k8s.io/test-infra@v0.0.0-20240520184403-27c6b4c223d8/config/jobs/kubernetes/sig-k8s-infra/trusted/sig-k8s-infra-registry.yaml (about)

     1  periodics:
     2    - name: ar-to-s3-sync
     3      interval: 5m
     4      cluster: k8s-infra-prow-build-trusted
     5      decorate: true
     6      max_concurrency: 1
     7      annotations:
     8        testgrid-dashboards: sig-k8s-infra-k8sio
     9        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
    10        testgrid-num-failures-to-alert: "1"
    11      extra_refs:
    12        - org: kubernetes
    13          repo: registry.k8s.io
    14          base_ref: main
    15      rerun_auth_config:
    16        github_team_slugs:
    17          - org: kubernetes
    18            slug: sig-k8s-infra-leads
    19      spec:
    20        serviceAccountName: s3-sync
    21        containers:
    22          - name: s3-sync
    23            image: gcr.io/k8s-staging-infra-tools/k8s-infra@sha256:48fb967be4c36da551584c3004330c7ce37568e4226ea7233eeb08c979374bc6
    24            command:
    25              - /bin/bash
    26              - -c
    27              - |
    28                aws sts get-caller-identity
    29                make geranos
    30                REALLY_UPLOAD=true ./bin/geranos
    31            env:
    32              - name: AWS_ROLE_ARN
    33                value: arn:aws:iam::513428760722:role/registry.k8s.io_s3writer
    34              - name: AWS_WEB_IDENTITY_TOKEN_FILE
    35                value: /var/run/secrets/aws-iam-token/serviceaccount/token
    36              - name: AWS_REGION
    37                value: us-east-2
    38            volumeMounts:
    39              - mountPath: /var/run/secrets/aws-iam-token/serviceaccount
    40                name: aws-iam-token
    41                readOnly: true
    42        volumes:
    43          - name: aws-iam-token
    44            projected:
    45              defaultMode: 420
    46              sources:
    47                - serviceAccountToken:
    48                    audience: sts.amazonaws.com
    49                    expirationSeconds: 86400
    50                    path: token