audit: update as of 2021-07-10

kubernetes · Jul 10, 2021 · a7b3712 · a7b3712
1 parent 930d08e
commit a7b3712
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 7 deletions.
diff --git a/audit/projects/k8s-release/buckets/k8s-release/iam.json b/audit/projects/k8s-release/buckets/k8s-release/iam.json
@@ -10,7 +10,8 @@
     },
     {
       "members": [
-        "projectViewer:k8s-release"
+        "projectViewer:k8s-release",
+        "serviceAccount:project-304687256732@storage-transfer-service.iam.gserviceaccount.com"
       ],
       "role": "roles/storage.legacyBucketReader"
     },
@@ -25,7 +26,8 @@
       "members": [
         "group:[email protected]",
         "group:[email protected]",
-        "group:[email protected]"
+        "group:[email protected]",
+        "serviceAccount:project-304687256732@storage-transfer-service.iam.gserviceaccount.com"
       ],
       "role": "roles/storage.objectAdmin"
     },

diff --git a/audit/projects/k8s-release/buckets/k8s-release/metadata.txt b/audit/projects/k8s-release/buckets/k8s-release/metadata.txt
@@ -11,8 +11,8 @@ gs://k8s-release/ :
 	Labels:				None
 	Default KMS key:		None
 	Time created:			Fri, 07 Aug 2020 20:50:17 GMT
-	Time updated:			Fri, 07 Aug 2020 20:50:37 GMT
-	Metageneration:			9
+	Time updated:			Fri, 09 Jul 2021 20:06:14 GMT
+	Metageneration:			10
 	Bucket Policy Only enabled:	True
 	ACL:				[]
 	Default ACL:			[]
diff --git a/audit/projects/k8s-release/iam.json b/audit/projects/k8s-release/iam.json
@@ -50,6 +50,12 @@
       ],
       "role": "roles/editor"
     },
+    {
+      "members": [
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/pubsub.editor"
+    },
     {
       "members": [
         "group:[email protected]",

diff --git a/audit/projects/k8s-release/services/logging/logs.json b/audit/projects/k8s-release/services/logging/logs.json
@@ -1 +1,3 @@
-[]
+[
+  "projects/k8s-release/logs/cloudaudit.googleapis.com%2Factivity"
+]
diff --git a/audit/projects/k8s-staging-cluster-api-gcp/services/logging/logs.json b/audit/projects/k8s-staging-cluster-api-gcp/services/logging/logs.json
@@ -2,6 +2,5 @@
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Fdata_access",
   "projects/k8s-staging-cluster-api-gcp/logs/cloudaudit.googleapis.com%2Fsystem_event",
-  "projects/k8s-staging-cluster-api-gcp/logs/cloudbuild",
-  "projects/k8s-staging-cluster-api-gcp/logs/compute.googleapis.com%2Fshielded_vm_integrity"
+  "projects/k8s-staging-cluster-api-gcp/logs/cloudbuild"
 ]