setup registry - k8s-staging-node-readiness-controller

Author: Priyankasaggu11929

groups/restrictions.yaml

@@ -185,6 +185,7 @@ restrictions:
       - "^k8s-infra-staging-kmm@kubernetes.io$"
       - "^k8s-infra-staging-nfd@kubernetes.io$"
       - "^k8s-infra-staging-npd@kubernetes.io$"
+      - "^k8s-infra-staging-nrc@kubernetes.io$"
       - "^k8s-infra-staging-sp-operator@kubernetes.io$"
       - "^k8s-infra-staging-dra-example-driver@kubernetes.io$"
   - path: "sig-release/groups.yaml"

groups/sig-node/groups.yaml

@@ -157,6 +157,20 @@ groups:
       - patrick.ohly@intel.com
       - pkrishn@google.com
 
+  - email-id: k8s-infra-staging-nrc@kubernetes.io
+    name: k8s-infra-staging-nrc
+    description: |-
+      ACL for pushing node-readiness-controller (nrc) artifacts
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - ajaysundar.k@gmail.com
+      - dawnchen@google.com
+      - mpatel@redhat.com
+      - pehunt@redhat.com
+      - s.kanzhelev@gmail.com
+      - timallclair@gmail.com
+
   #
   # k8s-infra gcs write access
   #

infra/gcp/terraform/k8s-staging-images/registries.tf

@@ -42,6 +42,7 @@ locals {
     lws                             = "group:k8s-infra-staging-lws@kubernetes.io"
     maintainer-tools                = "group:k8s-infra-staging-maintainer-tools@kubernetes.io"
     minikube                        = "group:k8s-infra-staging-minikube@kubernetes.io"
+    node-readiness-controller       = "group:k8s-infra-staging-nrc@kubernetes.io"
     gateway-api-inference-extension = "group:sig-apps-leads@kubernetes.io"
     secrets-store-sync              = "group:k8s-infra-staging-secrets-store-sync@kubernetes.io"
     test-infra                      = "group:k8s-infra-staging-test-infra@kubernetes.io"

registry.k8s.io/images/k8s-staging-node-readiness-controller/OWNERS

@@ -0,0 +1,12 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+  - ajaysundark
+  - dchen1107
+  - haircommander
+  - mrunalp
+  - SergeyKanzhelev
+  - tallclair
+
+labels:
+- sig/node

registry.k8s.io/images/k8s-staging-node-readiness-controller/images.yaml

@@ -0,0 +1 @@
+# No images yet

registry.k8s.io/manifests/k8s-staging-node-readiness-controller/promoter-manifest.yaml

@@ -0,0 +1,49 @@
+# google group for gcr.io/k8s-staging-node-readiness-controller is k8s-infra-staging-nrc@kubernetes.io
+registries:
+  - name: gcr.io/k8s-staging-node-readiness-controller
+    src: true
+  - name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+  - name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/node-readiness-controller
+    service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+imagesPath: "../../images/k8s-staging-kmm/images.yaml"