releng: Fix args for debian-{base,iptables} and pause image builds

[justaugustus]

Needed for the debian-iptables build in kubernetes/kubernetes#90697.

There were some image build failures after we merged #17476, #17485, and kubernetes/kubernetes#90665:

• https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/post-kubernetes-push-image-debian-base/1256507463046270979
• https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/post-kubernetes-push-image-debian-iptables/1256507463046270981

These jobs need to use the root of kubernetes/kubernetes as the build directory (instead of build/<image-name>) because they're dependent on https://github.com/kubernetes/kubernetes/tree/master/third_party/multiarch/qemu-user-static.

So, we end up with a config similar to the e2e-test-image jobs:

test-infra/config/jobs/image-pushing/k8s-staging-e2e-test-images.yaml

Lines 27 to 35 in 8fe3dec

	args:
	# this is the project GCB will run in, which is the same as the GCR
	# images are pushed to.
	- --project=k8s-staging-e2e-test-images
	# This is the same as above, but with -gcb appended.
	- --scratch-bucket=gs://k8s-staging-e2e-test-images-gcb
	- --env-passthrough=PULL_BASE_REF
	- --build-dir=.
	- test/images

The pause image build job didn't run because we moved trusted clusters in #17489 and there was a service account mismatch, which is fixed here.

Signed-off-by: Stephen Augustus saugustus@vmware.com

/assign @BenTheElder @dims
cc: @kubernetes/release-engineering
/sig release
/area release-eng

[hasheddan]

/lgtm

[cpanato]

/lgtm

[saschagrunert]

/lgtm

[dims]

/approve
/lgtm

[BenTheElder]

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BenTheElder, cpanato, dims, hasheddan, justaugustus, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• config/jobs/image-pushing/OWNERS [BenTheElder]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[k8s-ci-robot]

@justaugustus: Updated the job-config configmap in namespace default at cluster default using the following files:

• key k8s-staging-build-image.yaml using file config/jobs/image-pushing/k8s-staging-build-image.yaml
• key k8s-staging-kubernetes.yaml using file config/jobs/image-pushing/k8s-staging-kubernetes.yaml

In response to this:

Needed for the debian-iptables build in kubernetes/kubernetes#90697.

There were some image build failures after we merged #17476, #17485, and kubernetes/kubernetes#90665:

• https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/post-kubernetes-push-image-debian-base/1256507463046270979
• https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/post-kubernetes-push-image-debian-iptables/1256507463046270981

These jobs need to use the root of kubernetes/kubernetes as the build directory (instead of build/<image-name>) because they're dependent on https://github.com/kubernetes/kubernetes/tree/master/third_party/multiarch/qemu-user-static.

So, we end up with a config similar to the e2e-test-image jobs:

test-infra/config/jobs/image-pushing/k8s-staging-e2e-test-images.yaml

Lines 27 to 35 in 8fe3dec

	args:
	# this is the project GCB will run in, which is the same as the GCR
	# images are pushed to.
	- --project=k8s-staging-e2e-test-images
	# This is the same as above, but with -gcb appended.
	- --scratch-bucket=gs://k8s-staging-e2e-test-images-gcb
	- --env-passthrough=PULL_BASE_REF
	- --build-dir=.
	- test/images

The pause image build job didn't run because we moved trusted clusters in #17489 and there was a service account mismatch, which is fixed here.

Signed-off-by: Stephen Augustus saugustus@vmware.com

/assign @BenTheElder @dims
cc: @kubernetes/release-engineering
/sig release
/area release-eng

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.