From 5577a2a05bd16a5c7439c985db3e059ec67552c8 Mon Sep 17 00:00:00 2001 From: CNCF CI Bot Date: Wed, 24 Feb 2021 03:55:01 +0000 Subject: [PATCH] audit: update as of 2021-02-24 --- .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-0164ec21c8/cors.txt | 1 + .../kubernetes-staging-0164ec21c8/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-0164ec21c8/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-01/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-5c678d1e86/cors.txt | 1 + .../kubernetes-staging-5c678d1e86/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-5c678d1e86/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-02/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-29955e8a71/cors.txt | 1 + .../kubernetes-staging-29955e8a71/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-29955e8a71/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-03/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-195efd44db/cors.txt | 1 + .../kubernetes-staging-195efd44db/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-195efd44db/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-04/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-65062dd307/cors.txt | 1 + .../kubernetes-staging-65062dd307/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-65062dd307/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-05/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-74a4e984af/cors.txt | 1 + .../kubernetes-staging-74a4e984af/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-74a4e984af/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-06/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-a06fd56271/cors.txt | 1 + .../kubernetes-staging-a06fd56271/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-a06fd56271/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-07/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-181e2e3096/cors.txt | 1 + .../kubernetes-staging-181e2e3096/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-181e2e3096/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-08/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-11e949d58c/cors.txt | 1 + .../kubernetes-staging-11e949d58c/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-11e949d58c/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-09/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-fd68dabe88/cors.txt | 1 + .../kubernetes-staging-fd68dabe88/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-fd68dabe88/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-10/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-20b0a8d25a/cors.txt | 1 + .../kubernetes-staging-20b0a8d25a/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-20b0a8d25a/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-11/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-7c618dfabd/cors.txt | 1 + .../kubernetes-staging-7c618dfabd/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-7c618dfabd/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-12/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-5e1d5383f0/cors.txt | 1 + .../kubernetes-staging-5e1d5383f0/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-5e1d5383f0/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-13/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-fbef914a88/cors.txt | 1 + .../kubernetes-staging-fbef914a88/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-fbef914a88/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-14/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-0a4b05dea6/cors.txt | 1 + .../kubernetes-staging-0a4b05dea6/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-0a4b05dea6/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-15/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-796a61e53e/cors.txt | 1 + .../kubernetes-staging-796a61e53e/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-796a61e53e/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-16/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-1024101f72/cors.txt | 1 + .../kubernetes-staging-1024101f72/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-1024101f72/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-17/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-b19c823631/cors.txt | 1 + .../kubernetes-staging-b19c823631/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-b19c823631/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-18/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-a838a56397/cors.txt | 1 + .../kubernetes-staging-a838a56397/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-a838a56397/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-19/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-ca6ab02e3a/cors.txt | 1 + .../kubernetes-staging-ca6ab02e3a/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-ca6ab02e3a/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-20/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-cafbdc7173/cors.txt | 1 + .../kubernetes-staging-cafbdc7173/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-cafbdc7173/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-21/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-f73abc16be/cors.txt | 1 + .../kubernetes-staging-f73abc16be/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-f73abc16be/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-22/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-e390e86ba0/cors.txt | 1 + .../kubernetes-staging-e390e86ba0/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-e390e86ba0/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-23/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-337e491d8f/cors.txt | 1 + .../kubernetes-staging-337e491d8f/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-337e491d8f/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-24/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-976424fe04/cors.txt | 1 + .../kubernetes-staging-976424fe04/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-976424fe04/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-25/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-1731323934/cors.txt | 1 + .../kubernetes-staging-1731323934/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-1731323934/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-26/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../cors.txt | 1 + .../iam.json | 17 +++++++++++++++++ .../logging.txt | 1 + .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-9cbbfe23c9/cors.txt | 1 + .../kubernetes-staging-9cbbfe23c9/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-9cbbfe23c9/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-27/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-db70fd0d28/cors.txt | 1 + .../kubernetes-staging-db70fd0d28/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-db70fd0d28/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-28/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-95c32ef316/cors.txt | 1 + .../kubernetes-staging-95c32ef316/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-95c32ef316/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-29/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ .../bucketpolicyonly.txt | 3 +++ .../kubernetes-staging-70df00502e/cors.txt | 1 + .../kubernetes-staging-70df00502e/iam.json | 17 +++++++++++++++++ .../kubernetes-staging-70df00502e/logging.txt | 1 + .../k8s-infra-e2e-boskos-scale-30/iam.json | 6 ++++++ .../services/compute/project-info.json | 4 ++++ .../services/enabled.txt | 3 +++ 238 files changed, 1204 insertions(+) create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/logging.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/bucketpolicyonly.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/cors.txt create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/iam.json create mode 100644 audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/logging.txt diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..2aace5d1618 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/cors.txt new file mode 100644 index 00000000000..bcbecf8dab2 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/iam.json new file mode 100644 index 00000000000..4b7496cc72a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-01", + "projectOwner:k8s-infra-e2e-boskos-scale-01" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-01" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/logging.txt new file mode 100644 index 00000000000..815dbc2b91b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-01.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/bucketpolicyonly.txt new file mode 100644 index 00000000000..1c9aa00f47b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-0164ec21c8: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/cors.txt new file mode 100644 index 00000000000..081818a706a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-0164ec21c8/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/iam.json new file mode 100644 index 00000000000..4b7496cc72a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-01", + "projectOwner:k8s-infra-e2e-boskos-scale-01" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-01" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/logging.txt new file mode 100644 index 00000000000..bd74f7b74d9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/buckets/kubernetes-staging-0164ec21c8/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-0164ec21c8/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-01/iam.json index eea4ba16e19..834fdbe5b84 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-01/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-40460865376@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:40460865376-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-01/services/compute/project-info.json index b6fdb7bcba2..a786042c17a 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-01/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 100, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 45, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-01/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-01/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-01/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-01/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/bucketpolicyonly.txt new file mode 100644 index 00000000000..3ada59a1543 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-5c678d1e86: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/cors.txt new file mode 100644 index 00000000000..d8e11b5bbde --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-5c678d1e86/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/iam.json new file mode 100644 index 00000000000..524436a323f --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-02", + "projectOwner:k8s-infra-e2e-boskos-scale-02" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-02" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/logging.txt new file mode 100644 index 00000000000..3e265fc519c --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/buckets/kubernetes-staging-5c678d1e86/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-5c678d1e86/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-02/iam.json index 48a9b04cd77..9fdca1dd6da 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-02/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-660290009727@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:660290009727-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-02/services/compute/project-info.json index aa70ea284de..a22857ccfd0 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-02/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 100, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 45, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-02/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-02/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-02/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-02/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/bucketpolicyonly.txt new file mode 100644 index 00000000000..02d8017531a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-29955e8a71: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/cors.txt new file mode 100644 index 00000000000..95858649adc --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-29955e8a71/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/iam.json new file mode 100644 index 00000000000..876c7c33b57 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-03", + "projectOwner:k8s-infra-e2e-boskos-scale-03" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-03" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/logging.txt new file mode 100644 index 00000000000..785d638de55 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/buckets/kubernetes-staging-29955e8a71/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-29955e8a71/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-03/iam.json index 8624671e04f..0668520f566 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-03/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-647280784790@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:647280784790-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-03/services/compute/project-info.json index 52dc165c18f..b739476bece 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-03/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 100, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 45, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-03/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-03/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-03/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-03/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..2818b16dd0b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/cors.txt new file mode 100644 index 00000000000..174a05e9146 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/iam.json new file mode 100644 index 00000000000..3d0329d8f74 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-04", + "projectOwner:k8s-infra-e2e-boskos-scale-04" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-04" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/logging.txt new file mode 100644 index 00000000000..e04373e9ec2 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-04.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/bucketpolicyonly.txt new file mode 100644 index 00000000000..f952bd3aebc --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-195efd44db: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/cors.txt new file mode 100644 index 00000000000..24a969811b0 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-195efd44db/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/iam.json new file mode 100644 index 00000000000..3d0329d8f74 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-04", + "projectOwner:k8s-infra-e2e-boskos-scale-04" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-04" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/logging.txt new file mode 100644 index 00000000000..a589c61fccb --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/buckets/kubernetes-staging-195efd44db/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-195efd44db/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-04/iam.json index e544f403660..66f08535c76 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-04/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-881216629017@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:881216629017-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-04/services/compute/project-info.json index c0334d4a1f3..c1fdfec828f 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-04/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 100, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 45, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-04/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-04/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-04/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-04/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/bucketpolicyonly.txt new file mode 100644 index 00000000000..7e4dfcaa106 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-65062dd307: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/cors.txt new file mode 100644 index 00000000000..2468c0abbe2 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-65062dd307/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/iam.json new file mode 100644 index 00000000000..d9fb158132d --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-05", + "projectOwner:k8s-infra-e2e-boskos-scale-05" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-05" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/logging.txt new file mode 100644 index 00000000000..f45f0965529 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/buckets/kubernetes-staging-65062dd307/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-65062dd307/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-05/iam.json index 2405a9b9bf6..091ca355748 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-05/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-303929844117@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:303929844117-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-05/services/compute/project-info.json index 7e213580910..3625c4cdbf6 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-05/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 100, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 45, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-05/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-05/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-05/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-05/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/bucketpolicyonly.txt new file mode 100644 index 00000000000..a67250fe207 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-74a4e984af: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/cors.txt new file mode 100644 index 00000000000..ccf460089db --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-74a4e984af/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/iam.json new file mode 100644 index 00000000000..135a7f9184f --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-06", + "projectOwner:k8s-infra-e2e-boskos-scale-06" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-06" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/logging.txt new file mode 100644 index 00000000000..733f8cb6993 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/buckets/kubernetes-staging-74a4e984af/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-74a4e984af/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-06/iam.json index e6049fde367..5a359ede73e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-06/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-896865780972@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:896865780972-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-06/services/compute/project-info.json index e7e56903f89..8e1d6832e06 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-06/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-06/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-06/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-06/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-06/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/bucketpolicyonly.txt new file mode 100644 index 00000000000..18c8c7f0a85 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-a06fd56271: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/cors.txt new file mode 100644 index 00000000000..3889bd0c263 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-a06fd56271/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/iam.json new file mode 100644 index 00000000000..102ebb6f0a0 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-07", + "projectOwner:k8s-infra-e2e-boskos-scale-07" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-07" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/logging.txt new file mode 100644 index 00000000000..77d683d92b9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/buckets/kubernetes-staging-a06fd56271/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-a06fd56271/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-07/iam.json index e00566fae85..1347b6c35e7 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-07/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-908953038229@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:908953038229-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-07/services/compute/project-info.json index 8a4a75129a0..33b3de8da90 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-07/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-07/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-07/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-07/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-07/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/bucketpolicyonly.txt new file mode 100644 index 00000000000..fad4903d565 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-181e2e3096: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/cors.txt new file mode 100644 index 00000000000..11962118381 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-181e2e3096/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/iam.json new file mode 100644 index 00000000000..979cbe4334d --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-08", + "projectOwner:k8s-infra-e2e-boskos-scale-08" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-08" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/logging.txt new file mode 100644 index 00000000000..6bff1836104 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/buckets/kubernetes-staging-181e2e3096/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-181e2e3096/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-08/iam.json index 0a1848b1693..b50d14f25c5 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-08/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-380176220624@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:380176220624-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-08/services/compute/project-info.json index 78757531347..225be6a791b 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-08/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-08/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-08/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-08/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-08/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..4ec0338998b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/cors.txt new file mode 100644 index 00000000000..51c4626c18e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/iam.json new file mode 100644 index 00000000000..dabadc23447 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-09", + "projectOwner:k8s-infra-e2e-boskos-scale-09" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-09" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/logging.txt new file mode 100644 index 00000000000..b0da32d649b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-09.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/bucketpolicyonly.txt new file mode 100644 index 00000000000..ec63ef5dd53 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-11e949d58c: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/cors.txt new file mode 100644 index 00000000000..5c7b450e19d --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-11e949d58c/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/iam.json new file mode 100644 index 00000000000..dabadc23447 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-09", + "projectOwner:k8s-infra-e2e-boskos-scale-09" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-09" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/logging.txt new file mode 100644 index 00000000000..92dead19c46 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/buckets/kubernetes-staging-11e949d58c/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-11e949d58c/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-09/iam.json index 354fabe09b3..9f5c2e33b04 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-09/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-514023723791@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:514023723791-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-09/services/compute/project-info.json index f8962baed67..e5a4cb9ae97 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-09/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-09/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-09/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-09/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-09/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..edc7116f58e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/cors.txt new file mode 100644 index 00000000000..918cb110e97 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/iam.json new file mode 100644 index 00000000000..ea9fc842262 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-10", + "projectOwner:k8s-infra-e2e-boskos-scale-10" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-10" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/logging.txt new file mode 100644 index 00000000000..a4e616356df --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-10.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/bucketpolicyonly.txt new file mode 100644 index 00000000000..64b51dc0e9f --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-fd68dabe88: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/cors.txt new file mode 100644 index 00000000000..710c8845e59 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-fd68dabe88/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/iam.json new file mode 100644 index 00000000000..ea9fc842262 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-10", + "projectOwner:k8s-infra-e2e-boskos-scale-10" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-10" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/logging.txt new file mode 100644 index 00000000000..f9641b59cee --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/buckets/kubernetes-staging-fd68dabe88/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-fd68dabe88/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-10/iam.json index 33d972d8e56..10cc68d630f 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-10/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-832452291707@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:832452291707-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-10/services/compute/project-info.json index 91d228f62f6..7cc50c272fe 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-10/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-10/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-10/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-10/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-10/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/bucketpolicyonly.txt new file mode 100644 index 00000000000..18023ab5980 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-20b0a8d25a: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/cors.txt new file mode 100644 index 00000000000..c8056ae1058 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-20b0a8d25a/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/iam.json new file mode 100644 index 00000000000..a0b36616a86 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-11", + "projectOwner:k8s-infra-e2e-boskos-scale-11" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-11" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/logging.txt new file mode 100644 index 00000000000..6cc4012e0cc --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/buckets/kubernetes-staging-20b0a8d25a/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-20b0a8d25a/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-11/iam.json index b172df37520..8227d51ce4c 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-11/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-835090643128@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:835090643128-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-11/services/compute/project-info.json index 041c9a6201a..394ed9e9f86 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-11/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-11/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-11/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-11/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-11/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/bucketpolicyonly.txt new file mode 100644 index 00000000000..a896245aa1a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-7c618dfabd: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/cors.txt new file mode 100644 index 00000000000..34deaae3d77 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-7c618dfabd/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/iam.json new file mode 100644 index 00000000000..47e4de2f5f4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-12", + "projectOwner:k8s-infra-e2e-boskos-scale-12" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-12" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/logging.txt new file mode 100644 index 00000000000..4da8a20e247 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/buckets/kubernetes-staging-7c618dfabd/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-7c618dfabd/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-12/iam.json index 5ca073e1be9..b660d1aa4be 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-12/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-692227742238@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:692227742238-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-12/services/compute/project-info.json index 166b2d97d18..e44b04b24da 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-12/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-12/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-12/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-12/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-12/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/bucketpolicyonly.txt new file mode 100644 index 00000000000..839cb0ae82a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-5e1d5383f0: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/cors.txt new file mode 100644 index 00000000000..f6aff15a901 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-5e1d5383f0/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/iam.json new file mode 100644 index 00000000000..fc6fcd767d9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-13", + "projectOwner:k8s-infra-e2e-boskos-scale-13" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-13" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/logging.txt new file mode 100644 index 00000000000..12ecd58bd29 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/buckets/kubernetes-staging-5e1d5383f0/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-5e1d5383f0/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-13/iam.json index 32e4cc6b0d3..788d93d3061 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-13/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-717643192189@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:717643192189-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-13/services/compute/project-info.json index 32dc943060c..d72be5c2de4 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-13/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-13/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-13/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-13/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-13/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/bucketpolicyonly.txt new file mode 100644 index 00000000000..aed816fec6a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-fbef914a88: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/cors.txt new file mode 100644 index 00000000000..15a772f6ff3 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-fbef914a88/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/iam.json new file mode 100644 index 00000000000..c5f246fa003 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-14", + "projectOwner:k8s-infra-e2e-boskos-scale-14" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-14" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/logging.txt new file mode 100644 index 00000000000..34225f078d7 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/buckets/kubernetes-staging-fbef914a88/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-fbef914a88/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-14/iam.json index 980a56c6c76..0948aca054a 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-14/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-852293948802@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:852293948802-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-14/services/compute/project-info.json index fb7f39dc3e5..af840706787 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-14/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-14/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-14/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-14/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-14/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..7502492f65d --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/cors.txt new file mode 100644 index 00000000000..b8a3f5216fc --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/iam.json new file mode 100644 index 00000000000..031f3e5dbb4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-15", + "projectOwner:k8s-infra-e2e-boskos-scale-15" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-15" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/logging.txt new file mode 100644 index 00000000000..96899f9295c --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-15.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/bucketpolicyonly.txt new file mode 100644 index 00000000000..9adfc6793b6 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-0a4b05dea6: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/cors.txt new file mode 100644 index 00000000000..2f0e777c73a --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-0a4b05dea6/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/iam.json new file mode 100644 index 00000000000..031f3e5dbb4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-15", + "projectOwner:k8s-infra-e2e-boskos-scale-15" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-15" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/logging.txt new file mode 100644 index 00000000000..d92e311c3af --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/buckets/kubernetes-staging-0a4b05dea6/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-0a4b05dea6/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-15/iam.json index 0668a2c4ffb..a1959edf39e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-15/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-392103292135@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:392103292135-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-15/services/compute/project-info.json index 2cb0fa0cbcb..334f1d59793 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-15/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-15/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-15/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-15/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-15/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..791fa24c923 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/cors.txt new file mode 100644 index 00000000000..6e8c2dd46e4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/iam.json new file mode 100644 index 00000000000..d5a79f65145 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-16", + "projectOwner:k8s-infra-e2e-boskos-scale-16" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-16" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/logging.txt new file mode 100644 index 00000000000..cc287897bd4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-16.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/bucketpolicyonly.txt new file mode 100644 index 00000000000..f0281ec6bed --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-796a61e53e: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/cors.txt new file mode 100644 index 00000000000..7944417b301 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-796a61e53e/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/iam.json new file mode 100644 index 00000000000..d5a79f65145 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-16", + "projectOwner:k8s-infra-e2e-boskos-scale-16" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-16" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/logging.txt new file mode 100644 index 00000000000..e1f0fe1a2ea --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/buckets/kubernetes-staging-796a61e53e/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-796a61e53e/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-16/iam.json index 5ca1b155365..298ff329adc 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-16/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-151914219077@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:151914219077-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-16/services/compute/project-info.json index 6149886846b..6530054304e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-16/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-16/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-16/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-16/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-16/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/bucketpolicyonly.txt new file mode 100644 index 00000000000..25e2354c9c7 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-1024101f72: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/cors.txt new file mode 100644 index 00000000000..b387d101f64 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-1024101f72/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/iam.json new file mode 100644 index 00000000000..21505fb8ebf --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-17", + "projectOwner:k8s-infra-e2e-boskos-scale-17" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-17" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/logging.txt new file mode 100644 index 00000000000..82d5613289b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/buckets/kubernetes-staging-1024101f72/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-1024101f72/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-17/iam.json index 15dc96c1c15..4c6904a0f61 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-17/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-529310953145@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:529310953145-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-17/services/compute/project-info.json index 732e9d76462..34675b41a1e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-17/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-17/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-17/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-17/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-17/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/bucketpolicyonly.txt new file mode 100644 index 00000000000..0dfdf998f0b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-b19c823631: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/cors.txt new file mode 100644 index 00000000000..1b4a5bbb399 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-b19c823631/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/iam.json new file mode 100644 index 00000000000..5b7454221d4 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-18", + "projectOwner:k8s-infra-e2e-boskos-scale-18" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-18" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/logging.txt new file mode 100644 index 00000000000..b9152ec385b --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/buckets/kubernetes-staging-b19c823631/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-b19c823631/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-18/iam.json index 1dd44d30da2..7e4aa5280e0 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-18/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-219627249712@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:219627249712-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-18/services/compute/project-info.json index f445531d061..66aa128b82e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-18/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-18/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-18/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-18/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-18/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/bucketpolicyonly.txt new file mode 100644 index 00000000000..1f88972e1ce --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-a838a56397: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/cors.txt new file mode 100644 index 00000000000..a283132c45e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-a838a56397/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/iam.json new file mode 100644 index 00000000000..c4d7b1827d1 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-19", + "projectOwner:k8s-infra-e2e-boskos-scale-19" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-19" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/logging.txt new file mode 100644 index 00000000000..d279c012e99 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/buckets/kubernetes-staging-a838a56397/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-a838a56397/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-19/iam.json index 5c0a1f472b4..b7953b3b346 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-19/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-175011321769@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:175011321769-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-19/services/compute/project-info.json index f11fda15c31..1f565d01f89 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-19/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-19/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-19/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-19/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-19/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/bucketpolicyonly.txt new file mode 100644 index 00000000000..5b8c548fef9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-ca6ab02e3a: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/cors.txt new file mode 100644 index 00000000000..de180faf599 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-ca6ab02e3a/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/iam.json new file mode 100644 index 00000000000..d77e8a94fdb --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-20", + "projectOwner:k8s-infra-e2e-boskos-scale-20" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-20" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/logging.txt new file mode 100644 index 00000000000..d05c2a8d1a0 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/buckets/kubernetes-staging-ca6ab02e3a/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-ca6ab02e3a/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-20/iam.json index 50e0a5685d6..968124f261a 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-20/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-893407088392@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:893407088392-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-20/services/compute/project-info.json index d5234974866..2264d7340b5 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-20/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-20/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-20/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-20/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-20/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/bucketpolicyonly.txt new file mode 100644 index 00000000000..022ffc9d7bb --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-cafbdc7173: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/cors.txt new file mode 100644 index 00000000000..6d8cb189b34 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-cafbdc7173/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/iam.json new file mode 100644 index 00000000000..d0840218dca --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-21", + "projectOwner:k8s-infra-e2e-boskos-scale-21" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-21" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/logging.txt new file mode 100644 index 00000000000..c33dc9502e9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/buckets/kubernetes-staging-cafbdc7173/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-cafbdc7173/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-21/iam.json index 815276cfa63..95e7f32f2db 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-21/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-961368471244@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:961368471244-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-21/services/compute/project-info.json index 5a0f8118976..46b9d0d99d4 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-21/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-21/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-21/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-21/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-21/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/bucketpolicyonly.txt new file mode 100644 index 00000000000..06a04d61293 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-f73abc16be: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/cors.txt new file mode 100644 index 00000000000..503efd29211 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-f73abc16be/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/iam.json new file mode 100644 index 00000000000..e9a299c1103 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-22", + "projectOwner:k8s-infra-e2e-boskos-scale-22" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-22" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/logging.txt new file mode 100644 index 00000000000..11dd17784f3 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/buckets/kubernetes-staging-f73abc16be/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-f73abc16be/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-22/iam.json index 63a4cb1d74e..bf4c33f04fd 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-22/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-370249020154@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:370249020154-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-22/services/compute/project-info.json index a7a392a9043..96adcb6d779 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-22/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-22/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-22/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-22/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-22/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/bucketpolicyonly.txt new file mode 100644 index 00000000000..885a5aa33b8 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-e390e86ba0: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/cors.txt new file mode 100644 index 00000000000..03255f21984 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-e390e86ba0/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/iam.json new file mode 100644 index 00000000000..aecd1b310da --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-23", + "projectOwner:k8s-infra-e2e-boskos-scale-23" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-23" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/logging.txt new file mode 100644 index 00000000000..d9c1718da7f --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/buckets/kubernetes-staging-e390e86ba0/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-e390e86ba0/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-23/iam.json index 2ac31a064a3..9c4cf96e32e 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-23/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-610500652130@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:610500652130-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-23/services/compute/project-info.json index 0527ee62e61..fd8537b52fe 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-23/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-23/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-23/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-23/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-23/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/bucketpolicyonly.txt new file mode 100644 index 00000000000..4571c078655 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-337e491d8f: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/cors.txt new file mode 100644 index 00000000000..89d7993025e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-337e491d8f/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/iam.json new file mode 100644 index 00000000000..118b5e51eb9 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-24", + "projectOwner:k8s-infra-e2e-boskos-scale-24" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-24" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/logging.txt new file mode 100644 index 00000000000..f0489f468ba --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/buckets/kubernetes-staging-337e491d8f/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-337e491d8f/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-24/iam.json index 6ed1b1026e7..ab8334092e9 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-24/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-211820429131@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:211820429131-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-24/services/compute/project-info.json index bf255175cca..45aabd741fc 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-24/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-24/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-24/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-24/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-24/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/bucketpolicyonly.txt new file mode 100644 index 00000000000..fc53133baf7 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-976424fe04: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/cors.txt new file mode 100644 index 00000000000..8483019ff82 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-976424fe04/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/iam.json new file mode 100644 index 00000000000..34a7e97eafe --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-25", + "projectOwner:k8s-infra-e2e-boskos-scale-25" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-25" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/logging.txt new file mode 100644 index 00000000000..519c8edd4e0 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/buckets/kubernetes-staging-976424fe04/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-976424fe04/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-25/iam.json index 67e2518fc3f..2840087883c 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-25/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-500629287260@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:500629287260-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-25/services/compute/project-info.json index 98ed38434f4..6bf43e3580b 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-25/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-25/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-25/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-25/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-25/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/bucketpolicyonly.txt new file mode 100644 index 00000000000..d29545c6846 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-1731323934: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/cors.txt new file mode 100644 index 00000000000..406a1145218 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-1731323934/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/iam.json new file mode 100644 index 00000000000..db09ae12367 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-26", + "projectOwner:k8s-infra-e2e-boskos-scale-26" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-26" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/logging.txt new file mode 100644 index 00000000000..2b1f85d2184 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/buckets/kubernetes-staging-1731323934/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-1731323934/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-26/iam.json index f8f037e0fc7..ad879c80131 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-26/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-257675618203@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:257675618203-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-26/services/compute/project-info.json index 06797efa089..b700ef4a4c6 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-26/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-26/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-26/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-26/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-26/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..d60c87f5c60 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/cors.txt new file mode 100644 index 00000000000..2924402b6b1 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/iam.json new file mode 100644 index 00000000000..89111e8cf94 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-27", + "projectOwner:k8s-infra-e2e-boskos-scale-27" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-27" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/logging.txt new file mode 100644 index 00000000000..f778ae26f3e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-infra-e2e-boskos-scale-27.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/bucketpolicyonly.txt new file mode 100644 index 00000000000..3264937626e --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-9cbbfe23c9: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/cors.txt new file mode 100644 index 00000000000..28147138efc --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-9cbbfe23c9/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/iam.json new file mode 100644 index 00000000000..89111e8cf94 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-27", + "projectOwner:k8s-infra-e2e-boskos-scale-27" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-27" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/logging.txt new file mode 100644 index 00000000000..3b3bcefca18 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/buckets/kubernetes-staging-9cbbfe23c9/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-9cbbfe23c9/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-27/iam.json index ca659613a86..c854960a436 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-27/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-440111527817@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:440111527817-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-27/services/compute/project-info.json index 70a280953ed..22cebeda815 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-27/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-27/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-27/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-27/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-27/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/bucketpolicyonly.txt new file mode 100644 index 00000000000..51449cb75ff --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-db70fd0d28: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/cors.txt new file mode 100644 index 00000000000..97d7e11dbc5 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-db70fd0d28/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/iam.json new file mode 100644 index 00000000000..107d36de08f --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-28", + "projectOwner:k8s-infra-e2e-boskos-scale-28" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-28" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/logging.txt new file mode 100644 index 00000000000..4d67eaccdb5 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/buckets/kubernetes-staging-db70fd0d28/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-db70fd0d28/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-28/iam.json index 78a4c7800df..e4c21cf863d 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-28/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-199724281835@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:199724281835-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-28/services/compute/project-info.json index d80619a393b..28818fc9fc9 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-28/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-28/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-28/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-28/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-28/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/bucketpolicyonly.txt new file mode 100644 index 00000000000..4ffe0051d4c --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-95c32ef316: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/cors.txt new file mode 100644 index 00000000000..74072e2d824 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-95c32ef316/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/iam.json new file mode 100644 index 00000000000..1a4636f67ca --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-29", + "projectOwner:k8s-infra-e2e-boskos-scale-29" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-29" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/logging.txt new file mode 100644 index 00000000000..544e642241d --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/buckets/kubernetes-staging-95c32ef316/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-95c32ef316/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-29/iam.json index 666d5cf8907..2d09caa8096 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-29/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-718923874112@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:718923874112-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-29/services/compute/project-info.json index 78ea1ad0366..977cc19829d 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-29/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-29/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-29/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-29/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-29/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/bucketpolicyonly.txt b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/bucketpolicyonly.txt new file mode 100644 index 00000000000..010854718ba --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/bucketpolicyonly.txt @@ -0,0 +1,3 @@ +Bucket Policy Only setting for gs://kubernetes-staging-70df00502e: + Enabled: False + diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/cors.txt b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/cors.txt new file mode 100644 index 00000000000..48134a14d36 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/cors.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-70df00502e/ has no CORS configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/iam.json new file mode 100644 index 00000000000..537c78749e6 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/iam.json @@ -0,0 +1,17 @@ +{ + "bindings": [ + { + "members": [ + "projectEditor:k8s-infra-e2e-boskos-scale-30", + "projectOwner:k8s-infra-e2e-boskos-scale-30" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "projectViewer:k8s-infra-e2e-boskos-scale-30" + ], + "role": "roles/storage.legacyBucketReader" + } + ] +} diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/logging.txt b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/logging.txt new file mode 100644 index 00000000000..8708bf100e2 --- /dev/null +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/buckets/kubernetes-staging-70df00502e/logging.txt @@ -0,0 +1 @@ +gs://kubernetes-staging-70df00502e/ has no logging configuration. diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/iam.json b/audit/projects/k8s-infra-e2e-boskos-scale-30/iam.json index c7d89769c9b..32b534481a1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-30/iam.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/iam.json @@ -12,6 +12,12 @@ ], "role": "roles/compute.serviceAgent" }, + { + "members": [ + "serviceAccount:service-17885835863@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/containerregistry.ServiceAgent" + }, { "members": [ "serviceAccount:17885835863-compute@developer.gserviceaccount.com", diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-boskos-scale-30/services/compute/project-info.json index 28f4e5ebe6f..6727a118f86 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-30/services/compute/project-info.json +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/services/compute/project-info.json @@ -119,6 +119,10 @@ "limit": 200, "metric": "SECURITY_POLICY_RULES" }, + { + "limit": 1000, + "metric": "XPN_SERVICE_PROJECTS" + }, { "limit": 150, "metric": "PACKET_MIRRORINGS" diff --git a/audit/projects/k8s-infra-e2e-boskos-scale-30/services/enabled.txt b/audit/projects/k8s-infra-e2e-boskos-scale-30/services/enabled.txt index 385bd4acd0e..3b60c8454c1 100644 --- a/audit/projects/k8s-infra-e2e-boskos-scale-30/services/enabled.txt +++ b/audit/projects/k8s-infra-e2e-boskos-scale-30/services/enabled.txt @@ -1,6 +1,9 @@ NAME TITLE compute.googleapis.com Compute Engine API +containerregistry.googleapis.com Container Registry API logging.googleapis.com Cloud Logging API monitoring.googleapis.com Cloud Monitoring API oslogin.googleapis.com Cloud OS Login API +pubsub.googleapis.com Cloud Pub/Sub API +storage-api.googleapis.com Google Cloud Storage JSON API storage-component.googleapis.com Cloud Storage