diff --git a/groups/restrictions.yaml b/groups/restrictions.yaml index 0a539ae9a4d..cc244437467 100644 --- a/groups/restrictions.yaml +++ b/groups/restrictions.yaml @@ -154,6 +154,7 @@ restrictions: allowedGroups: - "^k8s-infra-push-cni@kubernetes.io$" - "^k8s-infra-staging-networking@kubernetes.io$" + - "^k8s-infra-staging-blixt@kubernetes.io$" - "^k8s-infra-staging-coredns@kubernetes.io$" - "^k8s-infra-staging-cpa@kubernetes.io$" - "^k8s-infra-staging-dns@kubernetes.io$" diff --git a/groups/sig-network/groups.yaml b/groups/sig-network/groups.yaml index fe239d03fcc..c650b2ecb52 100644 --- a/groups/sig-network/groups.yaml +++ b/groups/sig-network/groups.yaml @@ -77,6 +77,20 @@ groups: - srepakula@google.com - zihongz@google.com + - email-id: k8s-infra-staging-blixt@kubernetes.io + name: k8s-infra-staging-blixt + description: |- + ACL for staging blixt images. + settings: + ReconcileMembers: "true" + members: + - antonio.ojea.garcia@gmail.com + - danwinship@redhat.com + - michael.zappa@gmail.com + - ricardo.katz@gmail.com + - sutt@redhat.com + - thockin@google.com + - email-id: k8s-infra-staging-cpa@kubernetes.io name: k8s-infra-staging-cpa description: |- diff --git a/infra/gcp/infra.yaml b/infra/gcp/infra.yaml index 016400db154..6ee754e48b3 100644 --- a/infra/gcp/infra.yaml +++ b/infra/gcp/infra.yaml @@ -303,6 +303,7 @@ infra: k8s-staging-apisnoop: k8s-staging-artifact-promoter: k8s-staging-autoscaling: + k8s-staging-blixt: k8s-staging-boskos: k8s-staging-bom: k8s-staging-build-image: diff --git a/registry.k8s.io/images/k8s-staging-blixt/OWNERS b/registry.k8s.io/images/k8s-staging-blixt/OWNERS new file mode 100644 index 00000000000..dd0c84021b7 --- /dev/null +++ b/registry.k8s.io/images/k8s-staging-blixt/OWNERS @@ -0,0 +1,10 @@ +# See the OWNERS docs at https://go.k8s.io/owners + +approvers: + - aryan9600 + - astoycos + - rikatz + - shaneutt + +labels: +- sig/network \ No newline at end of file diff --git a/registry.k8s.io/images/k8s-staging-blixt/images.yaml b/registry.k8s.io/images/k8s-staging-blixt/images.yaml new file mode 100644 index 00000000000..d48c82d0a75 --- /dev/null +++ b/registry.k8s.io/images/k8s-staging-blixt/images.yaml @@ -0,0 +1 @@ +# No images yet diff --git a/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml b/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml new file mode 100644 index 00000000000..2ebee911d8f --- /dev/null +++ b/registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml @@ -0,0 +1,48 @@ +# google group for gcr.io/k8s-staging-blixt is k8s-infra-staging-blixt@kubernetes.io +registries: +- name: gcr.io/k8s-staging-blixt + src: true +- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com +- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt + service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com