Skip to content

Commit 9743e0f

Browse files
k8s-ci-robotk8s-ci-robot
authored
Merge pull request #7048 from nilekhc/nilekh/f/add-secerts-store-sync-controller
feat: adds secrets-store-sync-controller project
2 parents 5a05e5c + 683161a commit 9743e0f

File tree

6 files changed

+106
-0
lines changed

6 files changed

+106
-0
lines changed

‎groups/restrictions.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@ restrictions:
4646
- path: "sig-auth/groups.yaml"
4747
allowedGroups:
4848
- "^[email protected]$"
49+
- "^[email protected]$"
4950
- "^[email protected]$"
5051
- "^[email protected]$"
5152
- path: "sig-autoscaling/groups.yaml"

‎groups/sig-auth/groups.yaml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,16 @@ groups:
6262
- [email protected]
6363
- [email protected]
6464

65+
- email-id: [email protected]
66+
name: k8s-infra-staging-secrets-store-sync
67+
description: |-
68+
ACL for staging secrets-store-sync-controller
69+
settings:
70+
ReconcileMembers: "true"
71+
members:
72+
- [email protected]
73+
- [email protected]
74+
6575
#
6676
# k8s-infra gcs write access
6777
#

‎registry.k8s.io/images/k8s-staging-secrets-store-sync/OWNERS

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
# See the OWNERS docs at https://go.k8s.io/owners
2+
3+
approvers:
4+
- aramase
5+
- enj
6+
7+
reviewers:
8+
- aramase
9+
- enj
10+
- nilekhc

‎registry.k8s.io/images/k8s-staging-secrets-store-sync/generate.sh

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
#!/usr/bin/env bash
2+
3+
# Copyright 2024 The Kubernetes Authors.
4+
#
5+
# Licensed under the Apache License, Version 2.0 (the "License");
6+
# you may not use this file except in compliance with the License.
7+
# You may obtain a copy of the License at
8+
#
9+
# http://www.apache.org/licenses/LICENSE-2.0
10+
#
11+
# Unless required by applicable law or agreed to in writing, software
12+
# distributed under the License is distributed on an "AS IS" BASIS,
13+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14+
# See the License for the specific language governing permissions and
15+
# limitations under the License.
16+
17+
set -o errexit
18+
set -o nounset
19+
set -o pipefail
20+
21+
readonly repo="us-central1-docker.pkg.dev/k8s-staging-images/secrets-store-sync"
22+
# release candidates will be created for >=1.0.0 releases that we want published to the prod registry
23+
readonly tag_filter="(tags~^v[0-9]+.[0-9]+.[0-9]+$) OR (tags~^v[0-9]+.[0-9]+.[0-9]+-rc.[0-9]+$ AND tags >= v1.0.0)"
24+
readonly images=(
25+
controller
26+
)
27+
28+
for image in "${images[@]}"; do
29+
echo "- name: ${image}"
30+
echo " dmap:"
31+
gcloud container images list-tags \
32+
"${repo}/$image" \
33+
--format="get(digest, tags)" \
34+
--sort-by="tags" \
35+
--filter="${tag_filter}" | \
36+
sed -e 's/\([^ ]*\)\t\(.*\)/ "\1": [ "\2" ]/'
37+
done

‎registry.k8s.io/images/k8s-staging-secrets-store-sync/images.yaml

Whitespace-only changes.

‎registry.k8s.io/manifests/k8s-staging-secrets-store-sync/promoter-manifest.yaml

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
# google group for gcr.io/k8s-staging-secrets-store-sync is [email protected]
2+
registries:
3+
- name: us-central1-docker.pkg.dev/k8s-staging-images/secrets-store-sync
4+
src: true
5+
- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
6+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
7+
- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
8+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
9+
- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
10+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
11+
- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
12+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
13+
- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
14+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
15+
- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
16+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
17+
- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
18+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
19+
- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
20+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
21+
- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
22+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
23+
- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
24+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
25+
- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
26+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
27+
- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
28+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
29+
- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
30+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
31+
- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
32+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
33+
- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
34+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
35+
- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
36+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
37+
- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
38+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
39+
- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
40+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
41+
- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
42+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
43+
- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
44+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
45+
- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
46+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
47+
- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/secrets-store-sync
48+
service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com

0 commit comments

Comments
 (0)