audit: update as of 2021-10-17

Kubernetes Prow Robot · Kubernetes Prow Robot · commit 251ac01aedca · 2021-10-17T21:40:59.000Z
diff --git a/audit/projects/k8s-infra-kubernetes-io/iam.json b/audit/projects/k8s-infra-kubernetes-io/iam.json
@@ -2,7 +2,7 @@
   "bindings": [
     {
       "members": [
-        "user:spiffxp@google.com"
+        "group:k8s-infra-gcp-org-admins@kubernetes.io"
       ],
       "role": "roles/owner"
     }
diff --git a/audit/projects/k8s-infra-prow-build-trusted/services/logging/logs.json b/audit/projects/k8s-infra-prow-build-trusted/services/logging/logs.json
@@ -1,23 +1,19 @@
 [
   "projects/k8s-infra-prow-build-trusted/logs/GCEGuestAgent",
-  "projects/k8s-infra-prow-build-trusted/logs/OSConfigAgent",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Fdata_access",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Fsystem_event",
   "projects/k8s-infra-prow-build-trusted/logs/compute.googleapis.com%2Fshielded_vm_integrity",
   "projects/k8s-infra-prow-build-trusted/logs/container-runtime",
   "projects/k8s-infra-prow-build-trusted/logs/container.googleapis.com%2Fcluster-autoscaler-visibility",
-  "projects/k8s-infra-prow-build-trusted/logs/docker",
   "projects/k8s-infra-prow-build-trusted/logs/events",
-  "projects/k8s-infra-prow-build-trusted/logs/kube-container-runtime-monitor",
   "projects/k8s-infra-prow-build-trusted/logs/kube-logrotate",
   "projects/k8s-infra-prow-build-trusted/logs/kube-node-configuration",
   "projects/k8s-infra-prow-build-trusted/logs/kube-node-installation",
   "projects/k8s-infra-prow-build-trusted/logs/kube-proxy",
   "projects/k8s-infra-prow-build-trusted/logs/kubelet",
   "projects/k8s-infra-prow-build-trusted/logs/kubelet-monitor",
   "projects/k8s-infra-prow-build-trusted/logs/node-problem-detector",
-  "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_1_output",
   "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_2_output",
   "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_debug_output",
   "projects/k8s-infra-prow-build-trusted/logs/stderr",
diff --git a/audit/projects/kubernetes-public/service-accounts/tf-monitoring-deployer@kubernetes-public.iam.gserviceaccount.com/iam.json b/audit/projects/kubernetes-public/service-accounts/tf-monitoring-deployer@kubernetes-public.iam.gserviceaccount.com/iam.json
@@ -2,6 +2,7 @@
   "bindings": [
     {
       "members": [
+        "serviceAccount:k8s-infra-prow-build-trusted.svc.id.goog[test-pods/tf-monitoring-deployer]",
         "serviceAccount:kubernetes-public.svc.id.goog[test-pods/tf-monitoring-deployer]"
       ],
       "role": "roles/iam.workloadIdentityUser"

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`	`"bindings": [`
`3`	`3`	`{`
`4`	`4`	`"members": [`
`5`		`- "user:[email protected]"`
	`5`	`+ "group:[email protected]"`
`6`	`6`	`],`
`7`	`7`	`"role": "roles/owner"`
`8`	`8`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,6 +2,7 @@`
`2`	`2`	`"bindings": [`
`3`	`3`	`{`
`4`	`4`	`"members": [`
	`5`	`+ "serviceAccount:k8s-infra-prow-build-trusted.svc.id.goog[test-pods/tf-monitoring-deployer]",`
`5`	`6`	`"serviceAccount:kubernetes-public.svc.id.goog[test-pods/tf-monitoring-deployer]"`
`6`	`7`	`],`
`7`	`8`	`"role": "roles/iam.workloadIdentityUser"`