Skip to content

Commit

Permalink
audit: update as of 2021-08-02
Browse files Browse the repository at this point in the history
  • Loading branch information
Kubernetes Prow Robot committed Aug 2, 2021
1 parent 4564a75 commit 8b11e97
Show file tree
Hide file tree
Showing 53 changed files with 110 additions and 111 deletions.
3 changes: 2 additions & 1 deletion audit/projects/k8s-artifacts-prod/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,6 @@
"projects/k8s-artifacts-prod/logs/clouderrorreporting.googleapis.com%2Finsights",
"projects/k8s-artifacts-prod/logs/requests",
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Frequests",
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Fstderr"
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Fstderr",
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Fvarlog%2Fsystem"
]
1 change: 1 addition & 0 deletions audit/projects/k8s-gcr-audit-test-prod/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
[
"projects/k8s-gcr-audit-test-prod/logs/cip-audit-log",
"projects/k8s-gcr-audit-test-prod/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-gcr-audit-test-prod/logs/cloudaudit.googleapis.com%2Fsystem_event",
"projects/k8s-gcr-audit-test-prod/logs/clouderrorreporting.googleapis.com%2Finsights",
Expand Down
4 changes: 2 additions & 2 deletions ...projects/k8s-infra-prow-build-trusted/services/container/clusters/prow-build-trusted.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -18,8 +18,8 @@
"binaryAuthorization": {},
"clusterIpv4Cidr": "10.4.0.0/14",
"createTime": "2020-04-30T23:44:46+00:00",
"currentMasterVersion": "1.19.9-gke.1900",
"currentNodeVersion": "1.19.9-gke.1900",
"currentMasterVersion": "1.20.8-gke.900",
"currentNodeVersion": "1.19.9-gke.1900 *",
"databaseEncryption": {
"state": "DECRYPTED"
},
Expand Down
2 changes: 2 additions & 0 deletions audit/projects/k8s-infra-prow-build-trusted/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,11 @@
"projects/k8s-infra-prow-build-trusted/logs/OSConfigAgent",
"projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Fsystem_event",
"projects/k8s-infra-prow-build-trusted/logs/clouderrorreporting.googleapis.com%2Finsights",
"projects/k8s-infra-prow-build-trusted/logs/compute.googleapis.com%2Fshielded_vm_integrity",
"projects/k8s-infra-prow-build-trusted/logs/container-runtime",
"projects/k8s-infra-prow-build-trusted/logs/container.googleapis.com%2Fcluster-autoscaler-visibility",
"projects/k8s-infra-prow-build-trusted/logs/docker",
"projects/k8s-infra-prow-build-trusted/logs/events",
"projects/k8s-infra-prow-build-trusted/logs/kube-proxy",
"projects/k8s-infra-prow-build-trusted/logs/kubelet",
Expand Down
4 changes: 2 additions & 2 deletions audit/projects/k8s-infra-prow-build/services/container/clusters/prow-build.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -18,8 +18,8 @@
"binaryAuthorization": {},
"clusterIpv4Cidr": "10.32.0.0/14",
"createTime": "2020-04-30T21:31:49+00:00",
"currentMasterVersion": "1.19.9-gke.1900",
"currentNodeVersion": "1.19.9-gke.1900",
"currentMasterVersion": "1.20.8-gke.900",
"currentNodeVersion": "1.19.9-gke.1900 *",
"databaseEncryption": {
"state": "DECRYPTED"
},
Expand Down
12 changes: 12 additions & 0 deletions audit/projects/k8s-infra-public-pii/iam.json
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,17 @@
{
"bindings": [
{
"members": [
"serviceAccount:[email protected]"
],
"role": "roles/bigquery.dataEditor"
},
{
"members": [
"serviceAccount:service-226195303281@gcp-sa-bigquerydatatransfer.iam.gserviceaccount.com"
],
"role": "roles/bigquerydatatransfer.serviceAgent"
},
{
"members": [
"user:[email protected]"
Expand Down
8 changes: 8 additions & 0 deletions ...e-accounts/[email protected]/description.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"description": "Service Acccount BigQuery Data Transfer",
"email": "[email protected]",
"name": "projects/k8s-infra-public-pii/serviceAccounts/[email protected]",
"oauth2ClientId": "105765836197633619709",
"projectId": "k8s-infra-public-pii",
"uniqueId": "105765836197633619709"
}
1 change: 1 addition & 0 deletions ...i/service-accounts/[email protected]/iam.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{}
4 changes: 4 additions & 0 deletions ...ra-public-pii/services/bigquery/bigquery.datasets.k8s_infra_artifacts_gcslogs.access.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,10 @@
"role": "WRITER",
"specialGroup": "projectWriters"
},
{
"role": "WRITER",
"userByEmail": "service-226195303281@gcp-sa-bigquerydatatransfer.iam.gserviceaccount.com"
},
{
"role": "OWNER",
"specialGroup": "projectOwners"
Expand Down
1 change: 1 addition & 0 deletions audit/projects/k8s-infra-public-pii/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
[
"projects/k8s-infra-public-pii/logs/bigquerydatatransfer.googleapis.com%2Ftransfer_config",
"projects/k8s-infra-public-pii/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-infra-public-pii/logs/cloudaudit.googleapis.com%2Fdata_access"
]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-addon-manager/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-addon-manager/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-autoscaling/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-autoscaling/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-bootkube/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-bootkube/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
3 changes: 2 additions & 1 deletion audit/projects/k8s-staging-boskos/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
[
"projects/k8s-staging-boskos/logs/cloudaudit.googleapis.com%2Factivity"
"projects/k8s-staging-boskos/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-staging-boskos/logs/cloudbuild"
]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-capi-docker/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-capi-docker/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
3 changes: 2 additions & 1 deletion audit/projects/k8s-staging-capi-kubeadm/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
[
"projects/k8s-staging-capi-kubeadm/logs/cloudaudit.googleapis.com%2Factivity"
"projects/k8s-staging-capi-kubeadm/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-staging-capi-kubeadm/logs/cloudbuild"
]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-capi-vsphere/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-capi-vsphere/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-ci-images/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-ci-images/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-cip-test/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-cip-test/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-cluster-addons/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-cluster-addons/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
5 changes: 1 addition & 4 deletions audit/projects/k8s-staging-cluster-api-do/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1 @@
[
"projects/k8s-staging-cluster-api-do/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-staging-cluster-api-do/logs/cloudbuild"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-coredns/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-coredns/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-cpa/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-cpa/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-cri-tools/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-cri-tools/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-csi/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-csi/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-etcd/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-etcd/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-examples/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-examples/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-experimental/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-experimental/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-git-sync/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-git-sync/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-ingressconformance/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-ingressconformance/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-k8s-gsm-tools/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-k8s-gsm-tools/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-kubeadm/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-kubeadm/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-kubernetes/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-kubernetes/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-mirror/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-mirror/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-multitenancy/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-multitenancy/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-networking/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-networking/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-npd/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-npd/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
1 change: 0 additions & 1 deletion audit/projects/k8s-staging-prometheus-adapter/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
[
"projects/k8s-staging-prometheus-adapter/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-staging-prometheus-adapter/logs/cloudaudit.googleapis.com%2Fsystem_event",
"projects/k8s-staging-prometheus-adapter/logs/cloudbuild"
]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-provider-openstack/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-provider-openstack/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-publishing-bot/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-publishing-bot/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-sig-docs/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-sig-docs/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-slack-infra/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-slack-infra/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-storage-migrator/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-storage-migrator/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-test-infra/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-test-infra/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
4 changes: 1 addition & 3 deletions audit/projects/k8s-staging-txtdirect/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1 @@
[
"projects/k8s-staging-txtdirect/logs/cloudaudit.googleapis.com%2Factivity"
]
[]
2 changes: 1 addition & 1 deletion audit/projects/kubernetes-public/iam.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
},
{
"members": [
"serviceAccount:[email protected]"
"deleted:serviceAccount:[email protected]?uid=116904371009860244686"
],
"role": "roles/cloudfunctions.serviceAgent"
},
Expand Down
7 changes: 7 additions & 0 deletions ...cts/kubernetes-public/secrets/k8s-infra-ci-robot-github-account-password/description.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
{
"createTime": "2021-07-28T16:51:19.454161Z",
"name": "projects/127754664067/secrets/k8s-infra-ci-robot-github-account-password",
"replication": {
"automatic": {}
}
}
11 changes: 11 additions & 0 deletions audit/projects/kubernetes-public/secrets/k8s-infra-ci-robot-github-account-password/iam.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
{
"bindings": [
{
"members": [
"group:[email protected]"
],
"role": "roles/secretmanager.admin"
}
],
"version": 1
}
11 changes: 11 additions & 0 deletions ...ojects/kubernetes-public/secrets/k8s-infra-ci-robot-github-account-password/versions.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
[
{
"createTime": "2021-07-28T16:51:21.137022Z",
"etag": "\"15c831cbc42b7e\"",
"name": "projects/127754664067/secrets/k8s-infra-ci-robot-github-account-password/versions/1",
"replicationStatus": {
"automatic": {}
},
"state": "ENABLED"
}
]
6 changes: 6 additions & 0 deletions audit/projects/kubernetes-public/secrets/k8s-infra-ci-robot-github-token/iam.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,12 @@
"group:[email protected]"
],
"role": "roles/secretmanager.admin"
},
{
"members": [
"serviceAccount:kubernetes-external-secrets@k8s-infra-prow-build-trusted.iam.gserviceaccount.com"
],
"role": "roles/secretmanager.secretAccessor"
}
],
"version": 1
Expand Down
4 changes: 2 additions & 2 deletions audit/projects/kubernetes-public/services/container/clusters/aaa.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -36,8 +36,8 @@
"binaryAuthorization": {},
"clusterIpv4Cidr": "10.40.0.0/14",
"createTime": "2019-09-18T23:39:24+00:00",
"currentMasterVersion": "1.19.9-gke.1900",
"currentNodeVersion": "1.19.9-gke.1900",
"currentMasterVersion": "1.20.8-gke.900",
"currentNodeVersion": "1.19.9-gke.1900 *",
"databaseEncryption": {
"state": "DECRYPTED"
},
Expand Down
3 changes: 0 additions & 3 deletions audit/projects/kubernetes-public/services/enabled.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,6 @@ NAME TITLE
bigquery.googleapis.com BigQuery API
bigquerystorage.googleapis.com BigQuery Storage API
cloudasset.googleapis.com Cloud Asset API
clouderrorreporting.googleapis.com Error Reporting API
cloudfunctions.googleapis.com Cloud Functions API
cloudresourcemanager.googleapis.com Cloud Resource Manager API
cloudshell.googleapis.com Cloud Shell API
compute.googleapis.com Compute Engine API
Expand All @@ -18,7 +16,6 @@ oslogin.googleapis.com Cloud OS Login API
pubsub.googleapis.com Cloud Pub/Sub API
secretmanager.googleapis.com Secret Manager API
serviceusage.googleapis.com Service Usage API
source.googleapis.com Legacy Cloud Source Repositories API
stackdriver.googleapis.com Stackdriver API
storage-api.googleapis.com Google Cloud Storage JSON API
storage-component.googleapis.com Cloud Storage
1 change: 1 addition & 0 deletions audit/projects/kubernetes-public/services/logging/logs.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@
"projects/kubernetes-public/logs/kubelet-monitor",
"projects/kubernetes-public/logs/monitoring.googleapis.com%2FViolationAutoResolveEventv1",
"projects/kubernetes-public/logs/monitoring.googleapis.com%2FViolationOpenEventv1",
"projects/kubernetes-public/logs/monitoring.googleapis.com%2Fuptime_checks",
"projects/kubernetes-public/logs/node-problem-detector",
"projects/kubernetes-public/logs/requests",
"projects/kubernetes-public/logs/serialconsole.googleapis.com%2Fserial_port_1_output",
Expand Down

0 comments on commit 8b11e97

Please sign in to comment.