audit: update as of 2021-07-24

kubernetes · Jul 24, 2021 · f8cddb7 · f8cddb7
1 parent 9aed67d
commit f8cddb7
Show file tree

Hide file tree

Showing 16 changed files with 77 additions and 193 deletions.
diff --git a/audit/projects/k8s-infra-e2e-scale-5k-project/services/compute/project-info.json b/audit/projects/k8s-infra-e2e-scale-5k-project/services/compute/project-info.json
@@ -3,7 +3,7 @@
     "items": [
       {
         "key": "ssh-keys",
-        "value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\n"
+        "value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nameukam:ssh-rsa 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 ameukam@barbatos"
       }
     ],
     "kind": "compute#metadata"

diff --git a/...infra-ii-sandbox/services/bigquery/bigquery.datasets.etl_script_generated_set.access.json b/...infra-ii-sandbox/services/bigquery/bigquery.datasets.etl_script_generated_set.access.json
diff --git a/...fra-ii-sandbox/services/bigquery/bigquery.datasets.etl_script_generated_set_1.access.json b/...fra-ii-sandbox/services/bigquery/bigquery.datasets.etl_script_generated_set_1.access.json
diff --git a/...projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.etl_staging.access.json b/...projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.etl_staging.access.json
diff --git a/audit/projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.hh.access.json b/audit/projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.hh.access.json
diff --git a/audit/projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-infra-ii-sandbox/services/bigquery/bigquery.datasets.json
@@ -1,22 +1,4 @@
 [
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:etl_script_generated_set",
-    "datasetReference": {
-      "datasetId": "etl_script_generated_set",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:etl_script_generated_set_1",
-    "datasetReference": {
-      "datasetId": "etl_script_generated_set_1",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
   {
     "kind": "bigquery#dataset",
     "id": "k8s-infra-ii-sandbox:etl_script_generated_set_prod",
@@ -26,54 +8,6 @@
     },
     "location": "US"
   },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:etl_staging",
-    "datasetReference": {
-      "datasetId": "etl_staging",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:hh",
-    "datasetReference": {
-      "datasetId": "hh",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:k8s_artifacts_dataset_bb_test",
-    "datasetReference": {
-      "datasetId": "k8s_artifacts_dataset_bb_test",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "labels": {
-      "managed-by-cnrm": "true"
-    },
-    "location": "US"
-  },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:k8s_artifacts_gcslogs_appspot",
-    "datasetReference": {
-      "datasetId": "k8s_artifacts_gcslogs_appspot",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
-  {
-    "kind": "bigquery#dataset",
-    "id": "k8s-infra-ii-sandbox:kubernetes_public_logs",
-    "datasetReference": {
-      "datasetId": "kubernetes_public_logs",
-      "projectId": "k8s-infra-ii-sandbox"
-    },
-    "location": "US"
-  },
   {
     "kind": "bigquery#dataset",
     "id": "k8s-infra-ii-sandbox:riaan_data_store",

diff --git a/...-ii-sandbox/services/bigquery/bigquery.datasets.k8s_artifacts_dataset_bb_test.access.json b/...-ii-sandbox/services/bigquery/bigquery.datasets.k8s_artifacts_dataset_bb_test.access.json
diff --git a/...-ii-sandbox/services/bigquery/bigquery.datasets.k8s_artifacts_gcslogs_appspot.access.json b/...-ii-sandbox/services/bigquery/bigquery.datasets.k8s_artifacts_gcslogs_appspot.access.json
diff --git a/...s-infra-ii-sandbox/services/bigquery/bigquery.datasets.kubernetes_public_logs.access.json b/...s-infra-ii-sandbox/services/bigquery/bigquery.datasets.kubernetes_public_logs.access.json
diff --git a/...jects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/description.json b/...jects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/description.json
@@ -0,0 +1,10 @@
+{
+  "createTime": "2021-07-22T15:22:42.229306Z",
+  "labels": {
+    "group": "sig-contributor-experience"
+  },
+  "name": "projects/180382678033/secrets/k8s-triage-robot-github-token",
+  "replication": {
+    "automatic": {}
+  }
+}
diff --git a/audit/projects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/iam.json b/audit/projects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/iam.json
@@ -0,0 +1,12 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/secretmanager.admin"
+    }
+  ],
+  "version": 1
+}
diff --git a/...projects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/versions.json b/...projects/k8s-infra-prow-build-trusted/secrets/k8s-triage-robot-github-token/versions.json
@@ -0,0 +1,29 @@
+[
+  {
+    "createTime": "2021-07-23T03:18:11.506633Z",
+    "etag": "\"15c7c1da789dc9\"",
+    "name": "projects/180382678033/secrets/k8s-triage-robot-github-token/versions/3",
+    "replicationStatus": {
+      "automatic": {}
+    },
+    "state": "ENABLED"
+  },
+  {
+    "createTime": "2021-07-22T22:02:20.507249Z",
+    "etag": "\"15c7bd70e75071\"",
+    "name": "projects/180382678033/secrets/k8s-triage-robot-github-token/versions/2",
+    "replicationStatus": {
+      "automatic": {}
+    },
+    "state": "ENABLED"
+  },
+  {
+    "createTime": "2021-07-22T17:11:33.029513Z",
+    "etag": "\"15c7c1db001f02\"",
+    "name": "projects/180382678033/secrets/k8s-triage-robot-github-token/versions/1",
+    "replicationStatus": {
+      "automatic": {}
+    },
+    "state": "DISABLED"
+  }
+]
diff --git a/audit/projects/kubernetes-public/iam.json b/audit/projects/kubernetes-public/iam.json
@@ -1,5 +1,11 @@
 {
   "bindings": [
+    {
+      "members": [
+        "serviceAccount:prow-deployer@k8s-infra-prow-build-trusted.iam.gserviceaccount.com"
+      ],
+      "role": "organizations/758905017065/roles/container.deployer"
+    },
     {
       "members": [
         "group:[email protected]"

diff --git a/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/description.json b/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/description.json
@@ -0,0 +1,7 @@
+{
+  "createTime": "2021-07-21T22:43:41.525028Z",
+  "name": "projects/127754664067/secrets/k8s-infra-prow-hmac-token",
+  "replication": {
+    "automatic": {}
+  }
+}
diff --git a/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/iam.json b/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/iam.json
@@ -0,0 +1 @@
+{}
diff --git a/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/versions.json b/audit/projects/kubernetes-public/secrets/k8s-infra-prow-hmac-token/versions.json
@@ -0,0 +1,11 @@
+[
+  {
+    "createTime": "2021-07-21T22:43:43.063748Z",
+    "etag": "\"15c7a9e708bec4\"",
+    "name": "projects/127754664067/secrets/k8s-infra-prow-hmac-token/versions/1",
+    "replicationStatus": {
+      "automatic": {}
+    },
+    "state": "ENABLED"
+  }
+]