Prepare for blixt image generation

groups/restrictions.yaml

@@ -156,6 +156,7 @@ restrictions:
     allowedGroups:
       - "^k8s-infra-push-cni@kubernetes.io$"
       - "^k8s-infra-staging-networking@kubernetes.io$"
+      - "^k8s-infra-staging-blixt@kubernetes.io$"
       - "^k8s-infra-staging-coredns@kubernetes.io$"
       - "^k8s-infra-staging-cpa@kubernetes.io$"
       - "^k8s-infra-staging-dns@kubernetes.io$"

groups/sig-network/groups.yaml

@@ -77,6 +77,20 @@ groups:
       - srepakula@google.com
       - zihongz@google.com
 
+  - email-id: k8s-infra-staging-blixt@kubernetes.io
+    name: k8s-infra-staging-blixt
+    description: |-
+      ACL for staging blixt images.
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - antonio.ojea.garcia@gmail.com
+      - danwinship@redhat.com
+      - michael.zappa@gmail.com
+      - ricardo.katz@gmail.com
+      - sutt@redhat.com
+      - thockin@google.com
+
   - email-id: k8s-infra-staging-cpa@kubernetes.io
     name: k8s-infra-staging-cpa
     description: |-

infra/gcp/infra.yaml

@@ -303,6 +303,7 @@ infra:
       k8s-staging-apisnoop:
       k8s-staging-artifact-promoter:
       k8s-staging-autoscaling:
+      k8s-staging-blixt:
       k8s-staging-boskos:
       k8s-staging-bom:
       k8s-staging-build-image:

infra/gcp/terraform/k8s-staging-images/registries.tf

@@ -18,6 +18,7 @@ locals {
   // The groups have to be created before applying this terraform code
   registries = {
     aws-encryption-provider         = "group:k8s-infra-staging-provider-aws@kubernetes.io"
+    blixt                           = "group:k8s-infra-staging-blixt@kubernetes.io"
     charts                          = "group:k8s-infra-release-admins@kubernetes.io"
     cloud-provider-kind             = "group:k8s-infra-staging-kind@kubernetes.io"
     dra-example-driver              = "group:k8s-infra-staging-dra-example-driver@kubernetes.io"

registry.k8s.io/images/k8s-staging-blixt/OWNERS

@@ -0,0 +1,10 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+  - aryan9600
+  - astoycos
+  - rikatz
+  - shaneutt
+
+labels:
+- sig/network

registry.k8s.io/images/k8s-staging-blixt/images.yaml

@@ -0,0 +1 @@
+# No images yet

registry.k8s.io/images/k8s-staging-provider-aws/images.yaml

@@ -237,7 +237,10 @@
     "sha256:73098fad2ebe298d356c1f595d19651e46d93ff7a5676c7533ff3c2632a6624c": ["v1.31.3"]
     "sha256:47f861081efbc04bda32b6212ca2c74b5b2ce190e595a285e1b712ca0afec0c7": ["v1.31.4"]
     "sha256:6f94a695828de888c8efc57e3243db9e788709767f687a6a8cb07c2e42158862": ["v1.31.5"]
+    "sha256:911a530d2166adb3af8b86e37320b138705bcffba5421a2280473dff9262b5cf": ["v1.31.6"]
     "sha256:b0271fa14f5f93250a51ad5458c330479a17cd5adc320b8d2a945d777773826d": ["v1.32.0"]
     "sha256:25bb877bbc690604e99f28a2783e0f81655d9e92851cc3e419eb703817248fb0": ["v1.32.1"]
+    "sha256:a55f348d2a42937c267fddb567e4c49e39d49de5ae719129f7dfbe8e06eae704": ["v1.32.2"]
+    "sha256:894dc5ce38646acad312a722e29ee7641aa5032aba5b134ebb98462b492f9bc6": ["v1.32.3"]
     "sha256:101c01cd5e9fd44331cc0e80d727b476be90018a84c2bd32b161d5c692b49980": ["v1.33.0"]
     "sha256:131e460809255865b9297d91e35f2c3ff89210bf358037cdb6ae7531c1417217": ["v1.33.0-rc.0"]

registry.k8s.io/manifests/k8s-staging-blixt/promoter-manifest.yaml

@@ -0,0 +1,48 @@
+# google group for gcr.io/k8s-staging-blixt is k8s-infra-staging-blixt@kubernetes.io
+registries:
+- name: gcr.io/k8s-staging-blixt
+  src: true
+- name: asia-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia-northeast2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: australia-southeast1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-north1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-southwest1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west3-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west8-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west9-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: europe-west10-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: southamerica-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-central1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east4-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-east5-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-south1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west1-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: us-west2-docker.pkg.dev/k8s-artifacts-prod/images/blixt
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com