move security repo to jenkins temporarily

[BenTheElder]

we need to sort out some more things before this can be on prow :(

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BenTheElder

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these OWNERS Files:

• prow/OWNERS [BenTheElder]

You can indicate your approval by writing /approve in a comment
You can cancel your approval by writing /approve cancel in a comment

[BenTheElder]

/cc @cjwagner @tallclair
I'm only moving some jobs as a proof of concept we can canary test for a short term option. Many jobs that exist now never existed on Jenkins to begin with.

[BenTheElder]

@cjwagner and I have been discussing this.

The first fix necessary for Prow was made here:

• "Add 'hidden_repos' option to deck."
  • this makes sure you can't see the security-repo jobs on prow.k8s.io

The two remaining things Prow needs are:

• "hide pods from hidden repos"
  • (if you guess a prow job UUID [IE 664f37da-e11c-11e7-9214-0a580a6c0130]) you could get the pod spec from deck's rerun endpoint https://prow.k8s.io/rerun?prowjob=664f37da-e11c-11e7-9214-0a580a6c0130
• "support multiple build clusters"
  • This will allow us to put security repo jobs in their own build cluster, which means we can store git fetch credentials there.

[BenTheElder]

See also: #5804 which will ensure that if they are moved to prow they are configured properly and point logs and artifacts to a private bucket. (already merged)

[tallclair]

lgtm. Thanks!

[BenTheElder]

/hold
it seems we're doing pretty well on the track to move things to prow safely, discussed with @cjwagner again today