Automation of Google Groups maintenance for k8s-infra permissions

Making changes

Edit your SIG's groups.yaml, e.g. [sig-release/groups.yaml][/groups/sig-release/groups.yaml]
If adding or removing a group, edit [restrictions.yaml] to add or remove the group name
Use make test to ensure the changes meet conventions
Open a pull request
When the pull request merges, the post-k8sio-groups job will deploy the changes

Google Groups for granting push access to container repositories and/or buckets must be of the form:

k8s-infra-staging-<project-name>@kubernetes.io`

The project name has a max length of 18 characters.

Must be run by someone who is a member of the k8s-infra-group-admins@kubernetes.io group
Run gcloud auth application-default login to login
Use make run to dry run the changes
Use make run -- --confirm if the changes suggested in the previous step looks good