results of running audit script as of 2021-01-13

audit/projects/k8s-staging-addon-manager/buckets/artifacts.k8s-staging-addon-manager.appspot.com/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://artifacts.k8s-staging-addon-manager.appspot.com:
+  Enabled: True
+  LockedTime: 2020-12-29 15:50:11.853000+00:00
+

audit/projects/k8s-staging-addon-manager/buckets/artifacts.k8s-staging-addon-manager.appspot.com/cors.txt

@@ -0,0 +1 @@
+gs://artifacts.k8s-staging-addon-manager.appspot.com/ has no CORS configuration.

audit/projects/k8s-staging-addon-manager/buckets/artifacts.k8s-staging-addon-manager.appspot.com/iam.json

@@ -0,0 +1,37 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-addon-manager",
+        "projectOwner:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "allUsers"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-addon-manager/buckets/artifacts.k8s-staging-addon-manager.appspot.com/logging.txt

@@ -0,0 +1 @@
+gs://artifacts.k8s-staging-addon-manager.appspot.com/ has no logging configuration.

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager-gcb/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://k8s-staging-addon-manager-gcb:
+  Enabled: True
+  LockedTime: 2020-12-29 15:50:59.044000+00:00
+

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager-gcb/cors.txt

@@ -0,0 +1 @@
+gs://k8s-staging-addon-manager-gcb/ has no CORS configuration.

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager-gcb/iam.json

@@ -0,0 +1,46 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-addon-manager",
+        "projectOwner:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/storage.objectCreator"
+    },
+    {
+      "members": [
+        "allUsers",
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager-gcb/logging.txt

@@ -0,0 +1 @@
+gs://k8s-staging-addon-manager-gcb/ has no logging configuration.

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://k8s-staging-addon-manager:
+  Enabled: True
+  LockedTime: 2020-12-29 15:50:35.841000+00:00
+

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager/cors.txt

@@ -0,0 +1 @@
+gs://k8s-staging-addon-manager/ has no CORS configuration.

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager/iam.json

@@ -0,0 +1,37 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-addon-manager",
+        "projectOwner:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-addon-manager"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "allUsers"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-addon-manager/buckets/k8s-staging-addon-manager/logging.txt

@@ -0,0 +1 @@
+gs://k8s-staging-addon-manager/ has no logging configuration.

audit/projects/k8s-staging-addon-manager/description.json

@@ -0,0 +1,11 @@
+{
+  "createTime": "2020-09-30T15:49:21.676Z",
+  "lifecycleState": "ACTIVE",
+  "name": "k8s-staging-addon-manager",
+  "parent": {
+    "id": "758905017065",
+    "type": "organization"
+  },
+  "projectId": "k8s-staging-addon-manager",
+  "projectNumber": "103321906213"
+}

audit/projects/k8s-staging-addon-manager/iam.json

@@ -0,0 +1,68 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/cloudbuild.builds.builder"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/cloudbuild.builds.editor"
+    },
+    {
+      "members": [
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/cloudbuild.serviceAgent"
+    },
+    {
+      "members": [
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/containeranalysis.ServiceAgent"
+    },
+    {
+      "members": [
+        "serviceAccount:k8s-infra-gcr-vuln-scanning@k8s-artifacts-prod.iam.gserviceaccount.com"
+      ],
+      "role": "roles/containeranalysis.occurrences.viewer"
+    },
+    {
+      "members": [
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/containerregistry.ServiceAgent"
+    },
+    {
+      "members": [
+        "serviceAccount:service-103321906213@gcp-sa-containerscanning.iam.gserviceaccount.com"
+      ],
+      "role": "roles/containerscanning.ServiceAgent"
+    },
+    {
+      "members": [
+        "user:[email protected]"
+      ],
+      "role": "roles/owner"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/serviceusage.serviceUsageConsumer"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/viewer"
+    }
+  ],
+  "version": 1
+}

audit/projects/k8s-staging-addon-manager/services/enabled.txt

@@ -0,0 +1,11 @@
+NAME                              TITLE
+cloudbuild.googleapis.com         Cloud Build API
+cloudkms.googleapis.com           Cloud Key Management Service (KMS) API
+containeranalysis.googleapis.com  Container Analysis API
+containerregistry.googleapis.com  Container Registry API
+containerscanning.googleapis.com  Container Scanning API
+logging.googleapis.com            Cloud Logging API
+pubsub.googleapis.com             Cloud Pub/Sub API
+secretmanager.googleapis.com      Secret Manager API
+storage-api.googleapis.com        Google Cloud Storage JSON API
+storage-component.googleapis.com  Cloud Storage

audit/projects/k8s-staging-bootkube/buckets/artifacts.k8s-staging-bootkube.appspot.com/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://artifacts.k8s-staging-bootkube.appspot.com:
+  Enabled: True
+  LockedTime: 2020-09-07 22:17:57.029000+00:00
+

audit/projects/k8s-staging-bootkube/buckets/artifacts.k8s-staging-bootkube.appspot.com/cors.txt

@@ -0,0 +1 @@
+gs://artifacts.k8s-staging-bootkube.appspot.com/ has no CORS configuration.

audit/projects/k8s-staging-bootkube/buckets/artifacts.k8s-staging-bootkube.appspot.com/iam.json

@@ -0,0 +1,37 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-bootkube",
+        "projectOwner:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "allUsers"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-bootkube/buckets/artifacts.k8s-staging-bootkube.appspot.com/logging.txt

@@ -0,0 +1 @@
+gs://artifacts.k8s-staging-bootkube.appspot.com/ has no logging configuration.

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube-gcb/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://k8s-staging-bootkube-gcb:
+  Enabled: True
+  LockedTime: 2020-09-07 22:18:42.337000+00:00
+

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube-gcb/cors.txt

@@ -0,0 +1 @@
+gs://k8s-staging-bootkube-gcb/ has no CORS configuration.

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube-gcb/iam.json

@@ -0,0 +1,46 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-bootkube",
+        "projectOwner:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/storage.objectCreator"
+    },
+    {
+      "members": [
+        "allUsers",
+        "serviceAccount:[email protected]",
+        "serviceAccount:[email protected]"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube-gcb/logging.txt

@@ -0,0 +1 @@
+gs://k8s-staging-bootkube-gcb/ has no logging configuration.

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube/bucketpolicyonly.txt

@@ -0,0 +1,4 @@
+Bucket Policy Only setting for gs://k8s-staging-bootkube:
+  Enabled: True
+  LockedTime: 2020-09-07 22:18:20.834000+00:00
+

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube/cors.txt

@@ -0,0 +1 @@
+gs://k8s-staging-bootkube/ has no CORS configuration.

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube/iam.json

@@ -0,0 +1,37 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:[email protected]",
+        "projectEditor:k8s-staging-bootkube",
+        "projectOwner:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketOwner"
+    },
+    {
+      "members": [
+        "projectViewer:k8s-staging-bootkube"
+      ],
+      "role": "roles/storage.legacyBucketReader"
+    },
+    {
+      "members": [
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.legacyBucketWriter"
+    },
+    {
+      "members": [
+        "group:[email protected]",
+        "group:[email protected]"
+      ],
+      "role": "roles/storage.objectAdmin"
+    },
+    {
+      "members": [
+        "allUsers"
+      ],
+      "role": "roles/storage.objectViewer"
+    }
+  ]
+}

audit/projects/k8s-staging-bootkube/buckets/k8s-staging-bootkube/logging.txt

@@ -0,0 +1 @@
+gs://k8s-staging-bootkube/ has no logging configuration.