From aecb2a2eaa4c8526e3a404f759b86f5648da7452 Mon Sep 17 00:00:00 2001
From: Aaron Crickenberger <spiffxp@google.com>
Date: Wed, 21 Jul 2021 11:55:40 -0700
Subject: [PATCH] config: add wg-k8s-infra-apps jobs and dashboard

---
 .../wg-k8s-infra/trusted/wg-k8s-infra-apps.sh |  80 +++++
 .../trusted/wg-k8s-infra-apps.yaml            | 334 ++++++++++++++++++
 .../kubernetes/wg-k8s-infa/config.yaml        |   4 +-
 3 files changed, 417 insertions(+), 1 deletion(-)
 create mode 100755 config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.sh
 create mode 100644 config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.yaml

diff --git a/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.sh b/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.sh
new file mode 100755
index 0000000000000..7c3b3b16a8664
--- /dev/null
+++ b/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.sh
@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+# Copyright 2021 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# generates wg-k8s-infra app deployment job configs
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+SCRIPT_DIR=$(dirname "${BASH_SOURCE[0]}")
+
+readonly OUTPUT="${SCRIPT_DIR}/wg-k8s-infra-apps.yaml"
+# list of subdirs in kubernetes/k8s.io/apps
+readonly APPS=(
+    cert-manager
+    gcsweb
+    k8s-io
+    kubernetes-external-secrets
+    node-perf-dash
+    perfdash
+    prow
+    publishing-bot
+    sippy
+    slack-infra
+    triageparty-release
+)
+
+cat >"${OUTPUT}" <<EOF
+# DO NOT EDIT. Automatically generated by $0
+
+postsubmits:
+  kubernetes/k8s.io:
+EOF
+
+for app in "${APPS[@]}"; do
+    cat >>"${OUTPUT}" <<EOF
+    - name: post-k8sio-deploy-app-${app}
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/${app}\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/${app}/deploy.sh if files change in kubernetes/k8s.io/apps/${app}'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/${app}/deploy.sh
+EOF
+done
diff --git a/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.yaml b/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.yaml
new file mode 100644
index 0000000000000..bcf410f17f3bd
--- /dev/null
+++ b/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-apps.yaml
@@ -0,0 +1,334 @@
+# DO NOT EDIT. Automatically generated by ./wg-k8s-infra-apps.sh
+
+postsubmits:
+  kubernetes/k8s.io:
+    - name: post-k8sio-deploy-app-cert-manager
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/cert-manager\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/cert-manager/deploy.sh if files change in kubernetes/k8s.io/apps/cert-manager'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/cert-manager/deploy.sh
+    - name: post-k8sio-deploy-app-gcsweb
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/gcsweb\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/gcsweb/deploy.sh if files change in kubernetes/k8s.io/apps/gcsweb'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/gcsweb/deploy.sh
+    - name: post-k8sio-deploy-app-k8s-io
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/k8s-io\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/k8s-io/deploy.sh if files change in kubernetes/k8s.io/apps/k8s-io'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/k8s-io/deploy.sh
+    - name: post-k8sio-deploy-app-kubernetes-external-secrets
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/kubernetes-external-secrets\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/kubernetes-external-secrets/deploy.sh if files change in kubernetes/k8s.io/apps/kubernetes-external-secrets'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/kubernetes-external-secrets/deploy.sh
+    - name: post-k8sio-deploy-app-node-perf-dash
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/node-perf-dash\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/node-perf-dash/deploy.sh if files change in kubernetes/k8s.io/apps/node-perf-dash'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/node-perf-dash/deploy.sh
+    - name: post-k8sio-deploy-app-perfdash
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/perfdash\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/perfdash/deploy.sh if files change in kubernetes/k8s.io/apps/perfdash'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/perfdash/deploy.sh
+    - name: post-k8sio-deploy-app-prow
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/prow\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/prow/deploy.sh if files change in kubernetes/k8s.io/apps/prow'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/prow/deploy.sh
+    - name: post-k8sio-deploy-app-publishing-bot
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/publishing-bot\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/publishing-bot/deploy.sh if files change in kubernetes/k8s.io/apps/publishing-bot'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/publishing-bot/deploy.sh
+    - name: post-k8sio-deploy-app-sippy
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/sippy\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/sippy/deploy.sh if files change in kubernetes/k8s.io/apps/sippy'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/sippy/deploy.sh
+    - name: post-k8sio-deploy-app-slack-infra
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/slack-infra\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/slack-infra/deploy.sh if files change in kubernetes/k8s.io/apps/slack-infra'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/slack-infra/deploy.sh
+    - name: post-k8sio-deploy-app-triageparty-release
+      cluster: k8s-infra-prow-build-trusted
+      decorate: true
+      max_concurrency: 1
+      run_if_changed: '^apps\/triageparty-release\/'
+      branches:
+        - ^main$
+      annotations:
+        testgrid-create-test-group: 'true'
+        testgrid-dashboards: wg-k8s-infra-apps
+        testgrid-description: 'runs https://git.k8s.io/k8s.io/apps/triageparty-release/deploy.sh if files change in kubernetes/k8s.io/apps/triageparty-release'
+        testgrid-alert-email: k8s-infra-alerts@kubernetes.io
+        testgrid-num-failures-to-alert: '1'
+      rerun_auth_config:
+        github_team_slugs:
+        # proxy for wg-k8s-infra-oncall
+        - org: kubernetes
+          slug: wg-k8s-infra-leads
+        # proxy for test-infra-oncall
+        - org: kubernetes
+          slug: test-infra-admins
+        # TODO: sig-specific team in charge of this app
+        # - org: kubernetes
+        #   slug: sig-foo-bar
+      spec:
+        serviceAccountName: prow-deployer
+        containers:
+        - image: gcr.io/k8s-staging-infra-tools/k8s-infra:latest
+          command:
+          - ./apps/triageparty-release/deploy.sh
diff --git a/config/testgrids/kubernetes/wg-k8s-infa/config.yaml b/config/testgrids/kubernetes/wg-k8s-infa/config.yaml
index 81a8ecd9a2e16..c212d36325d9e 100644
--- a/config/testgrids/kubernetes/wg-k8s-infa/config.yaml
+++ b/config/testgrids/kubernetes/wg-k8s-infa/config.yaml
@@ -3,13 +3,15 @@
 dashboard_groups:
 - name: wg-k8s-infra
   dashboard_names:
+  - wg-k8s-infra-apps
   - wg-k8s-infra-canaries
   - wg-k8s-infra-gcb
   - wg-k8s-infra-groups
-  - wg-k8s-infra-prow
   - wg-k8s-infra-k8sio
+  - wg-k8s-infra-prow
 
 dashboards:
+- name: wg-k8s-infra-apps
 - name: wg-k8s-infra-canaries
 - name: wg-k8s-infra-gcb
 - name: wg-k8s-infra-groups