migrate label sync job to k8s infra

Author: BenTheElder

config/jobs/kubernetes/sig-k8s-infra/trusted/sig-testing-label-sync.yaml

@@ -0,0 +1,42 @@
+periodics:
+- cron: "17 * * * *"  # Every hour at 17 minutes past the hour
+  name: ci-test-infra-label-sync
+  cluster: k8s-infra-prow-build-trusted
+  labels:
+    app: label-sync
+  decorate: true
+  spec:
+    containers:
+    - name: label-sync
+      image: gcr.io/k8s-prow/label_sync:v20240513-a9bd71bf01
+      command:
+      - label_sync
+      args:
+      - --config=/etc/config/labels.yaml
+      - --confirm=true
+      - --orgs=kubernetes,kubernetes-client,kubernetes-csi,kubernetes-sigs
+      - --token=/etc/github/token
+      - --endpoint=http://ghproxy.default.svc.cluster.local
+      - --endpoint=https://api.github.com
+      - --debug
+      volumeMounts:
+      - name: github
+        mountPath: /etc/github
+        readOnly: true
+      - name: config
+        mountPath: /etc/config
+        readOnly: true
+    volumes:
+    - name: github
+      secret:
+        secretName: k8s-github-robot-github-token
+    - name: config
+      configMap:
+        name: label-config
+  annotations:
+    testgrid-num-failures-to-alert: '6'
+    testgrid-alert-stale-results-hours: '12'
+    testgrid-dashboards: sig-testing-misc
+    testgrid-tab-name: label_sync
+    testgrid-alert-email: [email protected], [email protected]
+    description: Runs label_sync to synchronize GitHub repo labels with the label config defined in label_sync/labels.yaml.

config/jobs/kubernetes/test-infra/test-infra-trusted.yaml

@@ -480,47 +480,6 @@ periodics:
     testgrid-tab-name: branchprotector
     testgrid-alert-email: [email protected], [email protected]
     description: Runs Prow's branchprotector to apply configured GitHub status context requirements and merge policies.
-- cron: "17 * * * *"  # Every hour at 17 minutes past the hour
-  name: ci-test-infra-label-sync
-  cluster: test-infra-trusted
-  labels:
-    app: label-sync
-  decorate: true
-  spec:
-    containers:
-    - name: label-sync
-      image: gcr.io/k8s-prow/label_sync:v20240513-a9bd71bf01
-      command:
-      - label_sync
-      args:
-      - --config=/etc/config/labels.yaml
-      - --confirm=true
-      - --orgs=kubernetes,kubernetes-client,kubernetes-csi,kubernetes-sigs
-      - --token=/etc/github/oauth
-      - --endpoint=http://ghproxy.default.svc.cluster.local
-      - --endpoint=https://api.github.com
-      - --debug
-      volumeMounts:
-      - name: oauth
-        mountPath: /etc/github
-        readOnly: true
-      - name: config
-        mountPath: /etc/config
-        readOnly: true
-    volumes:
-    - name: oauth
-      secret:
-        secretName: oauth-token
-    - name: config
-      configMap:
-        name: label-config
-  annotations:
-    testgrid-num-failures-to-alert: '6'
-    testgrid-alert-stale-results-hours: '12'
-    testgrid-dashboards: sig-testing-misc
-    testgrid-tab-name: label_sync
-    testgrid-alert-email: [email protected], [email protected]
-    description: Runs label_sync to synchronize GitHub repo labels with the label config defined in label_sync/labels.yaml.
 - cron: "17 */6 * * *"  # Every 6 hours at 17 minutes past the hour
   name: ci-test-infra-gencred-refresh-kubeconfig
   cluster: test-infra-trusted

label_sync/README.md

@@ -70,9 +70,7 @@ go run ./label_sync \
 
 ## Our Deployment
 
-We run this as a [`Periodic
-job`](https://prow.k8s.io?job=ci-test-infra-label-sync) as configured at
-[test-infra-trusted.yaml](https://github.com/kubernetes/test-infra/blob/0aa0d7b9cee8832e9eca748952131baaa809351c/config/jobs/kubernetes/test-infra/test-infra-trusted.yaml#L702).
+We run this as a [`Periodic job`](https://prow.k8s.io?job=ci-test-infra-label-sync) `ci-test-infra-label-sync` configured under `config/jobs`.
 
 This job read [`labels.yaml`](./labels.yaml) from a ConfigMap that is updated by
 the [prow updateconfig plugin](/prow/plugins/updateconfig).