-
Notifications
You must be signed in to change notification settings - Fork 852
/
Copy pathrestrictions.yaml
339 lines (339 loc) · 15.2 KB
/
restrictions.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
restrictions:
- path: "committee-code-of-conduct/groups.yaml"
allowedGroups:
- "^conduct@kubernetes.io$"
- "^conduct-emeritus@kubernetes.io$"
- path: "committee-security-response/groups.yaml"
allowedGroups:
- "^distributors-announce@kubernetes.io$"
- "^security@kubernetes.io$"
- "^security-discuss-private@kubernetes.io$"
- "^k8s-infra-artifact-security@kubernetes.io$"
- path: "committee-steering/groups.yaml"
allowedGroups:
- "^steering-emeritus@kubernetes.io$"
- "^steering-private@kubernetes.io$"
- "^steering@kubernetes.io$"
- "^election@kubernetes.io$"
- path: "groups.yaml"
allowedGroups:
- "^leads@kubernetes.io$"
- path: "sig-api-machinery/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-etcd@kubernetes.io$"
- "^k8s-infra-staging-storage-migrator@kubernetes.io$"
- "^sig-api-machinery-cel-dev@kubernetes.io$"
- "^k8s-infra-staging-kubebuilder@kubernetes.io$"
- "^sig-api-machinery-leads@kubernetes.io$"
- "^sig-api-machinery@kubernetes.io$"
- path: "sig-apps/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-examples@kubernetes.io$"
- "^k8s-infra-staging-jobset@kubernetes.io$"
- "^k8s-infra-staging-lws@kubernetes.io$"
- "^sig-apps@kubernetes.io$"
- "^sig-apps-leads@kubernetes.io$"
- path: "sig-architecture/groups.yaml"
allowedGroups:
- "^k8s-infra-conform-inspur@kubernetes.io$"
- "^k8s-infra-conform-capi-openstack@kubernetes.io$"
- "^k8s-infra-conform-cri-o@kubernetes.io$"
- "^k8s-infra-conform-huaweicloud@kubernetes.io$"
- "^k8s-infra-conform-provider-openstack@kubernetes.io$"
- "^k8s-infra-conform-s390x-k8s@kubernetes.io$"
- "^k8s-infra-staging-apisnoop@kubernetes.io$"
- "^k8s-infra-code-organization@kubernetes.io$"
- "^k8s-infra-prod-readiness@kubernetes.io$"
- "^k8s-infra-keps@kubernetes.io$"
- "^sig-architecture@kubernetes.io$"
- "^sig-architecture-leads@kubernetes.io$"
- path: "sig-auth/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-csi-secrets-store@kubernetes.io$"
- "^k8s-infra-staging-secrets-store-sync@kubernetes.io$"
- "^k8s-infra-staging-multitenancy@kubernetes.io$"
- "^k8s-infra-staging-sig-auth@kubernetes.io$"
- "^sig-auth@kubernetes.io$"
- "^sig-auth-leads@kubernetes.io$"
- path: "sig-autoscaling/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-autoscaling@kubernetes.io$"
- "^sig-autoscaling@kubernetes.io$"
- "^sig-autoscaling-leads@kubernetes.io$"
- "^sig-autoscaling-karpenter-leads@kubernetes.io$"
- path: "sig-cli/groups.yaml"
allowedGroups:
- "^sig-cli@kubernetes.io$"
- "^sig-cli-leads@kubernetes.io$"
- "^k8s-infra-staging-kustomize@kubernetes.io$"
- "^k8s-infra-staging-krm-functions@kubernetes.io$"
- "^k8s-infra-rbac-triageparty-cli@kubernetes.io$"
- path: "sig-cloud-provider/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-provider-aws@kubernetes.io$"
- "^k8s-infra-staging-provider-os@kubernetes.io$"
- "^k8s-infra-staging-provider-azure@kubernetes.io$"
- "^k8s-infra-staging-cloud-provider-gcp@kubernetes.io$"
- "^k8s-infra-staging-cloud-provider-ibm@kubernetes.io$"
- "^k8s-infra-staging-cloud-pv-vsphere@kubernetes.io$"
- "^k8s-infra-staging-kas-network-proxy@kubernetes.io$"
- "^k8s-infra-staging-cloud-pv-labeler@kubernetes.io$"
- "^sig-cloud-provider@kubernetes.io$"
- "^sig-cloud-provider-leads@kubernetes.io$"
- path: "sig-cluster-lifecycle/groups.yaml"
allowedGroups:
- "^sig-cluster-lifecycle@kubernetes.io$"
- "^sig-cluster-lifecycle-leads@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-alerts@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-operator-alerts@kubernetes.io$"
- "^k8s-infra-staging-capi-operator@kubernetes.io$"
- "^sig-cluster-lifecycle-kubeadm-alerts@kubernetes.io$"
- "^k8s-infra-kops-maintainers@kubernetes.io$"
- "^k8s-infra-staging-addon-manager@kubernetes.io$"
- "^k8s-infra-staging-capi-cloudstack@kubernetes.io$"
- "^k8s-infra-staging-capi-docker@kubernetes.io$"
- "^k8s-infra-staging-capi-ibmcloud@kubernetes.io$"
- "^k8s-infra-staging-capi-ipam-ic@kubernetes.io$"
- "^k8s-infra-staging-capi-kubeadm@kubernetes.io$"
- "^k8s-infra-staging-capi-openstack@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-openstack-alerts@kubernetes.io$"
- "^k8s-infra-staging-capi-vsphere@kubernetes.io$"
- "^k8s-infra-staging-cluster-api@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-helm@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-aws@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-aws-alerts@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-do@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-azure@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-gcp@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-gcp-alerts@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-do-alerts@kubernetes.io$"
- "^k8s-infra-staging-cluster-api-nested@kubernetes.io$"
- "^k8s-infra-staging-cluster-addons@kubernetes.io$"
- "^k8s-infra-staging-etcdadm@kubernetes.io$"
- "^k8s-infra-staging-etcd-manager@kubernetes.io$"
- "^k8s-infra-staging-kops@kubernetes.io$"
- "^k8s-infra-staging-kubeadm@kubernetes.io$"
- "^k8s-infra-staging-scl-image-builder@kubernetes.io$"
- "^sig-cluster-lifecycle-cluster-api-vsphere-alerts@kubernetes.io$"
- path: "sig-contributor-experience/groups.yaml"
allowedGroups:
- "^community@kubernetes.io$"
- "^dev@kubernetes.io$"
- "^github@kubernetes.io$"
- "^github-managment-alerts@kubernetes.io$"
- "^lwkd@kubernetes.io$"
- "^moderators@kubernetes.io$"
- "^sig-contribex@kubernetes.io$"
- "^sig-contribex-leads@kubernetes.io$"
- "^summit-team@kubernetes.io$"
- "^k8s-infra-rbac-elekto@kubernetes.io$"
- "^k8s-infra-rbac-slack-infra@kubernetes.io$"
- "^k8s-infra-staging-slack-infra@kubernetes.io$"
- path: "sig-etcd/groups.yaml"
allowedGroups:
- "@etcd.io$"
- "^sig-etcd-leads@kubernetes.io$"
- path: "sig-docs/groups.yaml"
allowedGroups:
- "^blog@kubernetes.io$"
- "^k8s-infra-staging-sig-docs@kubernetes.io$"
- "^sig-docs@kubernetes.io$"
- "^sig-docs-leads@kubernetes.io$"
- path: "sig-instrumentation/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-kube-state-metrics@kubernetes.io$"
- "^k8s-infra-staging-metrics-server@kubernetes.io$"
- "^k8s-infra-staging-prometheus-adapter@kubernetes.io$"
- "^sig-instrumentation@kubernetes.io$"
- "^sig-instrumentation-leads@kubernetes.io$"
- path: "sig-multicluster/groups.yaml"
allowedGroups:
- "^sig-multicluster@kubernetes.io$"
- "^sig-multicluster-leads@kubernetes.io$"
- path: "sig-network/groups.yaml"
allowedGroups:
- "^k8s-infra-push-cni@kubernetes.io$"
- "^k8s-infra-staging-networking@kubernetes.io$"
- "^k8s-infra-staging-coredns@kubernetes.io$"
- "^k8s-infra-staging-cpa@kubernetes.io$"
- "^k8s-infra-staging-dns@kubernetes.io$"
- "^k8s-infra-staging-external-dns@kubernetes.io$"
- "^k8s-infra-staging-gateway-api@kubernetes.io$"
- "^k8s-infra-staging-ingress-nginx@kubernetes.io$"
- "^k8s-infra-staging-ingressconformance@kubernetes.io$"
- "^ingress-nginx-dev@kubernetes.io$"
- "^sig-network@kubernetes.io$"
- "^sig-network-leads@kubernetes.io$"
- path: "sig-node/groups.yaml"
allowedGroups:
- "^sig-node@kubernetes.io$"
- "^sig-node-ci@kubernetes.io$"
- "^sig-node-leads@kubernetes.io$"
- "^k8s-infra-push-cri-tools@kubernetes.io$"
- "^k8s-infra-staging-cri-tools@kubernetes.io$"
- "^k8s-infra-staging-kmm@kubernetes.io$"
- "^k8s-infra-staging-nfd@kubernetes.io$"
- "^k8s-infra-staging-npd@kubernetes.io$"
- "^k8s-infra-staging-sp-operator@kubernetes.io$"
- path: "sig-release/groups.yaml"
allowedGroups:
- "^k8s-infra-push-sig-release@kubernetes.io$"
- "^k8s-infra-rbac-publishing-bot@kubernetes.io$"
- "^k8s-infra-google-build-admins@kubernetes.io$"
- "^k8s-infra-release-admins@kubernetes.io$"
- "^k8s-infra-release-editors@kubernetes.io$"
- "^k8s-infra-release-viewers@kubernetes.io$"
- "^k8s-infra-staging-artifact-promoter@kubernetes.io$"
- "^k8s-infra-staging-build-image@kubernetes.io$"
- "^k8s-infra-staging-ci-images@kubernetes.io$"
- "^k8s-infra-staging-cip-test@kubernetes.io$"
- "^k8s-infra-staging-experimental@kubernetes.io$"
- "^k8s-infra-staging-kubernetes@kubernetes.io$"
- "^k8s-infra-staging-releng@kubernetes.io$"
- "^k8s-infra-staging-releng-test@kubernetes.io$"
- "^k8s-infra-staging-publishing-bot@kubernetes.io$"
- "^k8s-infra-staging-bom@kubernetes.io$"
- "^k8s-infra-staging-tg-exporter@kubernetes.io$"
- "^k8s-infra-staging-tejolote@kubernetes.io$"
- "^k8s-infra-staging-zeitgeist@kubernetes.io$"
- "^release-comms@kubernetes.io$"
- "^release-managers-private@kubernetes.io$"
- "^release-managers@kubernetes.io$"
- "^security-release-team@kubernetes.io$"
- "^sig-release@kubernetes.io$"
- "^sig-release-leads@kubernetes.io$"
- "^release-team@kubernetes.io$"
- "^release-team-shadows@kubernetes.io$"
- "^release-team-enhancements@kubernetes.io$"
- path: "sig-scalability/groups.yaml"
allowedGroups:
- "^k8s-infra-rbac-perfdash@kubernetes.io$"
- "^k8s-infra-rbac-triageparty-scalability@kubernetes.io$"
- "^k8s-infra-sig-scalability-oncall@kubernetes.io$"
- "^k8s-infra-staging-perf-tests@kubernetes.io$"
- "^sig-scalability@kubernetes.io$"
- "^sig-scalability-leads@kubernetes.io$"
- path: "sig-scheduling/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-descheduler@kubernetes.io$"
- "^k8s-infra-staging-scheduler-plugins@kubernetes.io$"
- "^k8s-infra-staging-sched-simulator@kubernetes.io$"
- "^k8s-infra-staging-kueue@kubernetes.io$"
- "^k8s-infra-staging-kwok@kubernetes.io$"
- "^k8s-infra-staging-wasm-scheduler@kubernetes.io$"
- "^kueue-alerts@kubernetes.io$"
- "^sig-scheduling@kubernetes.io$"
- "^sig-scheduling-alerts@kubernetes.io$"
- "^sig-scheduling-leads@kubernetes.io$"
- path: "sig-security/groups.yaml"
allowedGroups:
- "^security-tooling-private@kubernetes.io$"
- "^sig-security@kubernetes.io$"
- "^sig-security-leads@kubernetes.io$"
- path: "sig-storage/groups.yaml"
allowedGroups:
- "^k8s-infra-push-csi@kubernetes.io$"
- "^k8s-infra-staging-sig-storage@kubernetes.io$"
- "^k8s-infra-staging-csi@kubernetes.io$"
- "^k8s-infra-staging-csi-vsphere@kubernetes.io$"
- "^k8s-infra-staging-git-sync@kubernetes.io$"
- "^sig-storage@kubernetes.io$"
- "^sig-storage-leads@kubernetes.io$"
- path: "sig-testing/groups.yaml"
allowedGroups:
- "^sig-testing@kubernetes.io$"
- "^sig-testing-leads@kubernetes.io$"
- "^k8s-infra-staging-boskos@kubernetes.io$"
- "^k8s-infra-staging-e2e-test-images@kubernetes.io$"
- "^k8s-infra-staging-k8s-gsm-tools@kubernetes.io$"
- "^k8s-infra-staging-kind@kubernetes.io$"
- "^k8s-infra-staging-kubetest2@kubernetes.io$"
- "^k8s-infra-staging-test-infra@kubernetes.io$"
- "^k8s-infra-push-kind@kubernetes.io$"
- "^k8s-infra-prow-viewers@kubernetes.io$"
- "^k8s-infra-prow-oncall@kubernetes.io$"
- "^k8s-infra-rbac-gcsweb@kubernetes.io$"
- "^k8s-infra-rbac-kettle@kubernetes.io$"
- "^k8s-infra-rbac-prow@kubernetes.io$"
- path: "sig-ui/groups.yaml"
allowedGroups:
- "^sig-ui@kubernetes.io$"
- "^sig-ui-leads@kubernetes.io$"
- path: "sig-windows/groups.yaml"
allowedGroups:
- "^sig-windows@kubernetes.io$"
- "^sig-windows-leads@kubernetes.io$"
- "^k8s-infra-staging-gmsa-webhook@kubernetes.io$"
- "^k8s-infra-staging-win-op-rdnss@kubernetes.io$"
- "^k8s-infra-staging-win-svc-proxy@kubernetes.io$"
- path: "sig-k8s-infra/groups.yaml"
allowedGroups:
- "^gke-security-groups@kubernetes.io$"
- "^k8s-infra-alerts@kubernetes.io$"
- "^k8s-infra-artifact-admins@kubernetes.io$"
- "^k8s-infra-aws-accounting@kubernetes.io$"
- "^k8s-infra-aws-admins@kubernetes.io$"
- "^k8s-infra-aws-boskos-accounts@kubernetes.io$"
- "^k8s-infra-aws-root-account@kubernetes.io$"
- "^k8s-infra-azure-admins@kubernetes.io$"
- "^k8s-infra-bigquery-admins@kubernetes.io$"
- "^k8s-infra-cloudflare-admins@kubernetes.io$"
- "^k8s-infra-cluster-admins@kubernetes.io$"
- "^k8s-infra-dns-admins@kubernetes.io$"
- "^k8s-infra-equinix-admins@kubernetes.io$"
- "^k8s-infra-fastly-admins@kubernetes.io$"
- "^k8s-infra-public-pii@kubernetes.io$"
- "^k8s-infra-gcp-accounting@kubernetes.io$"
- "^k8s-infra-gcp-auditors@kubernetes.io$"
- "^k8s-infra-gcp-org-admins@kubernetes.io$"
- "^k8s-infra-group-admins@kubernetes.io$"
- "^k8s-infra-ii-coop@kubernetes.io$"
- "^k8s-infra-oci-proxy-admins@kubernetes.io$"
- "^k8s-infra-okta-admins@kubernetes.io$"
- "^k8s-infra-porche-admins@kubernetes.io$"
- "^k8s-infra-rbac-cert-manager@kubernetes.io$"
- "^k8s-infra-rbac-codesearch@kubernetes.io$"
- "^k8s-infra-rbac-k8s-io-canary@kubernetes.io$"
- "^k8s-infra-rbac-k8s-io-packages-canary@kubernetes.io$"
- "^k8s-infra-rbac-k8s-io-packages-prod@kubernetes.io$"
- "^k8s-infra-rbac-k8s-io-prod@kubernetes.io$"
- "^k8s-infra-rbac-kubernetes-external-secrets@kubernetes.io$"
- "^k8s-infra-sandbox-capa@kubernetes.io$"
- "^k8s-infra-sandbox-capg@kubernetes.io$"
- "^k8s-infra-staging-infra-tools@kubernetes.io$"
- "^k8s-infra-yt-admins@kubernetes.io$"
- "^sig-k8s-infra@kubernetes.io$"
- "^sig-k8s-infra-leads@kubernetes.io$"
- "^sig-k8s-infra-private@kubernetes.io$"
- path: "wg-batch/groups.yaml"
allowedGroups:
- "^wg-batch@kubernetes.io$"
- "^wg-batch-leads@kubernetes.io$"
- path: "wg-data-protection/groups.yaml"
allowedGroups:
- "^wg-data-protection@kubernetes.io$"
- "^wg-data-protection-leads@kubernetes.io$"
- path: "wg-policy/groups.yaml"
allowedGroups:
- "^wg-policy@kubernetes.io$"
- "^wg-policy-leads@kubernetes.io$"
- path: "wg-serving/groups.yaml"
allowedGroups:
- "^wg-serving.*@kubernetes.io$"
- path: "wg-lts/groups.yaml"
allowedGroups:
- "^wg-lts@kubernetes.io$"
- "^wg-lts-leads@kubernetes.io$"
- path: "wg-device-management/groups.yaml"
allowedGroups:
- "^k8s-infra-staging-dra-example-driver@kubernetes.io$"
- "^wg-device-management@kubernetes.io$"
- "^wg-device-management-leads@kubernetes.io$"
- path: "wg-etcd-operator/groups.yaml"
allowedGroups:
- "^wg-etcd-operator.*@kubernetes.io$"
- path: "wg-structured-logging/groups.yaml"
allowedGroups:
- "^wg-structured-logging@kubernetes.io$"
- "^wg-structured-logging-leads@kubernetes.io$"
- path: "**/*" # prevent any other file from containing anything