k8s.io
k8s.io copied to clipboard
Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites
Part of umbrella issue to migrate away from google.com gcp projects: https://github.com/kubernetes/k8s.io/issues/1469 We didn't notice this because it doesn't show up anywhere in kubernetes/test-infra, but apparently kubebuilder uses a google-internal...
if possible, any configuration change introducted should be validated with presubmits prowjobs. There are different and tools we can explore : - Globally, define policies with [rego language](https://www.openpolicyagent.org/docs/latest/policy-language/) and enforce...
(ghProxy)[https://github.com/kubernetes/test-infra/tree/master/ghproxy] is a reverse proxy HTTP cache optimized for use with the GitHub API. Jobs that manage our github orgs and repos (label_sync, peribolos) greatly benefit from this, and at...
Related: - Followup to: https://github.com/kubernetes/community/issues/6036 - Related to: https://github.com/kubernetes/steering/issues/213 We should rename this account to match the fact that it belongs to a SIG and not a WG. While we're...
We currently set a 60d retention on staging storage and staging gcb storage, but don't enforce any retention for images. Staging images should be discouraged from being used and therefore...
Part of umbrella issue to migrate the kubernetes project away from use of GCP project google-containers: #1469 - [x] Create a new GCS bucket writable by k8s-infra-prow-build GKE cluster (`kops-ci`...
Kubernetes is a global project and used in enough mission-critical environments that support non-prow-related issues should have 24x7 on-call rotation (activable by any Kubernetes member) with a primary and standby....
Followup based on https://github.com/kubernetes/k8s.io/pull/2005 For whatever reason, I am still confused by exactly which permissions are available to whom on which GCS buckets. I've started consulting [a spreadsheet I put...
This allows people such as myself (who definitely like seeing tests pass, but rely on CI to run all the things) to merge PR's that pass presubmits, but will fail...
In response to the [recent Docker Hub breach](https://success.docker.com/article/docker-hub-user-notification) we have rotated credentials on https://hub.docker.com/u/kubernetes, and removed all repositories contained therein. None of the kubernetes GitHub orgs use Docker Hub for...