Switch kettle/triage service account keys to Workload Identity.

[cjwagner]

Once this merge I'll do the following:

• For the metrics-kettle job I'll
  • bind the new KSA to the GSA
  • Switch the job to use the KSA rather than a GSA key.
• For the Kettle deployments I'll
  • Create the KSA
  • Bind the KSA to the GSA
  • Manually deploy staging
  • Manually deploy prod

/hold
/assign @MushuEE @fejta

[MushuEE]

/lgtm

[spiffxp]

FWIW we hope to have these moved off to k8s infra soon but lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cjwagner, fejta, spiffxp

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• config/OWNERS [cjwagner,fejta,spiffxp]
• kettle/OWNERS [cjwagner,fejta,spiffxp]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[cjwagner]

/hold cancel

[k8s-ci-robot]

@cjwagner: Updated the job-config configmap in namespace default at cluster test-infra-trusted using the following files:

• key test-infra-periodics.yaml using file config/jobs/kubernetes/test-infra/test-infra-periodics.yaml

In response to this:

Once this merge I'll do the following:

• For the metrics-kettle job I'll
  • bind the new KSA to the GSA
  • Switch the job to use the KSA rather than a GSA key.
• For the Kettle deployments I'll
  • Create the KSA
  • Bind the KSA to the GSA
  • Manually deploy staging
  • Manually deploy prod

/hold
/assign @MushuEE @fejta

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.