audit: update as of 2021-07-12

kubernetes · Jul 12, 2021 · 8289475 · 8289475
1 parent 43ee393
commit 8289475
Show file tree

Hide file tree

Showing 8 changed files with 19 additions and 12 deletions.
diff --git a/audit/projects/k8s-artifacts-prod/services/logging/logs.json b/audit/projects/k8s-artifacts-prod/services/logging/logs.json
@@ -1,6 +1,5 @@
 [
   "projects/k8s-artifacts-prod/logs/cip-audit-log",
-  "projects/k8s-artifacts-prod/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-artifacts-prod/logs/cloudaudit.googleapis.com%2Fsystem_event",
   "projects/k8s-artifacts-prod/logs/requests",
   "projects/k8s-artifacts-prod/logs/run.googleapis.com%2Frequests",

diff --git a/audit/projects/k8s-cip-test-prod/services/logging/logs.json b/audit/projects/k8s-cip-test-prod/services/logging/logs.json
@@ -1,4 +1,3 @@
 [
-  "projects/k8s-cip-test-prod/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-cip-test-prod/logs/cloudaudit.googleapis.com%2Fsystem_event"
 ]
diff --git a/audit/projects/k8s-release/buckets/k8s-release/iam.json b/audit/projects/k8s-release/buckets/k8s-release/iam.json
@@ -10,7 +10,8 @@
     },
     {
       "members": [
-        "projectViewer:k8s-release"
+        "projectViewer:k8s-release",
+        "serviceAccount:project-304687256732@storage-transfer-service.iam.gserviceaccount.com"
       ],
       "role": "roles/storage.legacyBucketReader"
     },
@@ -25,7 +26,8 @@
       "members": [
         "group:[email protected]",
         "group:[email protected]",
-        "group:[email protected]"
+        "group:[email protected]",
+        "serviceAccount:project-304687256732@storage-transfer-service.iam.gserviceaccount.com"
       ],
       "role": "roles/storage.objectAdmin"
     },

diff --git a/audit/projects/k8s-release/buckets/k8s-release/metadata.txt b/audit/projects/k8s-release/buckets/k8s-release/metadata.txt
@@ -11,8 +11,8 @@ gs://k8s-release/ :
 	Labels:				None
 	Default KMS key:		None
 	Time created:			Fri, 07 Aug 2020 20:50:17 GMT
-	Time updated:			Fri, 07 Aug 2020 20:50:37 GMT
-	Metageneration:			9
+	Time updated:			Fri, 09 Jul 2021 20:06:14 GMT
+	Metageneration:			10
 	Bucket Policy Only enabled:	True
 	ACL:				[]
 	Default ACL:			[]
diff --git a/audit/projects/k8s-release/iam.json b/audit/projects/k8s-release/iam.json
@@ -50,6 +50,12 @@
       ],
       "role": "roles/editor"
     },
+    {
+      "members": [
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/pubsub.editor"
+    },
     {
       "members": [
         "group:[email protected]",

diff --git a/audit/projects/k8s-release/services/logging/logs.json b/audit/projects/k8s-release/services/logging/logs.json
@@ -1 +1,3 @@
-[]
+[
+  "projects/k8s-release/logs/cloudaudit.googleapis.com%2Factivity"
+]
diff --git a/audit/projects/k8s-staging-cluster-api-gcp/services/logging/logs.json b/audit/projects/k8s-staging-cluster-api-gcp/services/logging/logs.json
@@ -2,6 +2,5 @@
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Fdata_access",
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Fsystem_event",
-  "projects/k8s-staging-cluster-api-gcp/logs/cloudbuild",
-  "projects/k8s-staging-cluster-api-gcp/logs/compute.googleapis.com%2Fshielded_vm_integrity"
+  "projects/k8s-staging-cluster-api-gcp/logs/cloudbuild"
 ]
diff --git a/audit/projects/kubernetes-public/services/container/clusters/aaa.json b/audit/projects/kubernetes-public/services/container/clusters/aaa.json
@@ -37,7 +37,7 @@
   "clusterIpv4Cidr": "10.40.0.0/14",
   "createTime": "2019-09-18T23:39:24+00:00",
   "currentMasterVersion": "1.19.9-gke.1900",
-  "currentNodeVersion": "1.18.17-gke.1901 *",
+  "currentNodeVersion": "1.19.9-gke.1900",
   "databaseEncryption": {
     "state": "DECRYPTED"
   },
@@ -168,7 +168,7 @@
       "upgradeSettings": {
         "maxSurge": 1
       },
-      "version": "1.18.17-gke.1901"
+      "version": "1.19.9-gke.1900"
     },
     {
       "autoscaling": {
@@ -219,7 +219,7 @@
       "upgradeSettings": {
         "maxSurge": 1
       },
-      "version": "1.18.17-gke.1901"
+      "version": "1.19.9-gke.1900"
     }
   ],
   "releaseChannel": {