k8s.io

k8s.io copied to clipboard

Allow kgolab to write to k8s-staging-autoscaling GCR

8

Reason: to help with releases, in particular to release new Addon Resizer for https://github.com/kubernetes/autoscaler/pull/5234.

kgolab

Add myself to oci-proxy-admins group

4

Need this for #3904 sandbox instance of oci-proxy. /cc @ameukam

upodroid

Add staging gcp project for zeitgeist

1

we need to start releasing and promoting the artifacts we generate in the zeitgeist project (https://github.com/kubernetes-sigs/zeitgeist) so we need to create a staging gcp project with bucket for that :)...

cpanato

Migrate away from google.com gcp project kubernetes-node-e2e-images

39

Part of umbrella issue to migrate away from google.com gcp projects: https://github.com/kubernetes/k8s.io/issues/1469 Part of umbrella to migrate kubernetes e2e test images/registries to community-owned infrastructure: https://github.com/kubernetes/k8s.io/issues/1458 This project is referenced in...

spiffxp

SSL certificate for k8s-infra-prow.k8s.io failed to get renewed

7

#### What happened: The certificate for k8s-infra-prow.k8s.io is expired and is not automatically renewed #### What you expected to happen: SSL certificate for k8s-infra-prow.k8s.io is valid ##### Environment: Project :...

ameukam

feat: changes to the CAPA staging group

3

Changes to the membership of `k8s-infra-staging-cluster-api-aws` based on the maintainers of CAPA as of 2022-10-19. Until https://github.com/kubernetes-sigs/cluster-api-provider-aws/pull/3775 merges: /hold Signed-off-by: Richard Case

richardcase

feat: updates for CAPA image promotion

3

Changes to the **OWNERS** for the CAPA image promotion. Correct as of 2022-10-19. Until https://github.com/kubernetes-sigs/cluster-api-provider-aws/pull/3775 merges: /hold Signed-off-by: Richard Case

richardcase

Migrate away from google.com gcp project k8s-gubernator

13

Part of umbrella issue to migrate away from google.com gcp projects: https://github.com/kubernetes/k8s.io/issues/1469 Umbrella issue for migrating or removing dependence on all of the kubernetes project infra that lives under k8s-gubernator...

spiffxp

audit followup: some k8s-staging-* buckets give "roles/storage.legacyBucketReader" and some do not

11

I don't know which is right, but some have: ``` { "members": [ + "group:[email protected]", "projectViewer:k8s-staging-XYZ ], "role": "roles/storage.legacyBucketReader" }, ``` and some don't

thockin

audit followup: some k8s-staging-* projects have differing IAM

13

Example: ``` k8s-staging-addon-manager --- /dev/fd/63 2021-02-16 16:28:00.085969274 -0800 +++ /dev/fd/62 2021-02-16 16:28:00.089969238 -0800 @@ -177,19 +177,19 @@ }, { "members": [ - "serviceAccount:[email protected]" + "serviceAccount:[email protected]" ], - "role": "roles/containerscanning.ServiceAgent" +...

thockin