Create dra-example-driver staging repo

nojnhuh · nojnhuh · commit 836121094a33 · 2025-02-12T14:53:43.000-06:00
diff --git a/groups/restrictions.yaml b/groups/restrictions.yaml
@@ -326,6 +326,7 @@ restrictions:
       - "^wg-lts-leads@kubernetes.io$"
   - path: "wg-device-management/groups.yaml"
     allowedGroups:
+      - "^k8s-infra-staging-dra-example-driver@kubernetes.io$"
       - "^wg-device-management@kubernetes.io$"
       - "^wg-device-management-leads@kubernetes.io$"
   - path: "wg-etcd-operator/groups.yaml"
diff --git a/groups/wg-device-management/groups.yaml b/groups/wg-device-management/groups.yaml
@@ -34,3 +34,29 @@ groups:
       - patrick.ohly@intel.com
     members:
       - wg-device-management-leads@kubernetes.io
+
+  #
+  # k8s-staging write access for WG-owned subprojects
+  #
+  # Each group here represents privileged access to a staging project,
+  # allowing the members to directly write to GCS and GCR within the
+  # project, as well as trigger Cloud Build within the project. Ideally
+  # this level access is used solely for troubleshooting purposes.
+  #
+  # Membership should correspond roughly to subproject owners for the set of
+  # subproject artifacts being stored in a given staging project
+  #
+
+  - email-id: k8s-infra-staging-dra-example-driver@kubernetes.io
+    name: k8s-infra-staging-dra-example-driver
+    description: |-
+      ACL for pushing dra-example-driver artifacts
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - alexey.fomenko@intel.com
+      - eduard.bartosh@intel.com
+      - elezar@nvidia.com
+      - johuhn@microsoft.com
+      - klueska@gmail.com
+      - patrick.ohly@intel.com
diff --git a/infra/gcp/terraform/k8s-staging-images/registries.tf b/infra/gcp/terraform/k8s-staging-images/registries.tf
@@ -20,6 +20,7 @@ locals {
     aws-encryption-provider         = "group:k8s-infra-staging-provider-aws@kubernetes.io"
     charts                          = "group:k8s-infra-release-admins@kubernetes.io"
     cloud-provider-kind             = "group:k8s-infra-staging-kind@kubernetes.io"
+    dra-example-driver              = "group:k8s-infra-staging-dra-example-driver@kubernetes.io"
     etcd-manager                    = "group:k8s-infra-staging-etcd-manager@kubernetes.io"
     ingress-nginx                   = "group:k8s-infra-staging-ingress-nginx@kubernetes.io"
     kind                            = "group:k8s-infra-staging-kind@kubernetes.io"
diff --git a/registry.k8s.io/images/k8s-staging-dra-example-driver/OWNERS b/registry.k8s.io/images/k8s-staging-dra-example-driver/OWNERS
@@ -0,0 +1,11 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+- bart0sh
+- byako
+- elezar
+- klueska
+- nojnhuh
+- pohly
+labels:
+- wg/device-management
diff --git a/registry.k8s.io/images/k8s-staging-dra-example-driver/images.yaml b/registry.k8s.io/images/k8s-staging-dra-example-driver/images.yaml
diff --git a/registry.k8s.io/manifests/k8s-staging-dra-example-driver/promoter-manifest.yaml b/registry.k8s.io/manifests/k8s-staging-dra-example-driver/promoter-manifest.yaml
@@ -0,0 +1,48 @@
+# google group for us-central1-docker.pkg.dev/k8s-staging-images/dra-example-driver is k8s-infra-staging-kind@kubernetes.io
+registries:
+- name: us-central1-docker.pkg.dev/k8s-staging-images/dra-example-driver
+  src: true
+- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/dra-example-driver
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com

-Original file line number
+Diff line change
       - "^[email protected]$"
   - path: "wg-device-management/groups.yaml"
     allowedGroups:
 +      - "^[email protected]$"
       - "^[email protected]$"
       - "^[email protected]$"
   - path: "wg-etcd-operator/groups.yaml"
-Original file line number
+Diff line change
     aws-encryption-provider         = "group:[email protected]"
     charts                          = "group:[email protected]"
     cloud-provider-kind             = "group:[email protected]"
 +    dra-example-driver              = "group:[email protected]"
     etcd-manager                    = "group:[email protected]"
     ingress-nginx                   = "group:[email protected]"
     kind                            = "group:[email protected]"