Add periodic job for signed kubelet serving certs

Author: g-gaston

config/jobs/kubernetes/sig-auth/signed-kubelet-server-certs.yaml

@@ -0,0 +1,47 @@
+periodics:
+- interval: 6h
+  name: ci-kubernetes-e2e-kind-signed-kubelet-certs
+  cluster: k8s-infra-prow-build
+  annotations:
+    testgrid-dashboards: sig-auth-kubelet-serving-certs
+    description: Runs conformance tests on a cluster with kubelet serving certificates signed by the CP against a latest kubernetes master cluster created with sigs.k8s.io/kind
+  labels:
+    preset-dind-enabled: "true"
+  decorate: true
+  decoration_config:
+    timeout: 60m
+  extra_refs:
+  - org: kubernetes
+    repo: kubernetes
+    base_ref: master
+    path_alias: k8s.io/kubernetes
+    workdir: true
+  - org: kubernetes
+    repo: test-infra
+    base_ref: master
+    path_alias: k8s.io/test-infra
+  spec:
+    containers:
+    - image: gcr.io/k8s-staging-test-infra/krte:v20250717-57d1ca3de9-master
+      command:
+      - wrapper.sh
+      - bash
+      - -c
+      - curl -sSL https://kind.sigs.k8s.io/dl/latest/linux-amd64.tgz | tar xvfz - -C "${PATH%%:*}/" && $GOPATH/src/k8s.io/test-infra/experiment/kubelet-serving-certificates/e2e-k8s.sh
+      env:
+      - name: LABEL_FILTER
+        value: "Feature: isEmpty && !Slow && !Disruptive && !Flaky"
+      - name: PARALLEL
+        value: "true"
+      # we need privileged mode in order to do docker in docker
+      securityContext:
+        privileged: true
+      resources:
+        limits:
+          memory: 9Gi
+          cpu: 7
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: 9Gi
+          cpu: 7

config/testgrids/kubernetes/sig-auth/config.yaml

@@ -22,6 +22,7 @@ dashboards:
 - name: sig-auth-secrets-store-sync-controller
 - name: sig-auth-secrets-store-sync-controller-periodic
 - name: sig-auth-secrets-store-sync-controller-presubmit
+- name: sig-auth-kubelet-serving-certs
 
 dashboard_groups:
 - name: sig-auth
@@ -36,3 +37,4 @@ dashboard_groups:
   - sig-auth-secrets-store-sync-controller
   - sig-auth-secrets-store-sync-controller-periodic
   - sig-auth-secrets-store-sync-controller-presubmit
+  - sig-auth-kubelet-serving-certs