++ b/infra/gcp/terraform/k8s-staging-images/registries.tf @@ -18,6 +18,7 @@ locals { // The groups have to be created before applying this terraform code registries = { aws-encryption-provider = "group:k8s-infra-staging-provider-aws@kubernetes.io" + blixt = "group:k8s-infra-staging-blixt@kubernetes.io" charts = "group:k8s-infra-release-admins@kubernetes.io" cloud-provider-kind = "group:k8s-infra-staging-kind@kubernetes.io" dra-example-driver = "group:k8s-infra-staging-dra-example-driver@kubernetes.io" diff --git a/registry.k8s.io/images/k8s-staging-blixt/OWNERS b/registry.k8s.io/images/k8s-staging-blixt/OWNERS new file mode 100644 index 00000000000..dd0c84021b7 --- /dev/null +++ b/registry.k8s.io/images/k8s-staging-blixt/OWNERS @@ -0,0 +1,10 @@ +# See the OWNERS docs at https://go.k8s.io/owners + +approvers: + - aryan9600 + - astoycos + - rikatz + - shaneutt + +labels: +- sig/network \ No newline at end of file diff --git a/registry.k8s.io/images/k8s-staging-blixt/images.yaml b/registry.k8s.io/images/k8s-staging-blixt/images.yaml new file mode 100644 index 00000000000..d48c82d0a75 --- /dev/null +++ b/registry.k8s.io/images/k8s-staging-blixt/images.yaml @@ -0,0 +1 @@ +# No images yet diff --git a/registry.k8s.io/images/k8s-staging-provider-aws/images.yaml b/registry.k8s.io/images/k8s-staging-provider-aws/images.yaml index ab95b2491e4..56f7d69d67d 100644 --- a/registry.k8s.io/images/k8s-staging-provider-aws/images.yaml +++ b/registry.k8s.io/images/k8s-staging-provider-aws/images.yaml @@ -237,7 +237,10 @@ "sha256:73098fad2ebe298d356c1f595d19651e46d93ff7a5676c7533ff3c2632a6624c": ["v1.31.3"] "sha256:47f861081efbc04bda32b6212ca2c74b5b2ce190e595a285e1b712ca0afec0c7": ["v1.31.4"] "sha256:6f94a695828de888c8efc57e3243db9e788709767f687a6a8cb07c2e42158862": ["v1.31.5"] + "sha256:911a530d2166adb3af8b86e37320b138705bcffba5421a2280473dff9262b5cf": ["v1.31.6"] "sha256:b0271fa14f5f93250a51ad5458c330479a17cd5adc320b8d2a945d777773826d": ["v1.32.0"] "sha256:25bb877bbc690604e99f28a2783e0f81655d9e92851cc3e419eb703817248fb0": ["v1.32.1"] + "sha256:a55f348d2a42937c267fddb567e4c49e39d49de5ae719129f7dfbe8e06eae704": ["v1.32.2"] + "sha256:894dc5ce38646acad312a722e29ee7641aa5032aba5b134ebb98462b492f9bc6": ["v1.32.3"] "sha256:101c01cd5e9fd44331cc0e80d727b476be90018a84c2bd32b161d5c692b49980": ["v1.33.0"] "sha256:131e460809255865b9297d91e35f2c3ff89210bf358037cdb6ae7531c1417217": ["v1.33.0-rc.0"] diff --git a/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml b/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml new file mode 100644 index 00000000000..2ebee911d8f --- /dev/null +++ b/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml @@ -0,0 +1,48 @@ +# google group for gcr.io/k8s-staging-blixt is k8s-infra-staging-blixt@kubernetes.io +registries: +- name: gcr.io/k8s-staging-blixt + src: true +- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com