image-build/capg: add periodic job to build gce images

[cpanato]

• remove the temporary job created
• add a periodic job to build the gce images

/hold for kubernetes-sigs/image-builder#445

/assign @CecileRobertMichon @dims @codenrhoden

TODO:

• create a GCP project to have the images published
• change this periodic to use the project and publish nightly builds

[dims]

/retitle [WIP] image-build/capg: add periodic job to build gce images

[dims]

@cpanato needs a rebase

[dims]

@cpanato there are still 2 issues we will have to work through:

• Does the service account that gets injected have access to the CAPG staging cluster
• Does the CAPG staging cluster have gcloud compute api service enabled.

[codenrhoden]

I honestly didn't know that image-pushing config was even there for GCP (not an area that I've ever been involved with). But what's happening here makes sense to me.

[cpanato]

Added the same owners as described https://github.com/kubernetes/test-infra/blob/master/config/jobs/kubernetes-sigs/image-builder/OWNERS
Don't know if need to add the CAPG maintainers as well

added the periodic job inside the wg-infra trusted, see the PR for the enable the API and associations for the trusted cluster: kubernetes/k8s.io#2025

cc @dims @ameukam @spiffxp

[ameukam]

@cpanato I don't particularly mind having this job here but I think https://github.com/kubernetes/test-infra/tree/master/config/jobs/kubernetes-sigs/image-builder is a better place for this job.

[cpanato]

@cpanato I don't particularly mind having this job here but I think https://github.com/kubernetes/test-infra/tree/master/config/jobs/kubernetes-sigs/image-builder is a better place for this job.

But to run in the trusted cluster i need to add the job in this directory right? Only if dont need to run in the trused cluster then i can rearrange and update the service account attribution.

Did that because Aaron post in the PR the trusted thing

[cpanato]

/hold cancel

kubernetes/k8s.io#2025 is merged and we can merge kubernetes-sigs/image-builder#445

so I think we are good to move on for the validation part
@ameukam @spiffxp

[ameukam]

/approve
/lgtm
(not sure if I have the permission)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ameukam, cpanato

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• config/jobs/kubernetes/wg-k8s-infra/trusted/OWNERS [ameukam]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ameukam]

@cpanato I don't particularly mind having this job here but I think https://github.com/kubernetes/test-infra/tree/master/config/jobs/kubernetes-sigs/image-builder is a better place for this job.

But to run in the trusted cluster i need to add the job in this directory right? Only if dont need to run in the trused cluster then i can rearrange and update the service account attribution.

You don't necessarily need to add a job in this specific directory to make it run in k8s-infra-prow-build-trusted. For instance post-cluster-api-push-images is in a different directory:

test-infra/config/jobs/image-pushing/k8s-staging-cluster-api.yaml

Lines 3 to 6 in c7b24a4

	kubernetes-sigs/cluster-api:
	- name: post-cluster-api-push-images
	cluster: k8s-infra-prow-build-trusted
	annotations:

[k8s-ci-robot]

@cpanato: Updated the job-config configmap in namespace default at cluster test-infra-trusted using the following files:

• key image-builder-periodics.yaml using file config/jobs/kubernetes/wg-k8s-infra/trusted/image-builder/image-builder-periodics.yaml

Details

In response to this:

• remove the temporary job created
• add a periodic job to build the gce images

/hold for kubernetes-sigs/image-builder#445

/assign @CecileRobertMichon @dims @codenrhoden

TODO:

• create a GCP project to have the images published
• change this periodic to use the project and publish nightly builds

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[cpanato]

@ameukam ahh, will open a PR to move this out