<commit_before>presubmits:
  # Check that changes to promoter manifests are valid.
  kubernetes/k8s.io:
  - name: pull-k8sio-cip
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    skip_report: false
    run_if_changed: 'k8s.gcr.io/((images/.*/images\.yaml)|(manifests/.*/promoter-manifest\.yaml))'
    max_concurrency: 10
    branches:
    - ^main$
    spec:
      containers:
      - image: us.gcr.io/k8s-artifacts-prod/artifact-promoter/cip:v2.4.1
        command:
        - cip
        args:
        # Pod Utilities already sets pwd to
        # /home/prow/go/src/github.com/{{.Org}}/{{.Repo}}, so just '.' should
        # suffice, but it's nice to be explicit.
        - -thin-manifest-dir=/home/prow/go/src/github.com/kubernetes/k8s.io/k8s.gcr.io
  # Check that images to be promoted are free of fixable vulnerabilities
  - name: pull-k8sio-cip-vuln
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    optional: true
    skip_report: false
    run_if_changed: 'k8s.gcr.io/((images/.*/images\.yaml)|(manifests/.*/promoter-manifest\.yaml))'
    max_concurrency: 10
    branches:
    - ^vuln-check-test$
    spec:
      serviceAccountName: k8s-infra-gcr-vuln-scanning
      containers:
      - image: us.gcr.io/k8s-artifacts-prod/artifact-promoter/cip:v2.4.1
        command:
        - cip
        args:
        - -thin-manifest-dir=/home/prow/go/src/github.com/kubernetes/k8s.io/k8s.gcr.io
        - -vuln-severity-threshold=1
  # Check that changes to backup scripts are valid.
  - name: pull-k8sio-backup
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    run_if_changed: '^infra/gcp/backup_tools/'
    max_concurrency: 1
    branches:
    - ^main$
    spec:
      serviceAccountName: k8s-infra-gcr-promoter-test
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210226-c001921-1.17
        command:
        - infra/gcp/backup_tools/backup_test.sh
        env:
        # Even though GOPATH is set to /go in the kubekins-e2e image, we set it
        # here anyway in case the underlying image changes (the backup_test.sh
        # script needs it to be defined).
        - name: GOPATH
          value: /go
  kubernetes-sigs/k8s-container-image-promoter:
  # Run promoter e2e tests.
  - name: pull-cip-e2e
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    skip_report: false
    always_run: true
    # Because we run e2e tests, we cannot run more than 1 instance at a time
    # (the e2e test resources are not isolated across test runs).
    max_concurrency: 1
    labels:
      preset-dind-enabled: "true"
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210615-c973edd-master
        command:
        - runner.sh
        args:
        - "./test-e2e/cip/e2e-entrypoint-from-container.sh"
        env:
        - name: CIP_E2E_KEY_FILE
          value: "/etc/k8s-cip-test-prod-service-account/service-account.json"
        volumeMounts:
        - name: k8s-cip-test-prod-service-account-creds
          mountPath: /etc/k8s-cip-test-prod-service-account
          readOnly: true
        # docker-in-docker needs privileged mode
        securityContext:
          privileged: true
      volumes:
      - name: k8s-cip-test-prod-service-account-creds
        secret:
          secretName: k8s-cip-test-prod-service-account
    annotations:
      testgrid-dashboards: sig-release-releng-presubmits
      testgrid-num-columns-recent: '30'
      testgrid-alert-email: <EMAIL>
  - name: pull-cip-auditor-e2e
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    skip_report: false
    always_run: true
    # Because we run e2e tests, we cannot run more than 1 instance at a time
    # (the e2e test resources are not isolated across test runs).
    max_concurrency: 1
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210615-c973edd-master
        command:
        - "./test-e2e/cip-auditor/entrypoint-from-container.sh"
        env:
        - name: CIP_E2E_KEY_FILE
          value: "/etc/k8s-gcr-audit-test-prod-service-account/service-account.json"
        volumeMounts:
        - name: k8s-gcr-audit-test-prod-service-account-creds
          mountPath: /etc/k8s-gcr-audit-test-prod-service-account
          readOnly: true
      volumes:
      - name: k8s-gcr-audit-test-prod-service-account-creds
        secret:
          secretName: k8s-gcr-audit-test-prod-service-account
    annotations:
      testgrid-dashboards: sig-release-releng-presubmits
      testgrid-num-columns-recent: '30'
      testgrid-alert-email: <EMAIL>
  - name: pull-cip-image-cip
    cluster: k8s-infra-prow-build
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    # TODO(releng): Run unconditionally once the job runs successfully
    always_run: false
    spec:
      serviceAccountName: gcb-builder-releng-test
      containers:
        - image: gcr.io/k8s-testimages/image-builder:v20210607-0d70d1d
          command:
            - /run.sh
          args:
            - --project=k8s-staging-releng-test<commit_msg>Update container-image-promoter.yaml<commit_after>presubmits:
  # Check that changes to promoter manifests are valid.
  kubernetes/k8s.io:
  - name: pull-k8sio-cip
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    skip_report: false
    run_if_changed: 'k8s.gcr.io/((images/.*/images\.yaml)|(manifests/.*/promoter-manifest\.yaml))'
    max_concurrency: 10
    branches:
    - ^main$
    spec:
      containers:
      - image: us.gcr.io/k8s-artifacts-prod/artifact-promoter/cip:v2.4.1
        command:
        - cip
        args:
        # Pod Utilities already sets pwd to
        # /home/prow/go/src/github.com/{{.Org}}/{{.Repo}}, so just '.' should
        # suffice, but it's nice to be explicit.
        - -thin-manifest-dir=/home/prow/go/src/github.com/kubernetes/k8s.io/k8s.gcr.io
  # Check that images to be promoted are free of fixable vulnerabilities
  - name: pull-k8sio-cip-vuln
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    optional: true
    skip_report: false
    run_if_changed: 'k8s.gcr.io/((images/.*/images\.yaml)|(manifests/.*/promoter-manifest\.yaml))'
    max_concurrency: 10
    branches:
    - ^vuln-check-test$
    spec:
      serviceAccountName: k8s-infra-gcr-vuln-scanning
      containers:
      - image: us.gcr.io/k8s-artifacts-prod/artifact-promoter/cip:v2.4.1
        command:
        - cip
        args:
        - -thin-manifest-dir=/home/prow/go/src/github.com/kubernetes/k8s.io/k8s.gcr.io
        - -vuln-severity-threshold=1
  # Check that changes to backup scripts are valid.
  - name: pull-k8sio-backup
    annotations:
      testgrid-create-test-group: 'true'
      testgrid-dashboards: wg-k8s-infra-k8sio
    decorate: true
    run_if_changed: '^infra/gcp/backup_tools/'
    max_concurrency: 1
    branches:
    - ^main$
    spec:
      serviceAccountName: k8s-infra-gcr-promoter-test
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210226-c001921-1.17
        command:
        - infra/gcp/backup_tools/backup_test.sh
        env:
        # Even though GOPATH is set to /go in the kubekins-e2e image, we set it
        # here anyway in case the underlying image changes (the backup_test.sh
        # script needs it to be defined).
        - name: GOPATH
          value: /go
  kubernetes-sigs/k8s-container-image-promoter:
  # Run promoter e2e tests.
  - name: pull-cip-e2e
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    skip_report: false
    always_run: true
    # Because we run e2e tests, we cannot run more than 1 instance at a time
    # (the e2e test resources are not isolated across test runs).
    max_concurrency: 1
    labels:
      preset-dind-enabled: "true"
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210615-c973edd-master
        command:
        - runner.sh
        args:
        - "./test-e2e/cip/e2e-entrypoint-from-container.sh"
        env:
        - name: CIP_E2E_KEY_FILE
          value: "/etc/k8s-cip-test-prod-service-account/service-account.json"
        volumeMounts:
        - name: k8s-cip-test-prod-service-account-creds
          mountPath: /etc/k8s-cip-test-prod-service-account
          readOnly: true
        # docker-in-docker needs privileged mode
        securityContext:
          privileged: true
      volumes:
      - name: k8s-cip-test-prod-service-account-creds
        secret:
          secretName: k8s-cip-test-prod-service-account
    annotations:
      testgrid-dashboards: sig-release-releng-presubmits
      testgrid-num-columns-recent: '30'
      testgrid-alert-email: <EMAIL>
  - name: pull-cip-auditor-e2e
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    skip_report: false
    always_run: true
    # Because we run e2e tests, we cannot run more than 1 instance at a time
    # (the e2e test resources are not isolated across test runs).
    max_concurrency: 1
    labels:
      preset-dind-enabled: "true"
    branches:
    - ^master$
    spec:
      containers:
      - image: gcr.io/k8s-testimages/kubekins-e2e:v20210615-c973edd-master
        command:
        - "./test-e2e/cip-auditor/entrypoint-from-container.sh"
        env:
        - name: CIP_E2E_KEY_FILE
          value: "/etc/k8s-gcr-audit-test-prod-service-account/service-account.json"
        volumeMounts:
        - name: k8s-gcr-audit-test-prod-service-account-creds
          mountPath: /etc/k8s-gcr-audit-test-prod-service-account
          readOnly: true
        # docker-in-docker needs privileged mode
        securityContext:
          privileged: true
      volumes:
      - name: k8s-gcr-audit-test-prod-service-account-creds
        secret:
          secretName: k8s-gcr-audit-test-prod-service-account
    annotations:
      testgrid-dashboards: sig-release-releng-presubmits
      testgrid-num-columns-recent: '30'
      testgrid-alert-email: <EMAIL>
  - name: pull-cip-image-cip
    cluster: k8s-infra-prow-build
    decorate: true
    path_alias: "sigs.k8s.io/k8s-container-image-promoter"
    # TODO(releng): Run unconditionally once the job runs successfully
    always_run: false
    spec:
      serviceAccountName: gcb-builder-releng-test
      containers:
        - image: gcr.io/k8s-testimages/image-builder:v20210607-0d70d1d
          command:
            - /run.sh
          args:
            - --project=k8s-staging-releng-test
{'fraction_non_alphanumeric': 0.11284690314280463, 'fraction_numerical': 0.023892666789193162, 'mean_word_length': 2.2701322115384617, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 7, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '6615300', 'n_tokens_mistral': 4015, 'n_tokens_neox': 3864, 'n_words': 702}