releng: Move shadow kubernetes builds to test-infra-trusted cluster

Doing this so we can leverage credentials that actually have access to
write to the k8s-staging-release-test GCS buckets.

Signed-off-by: Stephen Augustus <saugustus@vmware.com>

Author: justaugustus

config/jobs/kubernetes/sig-release/shadow-builds.yaml

@@ -1,8 +1,9 @@
 periodics:
 - interval: 1h
   name: ci-kubernetes-shadow-build
+  cluster: test-infra-trusted
+  decorate: true
   labels:
-    preset-service-account: "true"
     preset-dind-enabled: "true"
   spec:
     containers:
@@ -19,13 +20,23 @@ periodics:
       - --extra-publish-file=k8s-master
       - --hyperkube
       - --registry=gcr.io/k8s-staging-release-test
-        # docker-in-docker needs privileged mode
+      env:
+        - name: GOOGLE_APPLICATION_CREDENTIALS
+          value: /creds/service-account.json
+      volumeMounts:
+        - name: creds
+          mountPath: /creds
+      # docker-in-docker needs privileged mode
       securityContext:
         privileged: true
       resources:
         requests:
           cpu: 4
           memory: "8Gi"
+    volumes:
+      - name: creds
+        secret:
+          secretName: deployer-service-account
   annotations:
     fork-per-release: "true"
     fork-per-release-replacements: "--extra-publish-file=k8s-master -> --extra-publish-file=k8s-beta"
@@ -36,8 +47,9 @@ periodics:
 
 - interval: 5m
   name: ci-kubernetes-shadow-build-fast
+  cluster: test-infra-trusted
+  decorate: true
   labels:
-    preset-service-account: "true"
     preset-dind-enabled: "true"
   spec:
     containers:
@@ -52,13 +64,23 @@ periodics:
       - --release=k8s-staging-release-test
       - --allow-dup
       - --fast
+      env:
+        - name: GOOGLE_APPLICATION_CREDENTIALS
+          value: /creds/service-account.json
+      volumeMounts:
+        - name: creds
+          mountPath: /creds
       # docker-in-docker needs privileged mode
       securityContext:
         privileged: true
       resources:
         requests:
           cpu: 4
           memory: "8Gi"
+    volumes:
+      - name: creds
+        secret:
+          secretName: deployer-service-account
   annotations:
     testgrid-dashboards: sig-release-shadow-master-blocking
     testgrid-tab-name: build-master-fast