Add S3 sync GCP service accounts

[upodroid]

Part of #4170

Can someone assign the Storage Object Creator role on the prow bucket for this account?

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: upodroid
Once this PR has been reviewed and has the lgtm label, please assign stevekuznetsov for approval by writing /assign @stevekuznetsov in a comment. For more information see:The Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• infra/gcp/terraform/k8s-infra-prow-build-trusted/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[listx]

Part of #4170

Can someone assign the Storage Object Creator role on the prow bucket for this account?

I don't have enough context to understand what needs to be done here, not to mention whether I even have permissions to do so.

[ameukam]

Part of #4170

Can someone assign the Storage Object Creator role on the prow bucket for this account?

which prow bucket ? AFAIK we don't need specific permissions to push the logs for all the prowjobs. what's particular about this service account ?

/uncc @listx @cjwagner

[upodroid]

Actually, ignore my comment and we don't need this PR.

https://prow.k8s.io/prowjob?prowjob=12723dcb-2e9e-11ed-8857-d61b7b5f68bf I assumed k8s' prow was using Workload Identity for writing to gs://kubernetes-jenkins but it seems we are still using service account keys (spec.decoration_configs.gcs_credentials_secret is set)

/close

[k8s-ci-robot]

@upodroid: Closed this PR.

In response to this:

Actually, ignore my comment and we don't need this PR.

https://prow.k8s.io/prowjob?prowjob=12723dcb-2e9e-11ed-8857-d61b7b5f68bf I assumed k8s' prow was using Workload Identity for writing to gs://kubernetes-jenkins but it seems we are still using service account keys (spec.decoration_configs.gcs_credentials_secret is set)

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.