build-image: Promote kube-cross v1.13.9-1 images

[justaugustus]

(Companion PR to kubernetes/release#1200, kubernetes/kubernetes#89275, kubernetes/release#1140)

• build-image: Promote kube-cross v1.13.9-1 images
• build-image: Sort images by digest
  CIP snapshot outputs images sorted by digest, instead of tag.
  This will make diffs easier in the future when running a snapshot.

Signed-off-by: Stephen Augustus [email protected]

/assign @BenTheElder @cblecker @liggitt @dims @listx
cc: @kubernetes/release-engineering

---

In kubernetes/kubernetes#89275, specifically d37aed360f16f5a931e14671042e7965b96a0101, I temporarily pointed at the staging kube-cross image and we can see successes on the expected jobs:

• pull-kubernetes-cross: https://prow.k8s.io/view/gcs/kubernetes-jenkins/pr-logs/pull/89275/pull-kubernetes-cross/1241156938012561410/
• pull-kubernetes-verify: https://prow.k8s.io/view/gcs/kubernetes-jenkins/pr-logs/pull/89275/pull-kubernetes-verify/1241156938058698753

---

Snapshot from sigs.k8s.io/k8s-container-image-promoter:

$ time bazel run  \
    --workspace_status_command=$PWD/workspace_status.sh \
    --host_force_python=PY2 \
    //:cip -- -snapshot=gcr.io/k8s-staging-build-image \
    -snapshot-tag=v1.13.9-1 \
    -output-format=YAML > images.yaml

Loading: 
Loading: 0 packages loaded
Analyzing: target //:cip (0 packages loaded, 0 targets configured)
INFO: Analyzed target //:cip (0 packages loaded, 0 targets configured).
INFO: Found 1 target...
[0 / 1] [Prepa] BazelWorkspaceStatusAction stable-status.txt
Target //:cip up-to-date:
  bazel-bin/linux_amd64_stripped/cip
INFO: Elapsed time: 0.218s, Critical Path: 0.02s
INFO: 0 processes.
INFO: Build completed successfully, 1 total action
INFO: Running command line: bazel-bin/linux_amd64_stripped/cip '-snapshot=gcr.io/k8s-staging-build-image' '-snapshot-tag=v1.13.9-1' '-output-format=YAML'
INFO: Build completed successfully, 1 total action
I0321 00:56:32.628063   13092 inventory.go:1626] Request {gcr.io/k8s-staging-build-image   true}: OK
I0321 00:56:32.914177   13092 inventory.go:1626] Request {gcr.io/k8s-staging-build-image/kube-cross-amd64   false}: OK
I0321 00:56:33.249679   13092 inventory.go:1626] Request {gcr.io/k8s-staging-build-image/kube-cross   false}: OK

real	0m1.591s
user	0m0.085s
sys	0m0.073s

Validate:

$ docker manifest inspect gcr.io/k8s-staging-build-image/kube-cross:v1.13.9-1
{
   "schemaVersion": 2,
   "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
   "manifests": [
      {
         "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
         "size": 3274,
         "digest": "sha256:60e119bc59d8e6c77ddf159af0a682d0634249e3baca69d5be2972d00942ff51",
         "platform": {
            "architecture": "amd64",
            "os": "linux"
         }
      }
   ]
}

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: justaugustus

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• k8s.gcr.io/images/k8s-staging-build-image/OWNERS [justaugustus]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[feiskyer]

/lgtm
/hold for another look

[bartsmykla]

@justaugustus can you squash the commits?

[justaugustus]

@bartsmykla -- I purposely split the commits so the diffs are separate; one is a no-op reordering and the other is an image promotion.

[bartsmykla]

It should be in different PR then

[bartsmykla]

checksums are correct though

/unhold

[justaugustus]

This is commonly done in the same PR to make reviews easier.

[bartsmykla]

It doesn't mean it's a good practice though

[dims]

@justaugustus you don't need a separate entry for kube-cross-amd64

[BenTheElder]

personally not a fan of making this more lines just because.
what did sorting by digest accomplish ...?

[liggitt]

guessing this is what a yaml normalizer outputs? (sorting keys, unquoting strings that don't need quotes, etc)

[liggitt]

(though I tend to agree... makes finding the shas for a specific version or range of versions hard)