Prepare for blixt image generation

Author: Ricardo Pchevuzinske Katz

groups/restrictions.yaml

@@ -156,6 +156,7 @@ restrictions:
     allowedGroups:
       - "^[email protected]$"
       - "^[email protected]$"
+      - "^[email protected]$"
       - "^[email protected]$"
       - "^[email protected]$"
       - "^[email protected]$"

groups/sig-network/groups.yaml

@@ -77,6 +77,20 @@ groups:
       - [email protected]
       - [email protected]
 
+  - email-id: [email protected]
+    name: k8s-infra-staging-blixt
+    description: |-
+      ACL for staging blixt images.
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - [email protected]
+      - [email protected]
+      - [email protected]
+      - [email protected]
+      - [email protected]
+      - [email protected]
+
   - email-id: [email protected]
     name: k8s-infra-staging-cpa
     description: |-

infra/gcp/infra.yaml

@@ -303,6 +303,7 @@ infra:
       k8s-staging-apisnoop:
       k8s-staging-artifact-promoter:
       k8s-staging-autoscaling:
+      k8s-staging-blixt:
       k8s-staging-boskos:
       k8s-staging-bom:
       k8s-staging-build-image:

infra/gcp/terraform/k8s-staging-images/registries.tf

@@ -18,6 +18,7 @@ locals {
   // The groups have to be created before applying this terraform code
   registries = {
     aws-encryption-provider         = "group:[email protected]"
+    blixt                           = "group:[email protected]"
     charts                          = "group:[email protected]"
     cloud-provider-kind             = "group:[email protected]"
     dra-example-driver              = "group:[email protected]"

registry.k8s.io/images/k8s-staging-blixt/OWNERS

@@ -0,0 +1,10 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+  - aryan9600
+  - astoycos
+  - rikatz
+  - shaneutt
+
+labels:
+- sig/network

registry.k8s.io/images/k8s-staging-blixt/images.yaml

@@ -0,0 +1 @@
+# No images yet

registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml

@@ -0,0 +1,48 @@
+# google group for gcr.io/k8s-staging-blixt is [email protected]
+registries:
+- name: gcr.io/k8s-staging-blixt
+  src: true
+- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com