<commit_before>postsubmits:
  kubernetes/org:
  - name: post-org-peribolos
    cluster: test-infra-trusted
    decorate: true
    max_concurrency: 1
    spec:
      containers:
      - image: launcher.gcr.io/google/bazel
        imagePullPolicy: Always
        command:
        - bazel
        args:
        - run
        - //admin:update
        - --
        - --github-endpoint=http://ghproxy.default.svc.cluster.local
        - --github-endpoint=https://api.github.com
        - --github-token-path=/etc/github-token/oauth
        - --tokens=1200
        - --confirm
        volumeMounts:
        - name: github
          mountPath: /etc/github-token
      volumes:
      - name: github
        secret:
          secretName: oauth-token
  kubernetes/test-infra:
  - name: post-test-infra-deploy-prow
    cluster: test-infra-trusted
    run_if_changed: 'prow/cluster/'
    decorate: true
    branches:
    - master
    spec:
      containers: # https://github.com/bazelbuild/rules_k8s make -C images/gcloud-bazel push PROJECT=k8s-testimages
      - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
        command:
        - prow/deploy.sh
        args:
        - --confirm
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /creds/service-account.json
        volumeMounts:
        - name: creds
          mountPath: /creds
      volumes:
      - name: creds
        secret:
          secretName: deployer-service-account
  - name: post-test-infra-push-prow
    cluster: test-infra-trusted
    # Runs on more than just the Prow dir to include some additional images that we publish to gcr.io/k8s-prow.
    run_if_changed: '^(prow|ghproxy|label_sync|robots/commenter)/'
    decorate: true
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20190420-93fab49-master # whatever image you use here must have bash 4.4+
        command:
        - prow/push.sh
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /creds/service-account.json
        volumeMounts:
        - name: creds
          mountPath: /creds
      volumes:
      - name: creds
        secret:
          secretName: pusher-service-account
  - name: post-test-infra-push-velodrome
    cluster: test-infra-trusted
    run_if_changed: '^velodrome/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "velodrome"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - velodrome/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-boskos
    cluster: test-infra-trusted
    run_if_changed: '^boskos/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "boskos"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - boskos/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kettle
    cluster: test-infra-trusted
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kettle"
    run_if_changed: '^kettle/'
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - kettle/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-planter
    cluster: test-infra-trusted
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "planter"
    run_if_changed: '^planter/'
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - planter/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-triage
    cluster: test-infra-trusted
    run_if_changed: '^triage/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "triage"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - triage/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bazelbuild
    cluster: test-infra-trusted
    run_if_changed: '^images/bazelbuild/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bazelbuild"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bazelbuild/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bazel-krte
    cluster: test-infra-trusted
    run_if_changed: '^images/bazel-krte/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bazel-krte"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bazel-krte/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bigquery
    cluster: test-infra-trusted
    run_if_changed: '^images/bigquery/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bigquery"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bigquery/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bootstrap
    cluster: test-infra-trusted
    run_if_changed: '^(images/bootstrap|scenarios)/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bootstrap"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bootstrap/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-cluster-api
    cluster: test-infra-trusted
    run_if_changed: '^images/cluster-api/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "cluster-api"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/cluster-api/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-gcloud
    cluster: test-infra-trusted
    run_if_changed: '^images/gcloud/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "gcloud"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/gcloud/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubekins-e2e
    cluster: test-infra-trusted
    run_if_changed: '^(images/kubekins-e2e|kubetest|boskos)/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubekins-e2e"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubekins-e2e/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubekins-test
    cluster: test-infra-trusted
    run_if_changed: '^images/kubekins-test/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubekins-test"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubekins-test/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubemci
    cluster: test-infra-trusted
    run_if_changed: '^images/kubemci/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubemci"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubemci/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-test-gubernator
    cluster: test-infra-trusted
    run_if_changed: '^images/pull-test-infra-gubernator/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "gubernator"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/pull-test-infra-gubernator/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-image-builder
    cluster: test-infra-trusted
    run_if_changed: '^images/builder/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "image-builder"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/builder/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  kubernetes/k8s.io:
  - name: post-k8sio-cip
    cluster: test-infra-trusted
    decorate: true
    run_if_changed: "k8s.gcr.io/.*/manifest.yaml"
    # Never run more than 1 job at a time. This is because we don't want to run
    # into a case where an older manifest PR merge gets run last (after a newer
    # one).
    max_concurrency: 1
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/cip-demo-staging/cip:20190423-v2.0.1-0-g4db722e
        command:
        - multirun.sh
        args:
        - /app/cip-docker-image.binary
        - k8s.gcr.io/k8s-staging-cluster-api/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        - k8s.gcr.io/k8s-staging-coredns/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        - k8s.gcr.io/k8s-staging-csi/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        env:
        - name: CIP_OPTS
          value: "-dry-run=false"
        volumeMounts:
        - name: k8s-gcr-prod-service-account-creds
          mountPath: /etc/k8s-gcr-prod-service-account
          readOnly: true
      volumes:
      - name: k8s-gcr-prod-service-account-creds
        secret:
          secretName: k8s-gcr-prod-service-account
  kubernetes/community:
  - name: post-community-tempelis-apply
    cluster: test-infra-trusted
    decorate: true
    branches:
      - ^master$
    run_if_changed: '^communication/slack-config'
    spec:
      containers:
        - image: gcr.io/k8s-tempelis/tempelis:v20190412-7c9b6e51
          command:
            - /tempelis
          args:
            - --config=communication/slack-config/
            - --restrictions=communication/slack-config/restrictions.yaml
            - --auth=/etc/slack-auth/auth.json
            - --dry-run=false
          volumeMounts:
            - name: tempelis-creds
              mountPath: /etc/slack-auth
              readOnly: true
      volumes:
        - name: tempelis-creds
          secret:
            secretName: slack-tempelis-auth


periodics:
- interval: 24h
  name: ci-org-peribolos
  cluster: test-infra-trusted
  decorate: true
  max_concurrency: 1
  extra_refs:
  - org: kubernetes
    repo: org
    base_ref: master
  spec:
    containers:
    - image: launcher.gcr.io/google/bazel
      imagePullPolicy: Always
      command:
      - bazel
      args:
      - run
      - //admin:update
      - --
      - --github-endpoint=http://ghproxy.default.svc.cluster.local
      - --github-endpoint=https://api.github.com
      - --github-token-path=/etc/github-token/oauth
      - --tokens=1200
      - --confirm
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
    volumes:
    - name: github
      secret:
        secretName: oauth-token
- cron: "05 15 1-7 * 1"  # Run at 7:05 PST (15:05 UTC) on first monthly monday.
  name: ci-test-infra-autoupdate-minor
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - hack/autodeps.sh
      args:
      - k8s-ci-robot
      - /etc/github-token/oauth
      - "Kubernetes Prow Robot"
      - "<EMAIL>"
      - "--minor"
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:
        secretName: k8s-ci-robot-ssh-keys
        defaultMode: 0400
- cron: "05 15 * * 1"  # Run at 7:05 PST (15:05 UTC) every Monday
  name: ci-test-infra-autoupdate-patch
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - hack/autodeps.sh
      args:
      - k8s-ci-robot
      - /etc/github-token/oauth
      - "Kubernetes Prow Robot"
      - "<EMAIL>"
      - "--patch"
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:
        secretName: k8s-ci-robot-ssh-keys
        defaultMode: 0400
- cron: "05 15 * * 1-5"  # Run at 7:05 PST (15:05 UTC) Mon-Fri
  name: ci-test-infra-autobump-prow
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - prow/autobump.sh
      args:
      - k8s-ci-robot
      - /etc/github-token/oauth
      - "Kubernetes Prow Robot"
      - "<EMAIL>"
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:<commit_msg>Use //experiment/autobumper instead of prow/autobump.sh<commit_after>postsubmits:
  kubernetes/org:
  - name: post-org-peribolos
    cluster: test-infra-trusted
    decorate: true
    max_concurrency: 1
    spec:
      containers:
      - image: launcher.gcr.io/google/bazel
        imagePullPolicy: Always
        command:
        - bazel
        args:
        - run
        - //admin:update
        - --
        - --github-endpoint=http://ghproxy.default.svc.cluster.local
        - --github-endpoint=https://api.github.com
        - --github-token-path=/etc/github-token/oauth
        - --tokens=1200
        - --confirm
        volumeMounts:
        - name: github
          mountPath: /etc/github-token
      volumes:
      - name: github
        secret:
          secretName: oauth-token
  kubernetes/test-infra:
  - name: post-test-infra-deploy-prow
    cluster: test-infra-trusted
    run_if_changed: 'prow/cluster/'
    decorate: true
    branches:
    - master
    spec:
      containers: # https://github.com/bazelbuild/rules_k8s make -C images/gcloud-bazel push PROJECT=k8s-testimages
      - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
        command:
        - prow/deploy.sh
        args:
        - --confirm
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /creds/service-account.json
        volumeMounts:
        - name: creds
          mountPath: /creds
      volumes:
      - name: creds
        secret:
          secretName: deployer-service-account
  - name: post-test-infra-push-prow
    cluster: test-infra-trusted
    # Runs on more than just the Prow dir to include some additional images that we publish to gcr.io/k8s-prow.
    run_if_changed: '^(prow|ghproxy|label_sync|robots/commenter)/'
    decorate: true
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20190420-93fab49-master # whatever image you use here must have bash 4.4+
        command:
        - prow/push.sh
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /creds/service-account.json
        volumeMounts:
        - name: creds
          mountPath: /creds
      volumes:
      - name: creds
        secret:
          secretName: pusher-service-account
  - name: post-test-infra-push-velodrome
    cluster: test-infra-trusted
    run_if_changed: '^velodrome/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "velodrome"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - velodrome/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-boskos
    cluster: test-infra-trusted
    run_if_changed: '^boskos/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "boskos"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - boskos/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kettle
    cluster: test-infra-trusted
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kettle"
    run_if_changed: '^kettle/'
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - kettle/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-planter
    cluster: test-infra-trusted
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "planter"
    run_if_changed: '^planter/'
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - planter/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-triage
    cluster: test-infra-trusted
    run_if_changed: '^triage/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "triage"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - triage/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bazelbuild
    cluster: test-infra-trusted
    run_if_changed: '^images/bazelbuild/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bazelbuild"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bazelbuild/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bazel-krte
    cluster: test-infra-trusted
    run_if_changed: '^images/bazel-krte/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bazel-krte"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bazel-krte/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bigquery
    cluster: test-infra-trusted
    run_if_changed: '^images/bigquery/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bigquery"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bigquery/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-bootstrap
    cluster: test-infra-trusted
    run_if_changed: '^(images/bootstrap|scenarios)/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "bootstrap"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/bootstrap/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-cluster-api
    cluster: test-infra-trusted
    run_if_changed: '^images/cluster-api/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "cluster-api"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/cluster-api/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-gcloud
    cluster: test-infra-trusted
    run_if_changed: '^images/gcloud/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "gcloud"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/gcloud/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubekins-e2e
    cluster: test-infra-trusted
    run_if_changed: '^(images/kubekins-e2e|kubetest|boskos)/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubekins-e2e"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubekins-e2e/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubekins-test
    cluster: test-infra-trusted
    run_if_changed: '^images/kubekins-test/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubekins-test"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubekins-test/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-kubemci
    cluster: test-infra-trusted
    run_if_changed: '^images/kubemci/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "kubemci"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/kubemci/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-test-gubernator
    cluster: test-infra-trusted
    run_if_changed: '^images/pull-test-infra-gubernator/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "gubernator"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/pull-test-infra-gubernator/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  - name: post-test-infra-push-image-builder
    cluster: test-infra-trusted
    run_if_changed: '^images/builder/'
    annotations:
      testgrid-dashboards: "sig-testing-images"
      testgrid-tab-name: "image-builder"
    decorate: true
    branches:
      - master
    spec:
      containers:
        - image: gcr.io/k8s-testimages/gcloud-bazel:v20190402-v0.1-35-g8b2d62a
          command:
            - images/builder/ci-runner.sh
          args:
            - --scratch-bucket=gs://k8s-testimages-scratch
            - --project=k8s-testimages
            - images/builder/
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /creds/service-account.json
          volumeMounts:
            - name: creds
              mountPath: /creds
      volumes:
        - name: creds
          secret:
            secretName: deployer-service-account
  kubernetes/k8s.io:
  - name: post-k8sio-cip
    cluster: test-infra-trusted
    decorate: true
    run_if_changed: "k8s.gcr.io/.*/manifest.yaml"
    # Never run more than 1 job at a time. This is because we don't want to run
    # into a case where an older manifest PR merge gets run last (after a newer
    # one).
    max_concurrency: 1
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/cip-demo-staging/cip:20190423-v2.0.1-0-g4db722e
        command:
        - multirun.sh
        args:
        - /app/cip-docker-image.binary
        - k8s.gcr.io/k8s-staging-cluster-api/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        - k8s.gcr.io/k8s-staging-coredns/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        - k8s.gcr.io/k8s-staging-csi/manifest.yaml,/etc/k8s-gcr-prod-service-account/service-account.json
        env:
        - name: CIP_OPTS
          value: "-dry-run=false"
        volumeMounts:
        - name: k8s-gcr-prod-service-account-creds
          mountPath: /etc/k8s-gcr-prod-service-account
          readOnly: true
      volumes:
      - name: k8s-gcr-prod-service-account-creds
        secret:
          secretName: k8s-gcr-prod-service-account
  kubernetes/community:
  - name: post-community-tempelis-apply
    cluster: test-infra-trusted
    decorate: true
    branches:
      - ^master$
    run_if_changed: '^communication/slack-config'
    spec:
      containers:
        - image: gcr.io/k8s-tempelis/tempelis:v20190412-7c9b6e51
          command:
            - /tempelis
          args:
            - --config=communication/slack-config/
            - --restrictions=communication/slack-config/restrictions.yaml
            - --auth=/etc/slack-auth/auth.json
            - --dry-run=false
          volumeMounts:
            - name: tempelis-creds
              mountPath: /etc/slack-auth
              readOnly: true
      volumes:
        - name: tempelis-creds
          secret:
            secretName: slack-tempelis-auth


periodics:
- interval: 24h
  name: ci-org-peribolos
  cluster: test-infra-trusted
  decorate: true
  max_concurrency: 1
  extra_refs:
  - org: kubernetes
    repo: org
    base_ref: master
  spec:
    containers:
    - image: launcher.gcr.io/google/bazel
      imagePullPolicy: Always
      command:
      - bazel
      args:
      - run
      - //admin:update
      - --
      - --github-endpoint=http://ghproxy.default.svc.cluster.local
      - --github-endpoint=https://api.github.com
      - --github-token-path=/etc/github-token/oauth
      - --tokens=1200
      - --confirm
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
    volumes:
    - name: github
      secret:
        secretName: oauth-token
- cron: "05 15 1-7 * 1"  # Run at 7:05 PST (15:05 UTC) on first monthly monday.
  name: ci-test-infra-autoupdate-minor
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - hack/autodeps.sh
      args:
      - k8s-ci-robot
      - /etc/github-token/oauth
      - "Kubernetes Prow Robot"
      - "<EMAIL>"
      - "--minor"
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:
        secretName: k8s-ci-robot-ssh-keys
        defaultMode: 0400
- cron: "05 15 * * 1"  # Run at 7:05 PST (15:05 UTC) every Monday
  name: ci-test-infra-autoupdate-patch
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - hack/autodeps.sh
      args:
      - k8s-ci-robot
      - /etc/github-token/oauth
      - "Kubernetes Prow Robot"
      - "<EMAIL>"
      - "--patch"
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:
        secretName: k8s-ci-robot-ssh-keys
        defaultMode: 0400
- cron: "05 15 * * 1-5"  # Run at 7:05 PST (15:05 UTC) Mon-Fri
  name: ci-test-infra-autobump-prow
  cluster: test-infra-trusted
  decorate: true
  extra_refs:
  - org: kubernetes
    repo: test-infra
    base_ref: master
  spec:
    containers:
    - image: gcr.io/k8s-testimages/bazelbuild:v20190401-918468dbb-0.24.0
      command:
      - bazel
      - run
      - //experiment/autobumper
      - --
      args:
      - --github-login=k8s-ci-robot
      - --github-token=/etc/github-token/oauth
      - --git-name=<NAME>
      - --git-email=<EMAIL>
      volumeMounts:
      - name: github
        mountPath: /etc/github-token
        readOnly: true
      - name: ssh
        mountPath: /root/.ssh
    volumes:
    - name: github
      secret:
        secretName: oauth-token
    - name: ssh
      secret:
{'fraction_non_alphanumeric': 0.10615864444651336, 'fraction_numerical': 0.02388045805790895, 'mean_word_length': 1.6567524115755627, 'pattern_counts': {'":': 0, '<': 10, '<?xml version=': 0, '>': 10, 'https://': 6, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5104465', 'n_tokens_mistral': 14928, 'n_tokens_neox': 14192, 'n_words': 2267}