Prepare for blixt image generation

rikatz · rikatz · commit 1d68f8fca611 · 2025-03-13T18:58:00.000-03:00
diff --git a/groups/restrictions.yaml b/groups/restrictions.yaml
@@ -154,6 +154,7 @@ restrictions:
     allowedGroups:
       - "^k8s-infra-push-cni@kubernetes.io$"
       - "^k8s-infra-staging-networking@kubernetes.io$"
+      - "^k8s-infra-staging-blixt@kubernetes.io$"
       - "^k8s-infra-staging-coredns@kubernetes.io$"
       - "^k8s-infra-staging-cpa@kubernetes.io$"
       - "^k8s-infra-staging-dns@kubernetes.io$"
diff --git a/groups/sig-network/groups.yaml b/groups/sig-network/groups.yaml
@@ -77,6 +77,20 @@ groups:
       - srepakula@google.com
       - zihongz@google.com
 
+  - email-id: k8s-infra-staging-blixt@kubernetes.io
+    name: k8s-infra-staging-blixt
+    description: |-
+      ACL for staging blixt images.
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - antonio.ojea.garcia@gmail.com
+      - danwinship@redhat.com
+      - michael.zappa@gmail.com
+      - ricardo.katz@gmail.com
+      - sutt@redhat.com
+      - thockin@google.com
+
   - email-id: k8s-infra-staging-cpa@kubernetes.io
     name: k8s-infra-staging-cpa
     description: |-
diff --git a/infra/gcp/infra.yaml b/infra/gcp/infra.yaml
@@ -303,6 +303,7 @@ infra:
       k8s-staging-apisnoop:
       k8s-staging-artifact-promoter:
       k8s-staging-autoscaling:
+      k8s-staging-blixt:
       k8s-staging-boskos:
       k8s-staging-bom:
       k8s-staging-build-image:
diff --git a/registry.k8s.io/images/k8s-staging-blixt/OWNERS b/registry.k8s.io/images/k8s-staging-blixt/OWNERS
@@ -0,0 +1,10 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+  - aryan9600
+  - astoycos
+  - rikatz
+  - shaneutt
+
+labels:
+- sig/network
diff --git a/registry.k8s.io/images/k8s-staging-blixt/images.yaml b/registry.k8s.io/images/k8s-staging-blixt/images.yaml
@@ -0,0 +1 @@
+# No images yet
diff --git a/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml b/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml
@@ -0,0 +1,48 @@
+# google group for gcr.io/k8s-staging-blixt is k8s-infra-staging-blixt@kubernetes.io
+registries:
+- name: gcr.io/k8s-staging-blixt
+  src: true
+- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com

-Original file line number
+Diff line change
     allowedGroups:
       - "^[email protected]$"
       - "^[email protected]$"
 +      - "^[email protected]$"
       - "^[email protected]$"
       - "^[email protected]$"
       - "^[email protected]$"