Skip to content

Commit

Permalink
audit: update as of 2021-05-01
Browse files Browse the repository at this point in the history
  • Loading branch information
cncf-ci committed May 1, 2021
1 parent 18c2adb commit 2f18446
Show file tree
Hide file tree
Showing 78 changed files with 554 additions and 69 deletions.
3 changes: 2 additions & 1 deletion audit/org_kubernetes.io/iam.json
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,8 @@
},
{
"members": [
"group:k8s-infra-gcp-auditors@kubernetes.io"
"group:k8s-infra-gcp-auditors@kubernetes.io",
"serviceAccount:k8s-infra-gcp-auditor@kubernetes-public.iam.gserviceaccount.com"
],
"role": "organizations/758905017065/roles/audit.viewer"
},
Expand Down
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://asia.artifacts.k8s-artifacts-prod.appspot.com/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "asia.artifacts.k8s-artifacts-prod.appspot.com"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://eu.artifacts.k8s-artifacts-prod.appspot.com/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "eu.artifacts.k8s-artifacts-prod.appspot.com"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://k8s-artifacts-cni/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "k8s-artifacts-cni"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://k8s-artifacts-cri-tools/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "k8s-artifacts-cri-tools"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://k8s-artifacts-csi/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "k8s-artifacts-csi"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://k8s-artifacts-kind/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "k8s-artifacts-kind"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://k8s-artifacts-prod/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "k8s-artifacts-prod"}
Original file line number Diff line number Diff line change
@@ -1 +1 @@
gs://us.artifacts.k8s-artifacts-prod.appspot.com/ has no logging configuration.
{"logBucket": "k8s-artifacts-gcslogs", "logObjectPrefix": "us.artifacts.k8s-artifacts-prod.appspot.com"}
1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/services/enabled.txt
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@ cloudtrace.googleapis.com Cloud Trace API
compute.googleapis.com Compute Engine API
containeranalysis.googleapis.com Container Analysis API
containerregistry.googleapis.com Container Registry API
containerscanning.googleapis.com Container Scanning API
datastore.googleapis.com Cloud Datastore API
logging.googleapis.com Cloud Logging API
monitoring.googleapis.com Cloud Monitoring API
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"items": [
{
"key": "ssh-keys",
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow"
}
],
"kind": "compute#metadata"
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-03.appspot.com:
Enabled: False

Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-03.appspot.com/ has no CORS configuration.
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
{
"bindings": [
{
"members": [
"projectEditor:k8s-infra-e2e-boskos-scale-03",
"projectOwner:k8s-infra-e2e-boskos-scale-03"
],
"role": "roles/storage.legacyBucketOwner"
},
{
"members": [
"projectViewer:k8s-infra-e2e-boskos-scale-03"
],
"role": "roles/storage.legacyBucketReader"
}
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-03.appspot.com/ has no logging configuration.
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"items": [
{
"key": "ssh-keys",
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
}
],
"kind": "compute#metadata"
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-21.appspot.com:
Enabled: False

Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-21.appspot.com/ has no CORS configuration.
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
{
"bindings": [
{
"members": [
"projectEditor:k8s-infra-e2e-boskos-scale-21",
"projectOwner:k8s-infra-e2e-boskos-scale-21"
],
"role": "roles/storage.legacyBucketOwner"
},
{
"members": [
"projectViewer:k8s-infra-e2e-boskos-scale-21"
],
"role": "roles/storage.legacyBucketReader"
}
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-21.appspot.com/ has no logging configuration.
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
Bucket Policy Only setting for gs://artifacts.k8s-infra-e2e-boskos-scale-25.appspot.com:
Enabled: False

Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-25.appspot.com/ has no CORS configuration.
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
{
"bindings": [
{
"members": [
"projectEditor:k8s-infra-e2e-boskos-scale-25",
"projectOwner:k8s-infra-e2e-boskos-scale-25"
],
"role": "roles/storage.legacyBucketOwner"
},
{
"members": [
"projectViewer:k8s-infra-e2e-boskos-scale-25"
],
"role": "roles/storage.legacyBucketReader"
}
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
gs://artifacts.k8s-infra-e2e-boskos-scale-25.appspot.com/ has no logging configuration.
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"items": [
{
"key": "ssh-keys",
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
}
],
"kind": "compute#metadata"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"items": [
{
"key": "ssh-keys",
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
"value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
}
],
"kind": "compute#metadata"
Expand Down
11 changes: 11 additions & 0 deletions audit/projects/k8s-infra-ii-sandbox/description.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
{
"createTime": "2021-04-26T13:49:16.042Z",
"lifecycleState": "ACTIVE",
"name": "k8s-infra-ii-sandbox",
"parent": {
"id": "758905017065",
"type": "organization"
},
"projectId": "k8s-infra-ii-sandbox",
"projectNumber": "631771264409"
}
61 changes: 61 additions & 0 deletions audit/projects/k8s-infra-ii-sandbox/iam.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
{
"bindings": [
{
"members": [
"serviceAccount:631771264409@cloudbuild.gserviceaccount.com"
],
"role": "roles/cloudbuild.builds.builder"
},
{
"members": [
"serviceAccount:service-631771264409@gcp-sa-cloudbuild.iam.gserviceaccount.com"
],
"role": "roles/cloudbuild.serviceAgent"
},
{
"members": [
"serviceAccount:service-631771264409@compute-system.iam.gserviceaccount.com"
],
"role": "roles/compute.serviceAgent"
},
{
"members": [
"serviceAccount:service-631771264409@container-engine-robot.iam.gserviceaccount.com"
],
"role": "roles/container.serviceAgent"
},
{
"members": [
"serviceAccount:service-631771264409@container-analysis.iam.gserviceaccount.com"
],
"role": "roles/containeranalysis.ServiceAgent"
},
{
"members": [
"serviceAccount:service-631771264409@containerregistry.iam.gserviceaccount.com"
],
"role": "roles/containerregistry.ServiceAgent"
},
{
"members": [
"serviceAccount:631771264409-compute@developer.gserviceaccount.com",
"serviceAccount:631771264409@cloudservices.gserviceaccount.com"
],
"role": "roles/editor"
},
{
"members": [
"group:k8s-infra-ii-coop@kubernetes.io",
"user:ameukam@gmail.com"
],
"role": "roles/owner"
},
{
"members": [
"serviceAccount:service-631771264409@gcp-sa-pubsub.iam.gserviceaccount.com"
],
"role": "roles/pubsub.serviceAgent"
}
],
"version": 1
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"displayName": "Compute Engine default service account",
"email": "631771264409-compute@developer.gserviceaccount.com",
"name": "projects/k8s-infra-ii-sandbox/serviceAccounts/631771264409-compute@developer.gserviceaccount.com",
"oauth2ClientId": "112671677819146043926",
"projectId": "k8s-infra-ii-sandbox",
"uniqueId": "112671677819146043926"
}
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{}
Empty file.
Loading

0 comments on commit 2f18446

Please sign in to comment.