groups: update root OWNERS

specifically

- drop comment about delegated approval now that we're doing it
- add nikhita and ameukam such that set of approvers is equal to
  union of sig-contribex TLs and wg-k8s-infra leads

groups/OWNERS

@@ -1,25 +1,18 @@
 # See the OWNERS docs at https://go.k8s.io/owners
 
-# approval is restricted to members of k8s-infra-group-admins@
+# root approval is restricted to members of k8s-infra-group-admins@
 # because they have the ability to manually run, troubleshoot, and undo
 # changes
-#
-# approval will not be delegated to deeper directories until sufficient
-# checks are in place (via testing or policy enforcement) to ensure that
-# someone can't escalate privileges or create arbitrary groups
-#
-# ref: https://github.com/kubernetes/k8s.io/issues/460#issuecomment-849958721
 
 options:
   no_parent_owners: true
 
 approvers:
+- ameukam
 - cblecker
 - dims
 - thockin
 - spiffxp
-
-reviewers:
 - nikhita
 
 labels:

groups/groups_test.go

@@ -312,8 +312,10 @@ func TestHardcodedGroupsForParanoia(t *testing.T) {
 			"thockin@google.com",
 		},
 		"k8s-infra-group-admins@kubernetes.io": []string{
+			"ameukam@gmail.com",
 			"cblecker@gmail.com",
 			"davanum@gmail.com",
+			"nikhitaraghunath@gmail.com",
 			"spiffxp@google.com",
 			"thockin@google.com",
 		},

groups/wg-k8s-infra/groups.yaml

@@ -345,7 +345,9 @@ groups:
     settings:
       ReconcileMembers: "true"
     members:
+      - ameukam@gmail.com
       - cblecker@gmail.com
       - davanum@gmail.com
       - spiffxp@google.com
+      - nikhitaraghunath@gmail.com
       - thockin@google.com