Skip to content

start using cdn.registry.k8s.io in registry-sandbox.registry.k8s.io - #9789

Merged
kubernetes-prow[bot] merged 1 commit into
kubernetes:mainfrom
upodroid:rollout-cdn-for-sandbox-registry
Jul 30, 2026
Merged

start using cdn.registry.k8s.io in registry-sandbox.registry.k8s.io#9789
kubernetes-prow[bot] merged 1 commit into
kubernetes:mainfrom
upodroid:rollout-cdn-for-sandbox-registry

Conversation

@upodroid

Copy link
Copy Markdown
Member

cdn.registry.k8s.io was provisioned in #8819, and I'm rolling it out on our sandbox instance.

The IAM change is to fix the broken prowjob https://prow.k8s.io/view/gs/kubernetes-ci-logs/logs/post-registry-push-images/2082519543736963072

@kubernetes-prow kubernetes-prow Bot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Jul 29, 2026
@kubernetes-prow
kubernetes-prow Bot requested review from GenPage and hakman July 29, 2026 20:52
@kubernetes-prow kubernetes-prow Bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. area/infra Infrastructure management, infrastructure design, code in infra/ area/infra/gcp Issues or PRs related to Kubernetes GCP infrastructure area/terraform Terraform modules, testing them, writing more of them, code in infra/gcp/clusters/ sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra. labels Jul 29, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: upodroid

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 29, 2026
@k8s-infra-ci-robot

Copy link
Copy Markdown
Contributor

Ran Plan for dir: infra/gcp/terraform/k8s-infra-oci-proxy workspace: default

Show Output
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # module.iam.google_project_iam_binding.project_iam_authoritative["default--roles/run.admin"] will be updated in-place
~ resource "google_project_iam_binding" "project_iam_authoritative" {
        id      = "k8s-infra-oci-proxy/roles/run.admin"
      ~ members = [
          - "principal://iam.googleapis.com/projects/180382678033/locations/global/workloadIdentityPools/k8s-infra-prow-build-trusted.svc.id.goog/subject/ns/test-pods/sa/infra-tools",
          + "serviceAccount:infra-tools-sa@k8s-staging-images.iam.gserviceaccount.com",
        ]
        # (3 unchanged attributes hidden)
    }

  # module.iam.google_project_iam_binding.project_iam_authoritative["default--roles/storage.objectAdmin"] will be updated in-place
~ resource "google_project_iam_binding" "project_iam_authoritative" {
        id      = "k8s-infra-oci-proxy/roles/storage.objectAdmin"
      ~ members = [
          - "principal://iam.googleapis.com/projects/180382678033/locations/global/workloadIdentityPools/k8s-infra-prow-build-trusted.svc.id.goog/subject/ns/test-pods/sa/infra-tools",
          + "serviceAccount:infra-tools-sa@k8s-staging-images.iam.gserviceaccount.com",
        ]
        # (3 unchanged attributes hidden)
    }

  # module.iam.google_project_iam_binding.project_iam_authoritative["default--roles/viewer"] will be updated in-place
~ resource "google_project_iam_binding" "project_iam_authoritative" {
        id      = "k8s-infra-oci-proxy/roles/viewer"
      ~ members = [
          - "principal://iam.googleapis.com/projects/180382678033/locations/global/workloadIdentityPools/k8s-infra-prow-build-trusted.svc.id.goog/subject/ns/test-pods/sa/infra-tools",
          + "serviceAccount:infra-tools-sa@k8s-staging-images.iam.gserviceaccount.com",
        ]
        # (3 unchanged attributes hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["asia-east1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/asia-east1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-asia-east1"
        name                       = "k8s-infra-oci-proxy-asia-east1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://d39mqg4b1dx9z1.cloudfront.net" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["asia-northeast1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/asia-northeast1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-asia-northeast1"
        name                       = "k8s-infra-oci-proxy-asia-northeast1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["asia-northeast2"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/asia-northeast2/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-asia-northeast2"
        name                       = "k8s-infra-oci-proxy-asia-northeast2"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["asia-south1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/asia-south1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-asia-south1"
        name                       = "k8s-infra-oci-proxy-asia-south1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["australia-southeast1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/australia-southeast1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-australia-southeast1"
        name                       = "k8s-infra-oci-proxy-australia-southeast1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-ap-southeast-1.s3.dualstack.ap-southeast-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-north1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-north1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-north1"
        name                       = "k8s-infra-oci-proxy-europe-north1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-southwest1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-southwest1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-southwest1"
        name                       = "k8s-infra-oci-proxy-europe-southwest1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west1"
        name                       = "k8s-infra-oci-proxy-europe-west1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://d39mqg4b1dx9z1.cloudfront.net" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west10"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west10/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west10"
        name                       = "k8s-infra-oci-proxy-europe-west10"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west2"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west2/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west2"
        name                       = "k8s-infra-oci-proxy-europe-west2"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-west-1.s3.dualstack.eu-west-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west3"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west3/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west3"
        name                       = "k8s-infra-oci-proxy-europe-west3"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west4"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west4/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west4"
        name                       = "k8s-infra-oci-proxy-europe-west4"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://d39mqg4b1dx9z1.cloudfront.net" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west8"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west8/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west8"
        name                       = "k8s-infra-oci-proxy-europe-west8"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-south-1.s3.dualstack.eu-south-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["europe-west9"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/europe-west9/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-europe-west9"
        name                       = "k8s-infra-oci-proxy-europe-west9"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-eu-west-3.s3.dualstack.eu-west-3.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["southamerica-west1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/southamerica-west1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-southamerica-west1"
        name                       = "k8s-infra-oci-proxy-southamerica-west1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://d39mqg4b1dx9z1.cloudfront.net" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-central1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-central1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-central1"
        name                       = "k8s-infra-oci-proxy-us-central1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-east1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-east1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-east1"
        name                       = "k8s-infra-oci-proxy-us-east1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-east-1.s3.dualstack.us-east-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-east4"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-east4/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-east4"
        name                       = "k8s-infra-oci-proxy-us-east4"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-east-1.s3.dualstack.us-east-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-east5"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-east5/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-east5"
        name                       = "k8s-infra-oci-proxy-us-east5"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-south1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-south1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-south1"
        name                       = "k8s-infra-oci-proxy-us-south1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-west1"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-west1/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-west1"
        name                       = "k8s-infra-oci-proxy-us-west1"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.oci-proxy.google_cloud_run_service.oci-proxy["us-west2"] will be updated in-place
~ resource "google_cloud_run_service" "oci-proxy" {
        id                         = "locations/us-west2/namespaces/k8s-infra-oci-proxy/services/k8s-infra-oci-proxy-us-west2"
        name                       = "k8s-infra-oci-proxy-us-west2"
        # (4 unchanged attributes hidden)

      ~ template {
          ~ spec {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:fdc44df2e374cb9e4c17d7858e4ad092b83f5c4e4b433bb228ded0777ed8101a" -> "us-central1-docker.pkg.dev/k8s-staging-images/infra-tools/archeio@sha256:ce45b6103aafee8786c40974362b8819b29bb3cdc4fbdf8b69ce496e33e05fe9"
                    name        = null
                    # (3 unchanged attributes hidden)

                  - env {
                      - name  = "DEFAULT_AWS_BASE_URL" -> null
                      - value = "https://prod-registry-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.com" -> null
                    }
                  + env {
                      + name  = "DEFAULT_AWS_BASE_URL"
                      + value = "https://cdn.registry.k8s.io"
                    }

                    # (7 unchanged blocks hidden)
                }
            }

            # (1 unchanged block hidden)
        }

        # (2 unchanged blocks hidden)
    }

Plan: 0 to add, 25 to change, 0 to destroy.
  • ▶️ To apply this plan, comment:
    atlantis apply -d infra/gcp/terraform/k8s-infra-oci-proxy
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment:
    atlantis plan -d infra/gcp/terraform/k8s-infra-oci-proxy

Plan: 0 to add, 25 to change, 0 to destroy.


  • ⏩ To apply all unapplied plans from this Pull Request, comment:
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment:
    atlantis unlock

@upodroid

Copy link
Copy Markdown
Member Author

bump

@hakman

hakman commented Jul 30, 2026

Copy link
Copy Markdown
Member

/lgtm

@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jul 30, 2026
@kubernetes-prow
kubernetes-prow Bot merged commit 4c68927 into kubernetes:main Jul 30, 2026
5 checks passed
@k8s-infra-ci-robot

Copy link
Copy Markdown
Contributor

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: infra/gcp/terraform/k8s-infra-oci-proxy workspace: default

@kubernetes-prow kubernetes-prow Bot added this to the v1.37 milestone Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/infra/gcp Issues or PRs related to Kubernetes GCP infrastructure area/infra Infrastructure management, infrastructure design, code in infra/ area/terraform Terraform modules, testing them, writing more of them, code in infra/gcp/clusters/ cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants