wrong privs to wrong buckets in main

Author: spiffxp

infra/gcp/ensure-main-project.sh

@@ -71,9 +71,9 @@ readonly DNS_GROUP="k8s-infra-dns-admins@kubernetes.io"
 # - entry syntax is "bucket_name:owners_group" (: is invalid bucket name char)
 readonly TERRAFORM_STATE_BUCKET_ENTRIES=(
     "${LEGACY_CLUSTER_TERRAFORM_BUCKET}:${CLUSTER_ADMINS_GROUP}"
-    k8s-infra-tf-prow-clusters:"${CLUSTER_ADMINS_GROUP}"
-    k8s-infra-tf-public-clusters:k8s-infra-prow-oncall@kubernetes.io
     k8s-infra-tf-aws:k8s-infra-aws-admins@kubernetes.io
+    k8s-infra-tf-prow-clusters:k8s-infra-prow-oncall@kubernetes.io
+    k8s-infra-tf-public-clusters:"${CLUSTER_ADMINS_GROUP}"
     k8s-infra-tf-sandbox-ii:k8s-infra-ii-coop@kubernetes.io
 )