add staging project for K8s storage

we'll be using this to move our existing container
images generated by kubernetes incubator.

The projects are being shifted from kubernetes incubator
to kubernetes-sigs and as part of this migration,
we will start using the new image registeries maintained
by community infra with GCB + GCS

Ref: kubernetes-sigs/nfs-ganesha-server-and-external-provisioner#2

Signed-off-by: kmova <kiran.mova@mayadata.io>

groups/groups.yaml

@@ -377,6 +377,22 @@ groups:
     members:
       - bentheelder@google.com
 
+  - email-id: k8s-infra-staging-storage@kubernetes.io
+    name: k8s-infra-staging-storage
+    description: |-
+      ACL for staging K8s Storage artifacts
+    settings:
+      ReconcileMembers: "true"
+    members:
+      - davanum@gmail.com
+      - saadali@google.com
+      - msau@google.com
+      - xingyang105@gmail.com
+      - jsafrane@redhat.com
+      - mattwon@amazon.com
+      - kiran.mova@mayadata.io
+      - hchiramm@redhat.com
+
   #
   # RBAC groups: k8s-infra-rbac-*
   #

infra/gcp/ensure-staging-storage.sh

@@ -85,6 +85,7 @@ STAGING_PROJECTS=(
     scl-image-builder
     service-apis
     slack-infra
+    storage
     txtdirect
 )
 

k8s.gcr.io/images/k8s-staging-storage/OWNERS

@@ -0,0 +1,14 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+# Current set of people in sig-storage-leads from
+# https://github.com/kubernetes/community/blob/master/OWNERS_ALIASES.
+approvers:
+- jsafrane
+- msau42
+- saad-ali
+- xing-yang
+
+reviwers:
+- wongma7
+- kmova
+- humblec

k8s.gcr.io/images/k8s-staging-storage/images.yaml

@@ -0,0 +1 @@
+# No images yet

k8s.gcr.io/manifests/k8s-staging-storage/promoter-manifest.yaml

@@ -0,0 +1,10 @@
+# google group for gcr.io/k8s-staging-storage is k8s-infra-staging-storage@kubernetes.io
+registries:
+- name: gcr.io/k8s-staging-storage
+  src: true
+- name: us.gcr.io/k8s-artifacts-prod/storage
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: eu.gcr.io/k8s-artifacts-prod/storage
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com
+- name: asia.gcr.io/k8s-artifacts-prod/storage
+  service-account: k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com