Update audit

audit/projects/k8s-artifacts-prod-bak/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "50Ep9X_GNF8=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2019-11-07T14:51:20.026-08:00",

audit/projects/k8s-artifacts-prod/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "xd6oEEv3fyc=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2019-04-30T17:34:01.258-07:00",

audit/projects/k8s-cip-test-prod/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "UfHkfNxgGBI=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2019-04-03T14:53:39.477-07:00",

audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/iam.json

@@ -10,7 +10,6 @@
     },
     {
       "members": [
-        "group:k8s-infra-conform-capi-openstack@kubernetes.io",
         "projectViewer:k8s-conform"
       ],
       "role": "roles/storage.legacyBucketReader"

audit/projects/k8s-conform/buckets/k8s-conform-cri-o/iam.json

@@ -10,7 +10,6 @@
     },
     {
       "members": [
-        "group:k8s-infra-conform-cri-o@kubernetes.io",
         "projectViewer:k8s-conform"
       ],
       "role": "roles/storage.legacyBucketReader"

audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/iam.json

@@ -10,7 +10,6 @@
     },
     {
       "members": [
-        "group:k8s-infra-conform-huaweicloud@kubernetes.io",
         "projectViewer:k8s-conform"
       ],
       "role": "roles/storage.legacyBucketReader"

audit/projects/k8s-conform/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "35mF2_0RbC0=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2020-02-23T20:52:52.389-08:00",

audit/projects/k8s-gcr-audit-test-prod/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "Wf_8sE-rVik=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2020-01-17T13:01:23.557-08:00",

audit/projects/k8s-gcr-backup-test-prod-bak/services/compute/project-info.json

@@ -1,6 +1,5 @@
 {
   "commonInstanceMetadata": {
-    "fingerprint": "-KEiFQTAaB8=",
     "kind": "compute#metadata"
   },
   "creationTimestamp": "2020-03-31T09:59:07.569-07:00",

audit/projects/k8s-gsuite/secrets/gsuite-groups-manager_key/description.json

@@ -0,0 +1,7 @@
+{
+  "createTime": "2020-04-30T04:24:22.976608Z",
+  "name": "projects/91610859379/secrets/gsuite-groups-manager_key",
+  "replication": {
+    "automatic": {}
+  }
+}

audit/projects/k8s-gsuite/secrets/gsuite-groups-manager_key/iam.json

@@ -0,0 +1,11 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "group:k8s-infra-group-admins@kubernetes.io"
+      ],
+      "role": "roles/secretmanager.secretAccessor"
+    }
+  ],
+  "version": 1
+}

audit/projects/k8s-gsuite/secrets/gsuite-groups-manager_key/versions.json

@@ -0,0 +1,7 @@
+[
+  {
+    "createTime": "2020-04-30T04:24:24.019226Z",
+    "name": "projects/91610859379/secrets/gsuite-groups-manager_key/versions/1",
+    "state": "ENABLED"
+  }
+]

audit/projects/k8s-gsuite/services/enabled.txt

@@ -1,3 +1,4 @@
 NAME                           TITLE
 admin.googleapis.com           Admin SDK
 groupssettings.googleapis.com  Groups Settings API
+secretmanager.googleapis.com   Secret Manager API

audit/projects/k8s-infra-e2e-boskos-001/description.json

@@ -0,0 +1,11 @@
+{
+  "createTime": "2020-05-01T00:05:47.378Z",
+  "lifecycleState": "ACTIVE",
+  "name": "k8s-infra-e2e-boskos-001",
+  "parent": {
+    "id": "758905017065",
+    "type": "organization"
+  },
+  "projectId": "k8s-infra-e2e-boskos-001",
+  "projectNumber": "271867469224"
+}

audit/projects/k8s-infra-e2e-boskos-001/iam.json

@@ -0,0 +1,26 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "serviceAccount:service-271867469224@compute-system.iam.gserviceaccount.com"
+      ],
+      "role": "roles/compute.serviceAgent"
+    },
+    {
+      "members": [
+        "serviceAccount:271867469224-compute@developer.gserviceaccount.com",
+        "serviceAccount:271867469224@cloudservices.gserviceaccount.com",
+        "serviceAccount:boskos-janitor@k8s-infra-prow-build.iam.gserviceaccount.com",
+        "serviceAccount:prow-build@k8s-infra-prow-build.iam.gserviceaccount.com"
+      ],
+      "role": "roles/editor"
+    },
+    {
+      "members": [
+        "user:spiffxp@google.com"
+      ],
+      "role": "roles/owner"
+    }
+  ],
+  "version": 1
+}

audit/projects/k8s-infra-e2e-boskos-001/service-accounts/271867469224-compute@developer.gserviceaccount.com/description.json

@@ -0,0 +1,8 @@
+{
+  "displayName": "Compute Engine default service account",
+  "email": "271867469224-compute@developer.gserviceaccount.com",
+  "name": "projects/k8s-infra-e2e-boskos-001/serviceAccounts/271867469224-compute@developer.gserviceaccount.com",
+  "oauth2ClientId": "103300983685870175939",
+  "projectId": "k8s-infra-e2e-boskos-001",
+  "uniqueId": "103300983685870175939"
+}

audit/projects/k8s-infra-e2e-boskos-001/service-accounts/271867469224-compute@developer.gserviceaccount.com/iam.json

@@ -0,0 +1 @@
+{}

audit/projects/k8s-infra-e2e-boskos-001/services/compute/project-info.json

@@ -0,0 +1,157 @@
+{
+  "commonInstanceMetadata": {
+    "items": [
+      {
+        "key": "ssh-keys",
+        "value": "prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow\nprow:prow:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYxHh/wwcV0P1aChuFLpl28w6DFyc7G5Xrw1F8wH1Re9AdxyemM2bTZ/PhsP3u9VDnNbyOw3UN00VFdumkFLjLf1WQ7Q6rZDlPjlw7urBIvAMqUecY6ae1znqsZ0dMBxOuPXHznlnjLjM5b7O7q5WsQMCA9Szbmz6DsuSyCuX0It2osBTN+8P/Fa6BNh3W8AF60M7L8/aUzLfbXVS2LIQKAHHD8CWqvXhLPuTJ03iSwFvgtAK1/J2XJwUP+OzAFrxj6A9LW5ZZgk3R3kRKr0xT/L7hga41rB1qy8Uz+Xr/PTVMNGW+nmU4bPgFchCK0JBK7B12ZcdVVFUEdpaAiKZ prow"
+      }
+    ],
+    "kind": "compute#metadata"
+  },
+  "creationTimestamp": "2020-04-30T17:05:57.957-07:00",
+  "defaultNetworkTier": "PREMIUM",
+  "defaultServiceAccount": "271867469224-compute@developer.gserviceaccount.com",
+  "id": "4056770666769602826",
+  "kind": "compute#project",
+  "name": "k8s-infra-e2e-boskos-001",
+  "quotas": [
+    {
+      "limit": 5000,
+      "metric": "SNAPSHOTS"
+    },
+    {
+      "limit": 15,
+      "metric": "NETWORKS"
+    },
+    {
+      "limit": 200,
+      "metric": "FIREWALLS"
+    },
+    {
+      "limit": 2000,
+      "metric": "IMAGES"
+    },
+    {
+      "limit": 21,
+      "metric": "STATIC_ADDRESSES"
+    },
+    {
+      "limit": 250,
+      "metric": "ROUTES"
+    },
+    {
+      "limit": 45,
+      "metric": "FORWARDING_RULES"
+    },
+    {
+      "limit": 150,
+      "metric": "TARGET_POOLS"
+    },
+    {
+      "limit": 150,
+      "metric": "HEALTH_CHECKS"
+    },
+    {
+      "limit": 69,
+      "metric": "IN_USE_ADDRESSES"
+    },
+    {
+      "limit": 150,
+      "metric": "TARGET_INSTANCES"
+    },
+    {
+      "limit": 30,
+      "metric": "TARGET_HTTP_PROXIES"
+    },
+    {
+      "limit": 30,
+      "metric": "URL_MAPS"
+    },
+    {
+      "limit": 9,
+      "metric": "BACKEND_SERVICES"
+    },
+    {
+      "limit": 300,
+      "metric": "INSTANCE_TEMPLATES"
+    },
+    {
+      "limit": 15,
+      "metric": "TARGET_VPN_GATEWAYS"
+    },
+    {
+      "limit": 30,
+      "metric": "VPN_TUNNELS"
+    },
+    {
+      "limit": 9,
+      "metric": "BACKEND_BUCKETS"
+    },
+    {
+      "limit": 10,
+      "metric": "ROUTERS"
+    },
+    {
+      "limit": 30,
+      "metric": "TARGET_SSL_PROXIES"
+    },
+    {
+      "limit": 30,
+      "metric": "TARGET_HTTPS_PROXIES"
+    },
+    {
+      "limit": 30,
+      "metric": "SSL_CERTIFICATES"
+    },
+    {
+      "limit": 175,
+      "metric": "SUBNETWORKS"
+    },
+    {
+      "limit": 30,
+      "metric": "TARGET_TCP_PROXIES"
+    },
+    {
+      "limit": 10,
+      "metric": "SECURITY_POLICIES"
+    },
+    {
+      "limit": 100,
+      "metric": "SECURITY_POLICY_RULES"
+    },
+    {
+      "limit": 45,
+      "metric": "PACKET_MIRRORINGS"
+    },
+    {
+      "limit": 300,
+      "metric": "NETWORK_ENDPOINT_GROUPS"
+    },
+    {
+      "limit": 6,
+      "metric": "INTERCONNECTS"
+    },
+    {
+      "limit": 5000,
+      "metric": "GLOBAL_INTERNAL_ADDRESSES"
+    },
+    {
+      "limit": 15,
+      "metric": "VPN_GATEWAYS"
+    },
+    {
+      "limit": 2000,
+      "metric": "MACHINE_IMAGES"
+    },
+    {
+      "limit": 20,
+      "metric": "SECURITY_POLICY_CEVAL_RULES"
+    },
+    {
+      "limit": 15,
+      "metric": "EXTERNAL_VPN_GATEWAYS"
+    }
+  ],
+  "selfLink": "https://www.googleapis.com/compute/v1/projects/k8s-infra-e2e-boskos-001",
+  "xpnProjectStatus": "UNSPECIFIED_XPN_PROJECT_STATUS"
+}

audit/projects/k8s-infra-e2e-boskos-001/services/enabled.txt

@@ -0,0 +1,6 @@
+NAME                              TITLE
+compute.googleapis.com            Compute Engine API
+logging.googleapis.com            Cloud Logging API
+monitoring.googleapis.com         Cloud Monitoring API
+oslogin.googleapis.com            Cloud OS Login API
+storage-component.googleapis.com  Cloud Storage

audit/projects/k8s-infra-e2e-boskos-002/description.json

@@ -0,0 +1,11 @@
+{
+  "createTime": "2020-05-01T00:07:43.107Z",
+  "lifecycleState": "ACTIVE",
+  "name": "k8s-infra-e2e-boskos-002",
+  "parent": {
+    "id": "758905017065",
+    "type": "organization"
+  },
+  "projectId": "k8s-infra-e2e-boskos-002",
+  "projectNumber": "395811472440"
+}

audit/projects/k8s-infra-e2e-boskos-002/iam.json

@@ -0,0 +1,26 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "serviceAccount:service-395811472440@compute-system.iam.gserviceaccount.com"
+      ],
+      "role": "roles/compute.serviceAgent"
+    },
+    {
+      "members": [
+        "serviceAccount:395811472440-compute@developer.gserviceaccount.com",
+        "serviceAccount:395811472440@cloudservices.gserviceaccount.com",
+        "serviceAccount:boskos-janitor@k8s-infra-prow-build.iam.gserviceaccount.com",
+        "serviceAccount:prow-build@k8s-infra-prow-build.iam.gserviceaccount.com"
+      ],
+      "role": "roles/editor"
+    },
+    {
+      "members": [
+        "user:spiffxp@google.com"
+      ],
+      "role": "roles/owner"
+    }
+  ],
+  "version": 1
+}

audit/projects/k8s-infra-e2e-boskos-002/service-accounts/395811472440-compute@developer.gserviceaccount.com/description.json

@@ -0,0 +1,8 @@
+{
+  "displayName": "Compute Engine default service account",
+  "email": "395811472440-compute@developer.gserviceaccount.com",
+  "name": "projects/k8s-infra-e2e-boskos-002/serviceAccounts/395811472440-compute@developer.gserviceaccount.com",
+  "oauth2ClientId": "115743698330432504715",
+  "projectId": "k8s-infra-e2e-boskos-002",
+  "uniqueId": "115743698330432504715"
+}

audit/projects/k8s-infra-e2e-boskos-002/service-accounts/395811472440-compute@developer.gserviceaccount.com/iam.json

@@ -0,0 +1 @@
+{}