audit: update as of 2021-10-18

Kubernetes Prow Robot · Kubernetes Prow Robot · commit fa1bd69dda76 · 2021-10-18T17:45:38.000Z
diff --git a/audit/projects/k8s-infra-kubernetes-io/iam.json b/audit/projects/k8s-infra-kubernetes-io/iam.json
@@ -2,7 +2,7 @@
   "bindings": [
     {
       "members": [
-        "user:spiffxp@google.com"
+        "group:k8s-infra-gcp-org-admins@kubernetes.io"
       ],
       "role": "roles/owner"
     }
diff --git a/audit/projects/k8s-infra-prow-build-trusted/services/logging/logs.json b/audit/projects/k8s-infra-prow-build-trusted/services/logging/logs.json
@@ -1,25 +1,15 @@
 [
-  "projects/k8s-infra-prow-build-trusted/logs/GCEGuestAgent",
-  "projects/k8s-infra-prow-build-trusted/logs/OSConfigAgent",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Factivity",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Fdata_access",
   "projects/k8s-infra-prow-build-trusted/logs/cloudaudit.googleapis.com%2Fsystem_event",
   "projects/k8s-infra-prow-build-trusted/logs/compute.googleapis.com%2Fshielded_vm_integrity",
   "projects/k8s-infra-prow-build-trusted/logs/container-runtime",
   "projects/k8s-infra-prow-build-trusted/logs/container.googleapis.com%2Fcluster-autoscaler-visibility",
-  "projects/k8s-infra-prow-build-trusted/logs/docker",
   "projects/k8s-infra-prow-build-trusted/logs/events",
-  "projects/k8s-infra-prow-build-trusted/logs/kube-container-runtime-monitor",
   "projects/k8s-infra-prow-build-trusted/logs/kube-logrotate",
-  "projects/k8s-infra-prow-build-trusted/logs/kube-node-configuration",
-  "projects/k8s-infra-prow-build-trusted/logs/kube-node-installation",
   "projects/k8s-infra-prow-build-trusted/logs/kube-proxy",
   "projects/k8s-infra-prow-build-trusted/logs/kubelet",
-  "projects/k8s-infra-prow-build-trusted/logs/kubelet-monitor",
   "projects/k8s-infra-prow-build-trusted/logs/node-problem-detector",
-  "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_1_output",
-  "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_2_output",
-  "projects/k8s-infra-prow-build-trusted/logs/serialconsole.googleapis.com%2Fserial_port_debug_output",
   "projects/k8s-infra-prow-build-trusted/logs/stderr",
   "projects/k8s-infra-prow-build-trusted/logs/stdout"
 ]
diff --git a/audit/projects/k8s-staging-cluster-addons/services/logging/logs.json b/audit/projects/k8s-staging-cluster-addons/services/logging/logs.json
@@ -1,3 +1,4 @@
 [
-  "projects/k8s-staging-cluster-addons/logs/cloudaudit.googleapis.com%2Factivity"
+  "projects/k8s-staging-cluster-addons/logs/cloudaudit.googleapis.com%2Factivity",
+  "projects/k8s-staging-cluster-addons/logs/cloudbuild"
 ]
diff --git a/audit/projects/k8s-staging-multitenancy/services/logging/logs.json b/audit/projects/k8s-staging-multitenancy/services/logging/logs.json
@@ -1,4 +1,3 @@
 [
-  "projects/k8s-staging-multitenancy/logs/cloudaudit.googleapis.com%2Factivity",
-  "projects/k8s-staging-multitenancy/logs/cloudbuild"
+  "projects/k8s-staging-multitenancy/logs/cloudaudit.googleapis.com%2Factivity"
 ]
diff --git a/audit/projects/kubernetes-public/service-accounts/tf-monitoring-deployer@kubernetes-public.iam.gserviceaccount.com/iam.json b/audit/projects/kubernetes-public/service-accounts/tf-monitoring-deployer@kubernetes-public.iam.gserviceaccount.com/iam.json
@@ -2,6 +2,7 @@
   "bindings": [
     {
       "members": [
+        "serviceAccount:k8s-infra-prow-build-trusted.svc.id.goog[test-pods/tf-monitoring-deployer]",
         "serviceAccount:kubernetes-public.svc.id.goog[test-pods/tf-monitoring-deployer]"
       ],
       "role": "roles/iam.workloadIdentityUser"

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`	`"bindings": [`
`3`	`3`	`{`
`4`	`4`	`"members": [`
`5`		`- "user:[email protected]"`
	`5`	`+ "group:[email protected]"`
`6`	`6`	`],`
`7`	`7`	`"role": "roles/owner"`
`8`	`8`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`[`
`2`		`- "projects/k8s-staging-cluster-addons/logs/cloudaudit.googleapis.com%2Factivity"`
	`2`	`+ "projects/k8s-staging-cluster-addons/logs/cloudaudit.googleapis.com%2Factivity",`
	`3`	`+ "projects/k8s-staging-cluster-addons/logs/cloudbuild"`
`3`	`4`	`]`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,3 @@`
`1`	`1`	`[`
`2`		`- "projects/k8s-staging-multitenancy/logs/cloudaudit.googleapis.com%2Factivity",`
`3`		`- "projects/k8s-staging-multitenancy/logs/cloudbuild"`
	`2`	`+ "projects/k8s-staging-multitenancy/logs/cloudaudit.googleapis.com%2Factivity"`
`4`	`3`	`]`
Original file line number	Diff line number	Diff line change
`@@ -2,6 +2,7 @@`
`2`	`2`	`"bindings": [`
`3`	`3`	`{`
`4`	`4`	`"members": [`
	`5`	`+ "serviceAccount:k8s-infra-prow-build-trusted.svc.id.goog[test-pods/tf-monitoring-deployer]",`
`5`	`6`	`"serviceAccount:kubernetes-public.svc.id.goog[test-pods/tf-monitoring-deployer]"`
`6`	`7`	`],`
`7`	`8`	`"role": "roles/iam.workloadIdentityUser"`