releng: Migrate image promotion jobs to k8s-infra-prow-build-trusted

[justaugustus]

Part of kubernetes-sigs/promo-tools#269.

With some optimism in seeing ci-k8sio-image-promo-canary pass (job history), I'm opening this as a follow-up to #19789 to officially move image promotion jobs to K8s Infra.

Signed-off-by: Stephen Augustus saugustus@vmware.com

/hold for a few more job runs, just to make sure. I'll also find an image to promote to test the postsubmit.

/assign @spiffxp @dims
cc: @listx @thockin @kubernetes/release-engineering

[justaugustus]

We have another good run of ci-k8sio-image-promo-canary: https://prow.k8s.io/view/gs/kubernetes-jenkins/logs/ci-k8sio-image-promo-canary/1323388224453742592

I've also promoted vulndash to v0.3.0 in kubernetes/k8s.io#1385 and we can see the dry-run promotion postsubmit (post-k8sio-image-promo-canary) run successfully in https://prow.k8s.io/view/gs/kubernetes-jenkins/logs/post-k8sio-image-promo-canary/1323402077963030528:

<snip>
I1102 23:10:35.755900      12 inventory.go:2107] Pending promotions:
I1102 23:10:35.755908      12 inventory.go:2109]   {{gcr.io/k8s-staging-artifact-promoter   true} {vulndash v0.3.0} sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693 {us.gcr.io/k8s-artifacts-prod/artifact-promoter k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com  false} {vulndash v0.3.0}}
I1102 23:10:35.755918      12 inventory.go:2109]   {{gcr.io/k8s-staging-artifact-promoter   true} {vulndash v0.3.0} sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693 {asia.gcr.io/k8s-artifacts-prod/artifact-promoter k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com  false} {vulndash v0.3.0}}
I1102 23:10:35.755936      12 inventory.go:2109]   {{gcr.io/k8s-staging-artifact-promoter   true} {vulndash v0.3.0} sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693 {eu.gcr.io/k8s-artifacts-prod/artifact-promoter k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com  false} {vulndash v0.3.0}}
I1102 23:10:35.755986      12 inventory.go:1911] ---------- BEGIN PROMOTION (DRY RUN) ----------
I1102 23:10:35.756030      12 inventory.go:1659] Request <nil>: OK
I1102 23:10:35.756037      12 inventory.go:1659] Request <nil>: OK
I1102 23:10:35.756042      12 inventory.go:1659] Request <nil>: OK
captured reqs summary:
captured req: gcr.io/k8s-staging-artifact-promoter/vulndash -> asia.gcr.io/k8s-artifacts-prod/artifact-promoter/vulndash: Tag: 'v0.3.0' <ADD> sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693
captured req: gcr.io/k8s-staging-artifact-promoter/vulndash -> eu.gcr.io/k8s-artifacts-prod/artifact-promoter/vulndash: Tag: 'v0.3.0' <ADD> sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693
captured req: gcr.io/k8s-staging-artifact-promoter/vulndash -> us.gcr.io/k8s-artifacts-prod/artifact-promoter/vulndash: Tag: 'v0.3.0' <ADD> sha256:c015bfcc07326924927521709ea04cf19b7ab98ee16d97793a39a038b11a0693
I1102 23:10:35.756107      12 cip.go:418] ********** FINISHED (DRY RUN) **********

[justaugustus]

(All of that to say, we can hold off for a few more runs, but I do believe this can safely be approved to officially migrate the jobs.)

[saschagrunert]

/lgtm

[hasheddan]

/lgtm

[dims]

/approve
/lgtm

[justaugustus]

/hold cancel

[justaugustus]

(Needed to rebase out a conflict after #19811 merged.)

[hasheddan]

/lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dims, hasheddan, justaugustus, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• config/OWNERS [dims]
• config/jobs/kubernetes/wg-k8s-infra/trusted/releng/OWNERS [dims,hasheddan,justaugustus,saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[k8s-ci-robot]

@justaugustus: Updated the job-config configmap in namespace default at cluster test-infra-trusted using the following files:

• key test-infra-trusted.yaml using file config/jobs/kubernetes/test-infra/test-infra-trusted.yaml
• key releng-trusted.yaml using file config/jobs/kubernetes/wg-k8s-infra/trusted/releng/releng-trusted.yaml

In response to this:

Part of kubernetes-sigs/promo-tools#269.

With some optimism in seeing ci-k8sio-image-promo-canary pass (job history), I'm opening this as a follow-up to #19789 to officially move image promotion jobs to K8s Infra.

Signed-off-by: Stephen Augustus saugustus@vmware.com

/hold for a few more job runs, just to make sure. I'll also find an image to promote to test the postsubmit.

/assign @spiffxp @dims
cc: @listx @thockin @kubernetes/release-engineering

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.