diff --git a/audit/org_kubernetes.io/iam.json b/audit/org_kubernetes.io/iam.json index 0f23019fb79..27570568d08 100644 --- a/audit/org_kubernetes.io/iam.json +++ b/audit/org_kubernetes.io/iam.json @@ -43,6 +43,12 @@ ], "role": "roles/compute.viewer" }, + { + "members": [ + "group:k8s-infra-gcp-auditors@kubernetes.io" + ], + "role": "roles/dns.reader" + }, { "members": [ "group:k8s-infra-gcp-org-admins@kubernetes.io" diff --git a/audit/projects/k8s-artifacts-prod-bak/service-accounts/1057569514213-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-artifacts-prod-bak/service-accounts/1057569514213-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-artifacts-prod-bak/service-accounts/1057569514213-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-artifacts-prod-bak/service-accounts/1057569514213-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-artifacts-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod-bak.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-artifacts-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod-bak.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-artifacts-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod-bak.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-artifacts-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod-bak.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-artifacts-prod-bak/services/compute/project-info.json b/audit/projects/k8s-artifacts-prod-bak/services/compute/project-info.json index 06c15929969..b9ee3b99144 100644 --- a/audit/projects/k8s-artifacts-prod-bak/services/compute/project-info.json +++ b/audit/projects/k8s-artifacts-prod-bak/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-artifacts-prod-bak/services/enabled.json b/audit/projects/k8s-artifacts-prod-bak/services/enabled.json index 87a146ad48a..855c61c1c9f 100644 --- a/audit/projects/k8s-artifacts-prod-bak/services/enabled.json +++ b/audit/projects/k8s-artifacts-prod-bak/services/enabled.json @@ -296,12 +296,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -340,6 +342,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -357,6 +360,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", diff --git a/audit/projects/k8s-artifacts-prod/iam.json b/audit/projects/k8s-artifacts-prod/iam.json index a001e8a25b2..ce2e6c27f2f 100644 --- a/audit/projects/k8s-artifacts-prod/iam.json +++ b/audit/projects/k8s-artifacts-prod/iam.json @@ -33,6 +33,12 @@ ], "role": "roles/errorreporting.writer" }, + { + "members": [ + "serviceAccount:service-388270116193@gcp-sa-pubsub.iam.gserviceaccount.com" + ], + "role": "roles/iam.serviceAccountTokenCreator" + }, { "members": [ "serviceAccount:k8s-infra-gcr-auditor@k8s-artifacts-prod.iam.gserviceaccount.com" @@ -63,6 +69,12 @@ ], "role": "roles/run.serviceAgent" }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io" diff --git a/audit/projects/k8s-artifacts-prod/service-accounts/388270116193-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-artifacts-prod/service-accounts/388270116193-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-artifacts-prod/service-accounts/388270116193-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-artifacts-prod/service-accounts/388270116193-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-auditor-invoker@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-auditor-invoker@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-auditor-invoker@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-auditor-invoker@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..e22e91db3d7 100644 --- a/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-artifacts-prod/service-accounts/k8s-infra-gcr-promoter@k8s-artifacts-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1,11 @@ { + "bindings": [ + { + "members": [ + "serviceAccount:k8s-prow-builds.svc.id.goog[test-pods/k8s-artifacts-prod]" + ], + "role": "roles/iam.workloadIdentityUser" + } + ], "version": 1 } diff --git a/audit/projects/k8s-artifacts-prod/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-artifacts-prod/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-artifacts-prod/services/compute/project-info.json b/audit/projects/k8s-artifacts-prod/services/compute/project-info.json index 0c0ba626663..0858c129fe5 100644 --- a/audit/projects/k8s-artifacts-prod/services/compute/project-info.json +++ b/audit/projects/k8s-artifacts-prod/services/compute/project-info.json @@ -38,7 +38,7 @@ { "limit": 250.0, "metric": "ROUTES", - "usage": 23.0 + "usage": 24.0 }, { "limit": 45.0, @@ -123,7 +123,7 @@ { "limit": 175.0, "metric": "SUBNETWORKS", - "usage": 22.0 + "usage": 23.0 }, { "limit": 30.0, @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-artifacts-prod/services/enabled.json b/audit/projects/k8s-artifacts-prod/services/enabled.json index cc0df8c3667..a1c9b42992e 100644 --- a/audit/projects/k8s-artifacts-prod/services/enabled.json +++ b/audit/projects/k8s-artifacts-prod/services/enabled.json @@ -414,7 +414,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -461,7 +461,7 @@ "migration": {}, "name": "clouderrorreporting.googleapis.com", "quota": {}, - "title": "Stackdriver Error Reporting API", + "title": "Error Reporting API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -560,7 +560,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -577,7 +577,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -942,12 +942,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -986,6 +988,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -1003,6 +1006,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -1118,7 +1122,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -1134,7 +1138,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1286,7 +1290,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1301,7 +1305,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1321,6 +1325,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1332,6 +1337,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1339,6 +1345,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1348,30 +1355,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-cip-test-prod/service-accounts/693665670941-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-cip-test-prod/service-accounts/693665670941-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-cip-test-prod/service-accounts/693665670941-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-cip-test-prod/service-accounts/693665670941-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-cip-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-cip-test-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-cip-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-cip-test-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-cip-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-cip-test-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-cip-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-cip-test-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-cip-test-prod/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-cip-test-prod/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-cip-test-prod/services/compute/project-info.json b/audit/projects/k8s-cip-test-prod/services/compute/project-info.json index 42d27a76a11..e534f7f60d8 100644 --- a/audit/projects/k8s-cip-test-prod/services/compute/project-info.json +++ b/audit/projects/k8s-cip-test-prod/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-cip-test-prod/services/enabled.json b/audit/projects/k8s-cip-test-prod/services/enabled.json index 3bc7e5b9a38..3a051f38d6e 100644 --- a/audit/projects/k8s-cip-test-prod/services/enabled.json +++ b/audit/projects/k8s-cip-test-prod/services/enabled.json @@ -414,7 +414,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -447,7 +447,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -464,7 +464,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -829,12 +829,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -873,6 +875,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -890,6 +893,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -1005,7 +1009,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -1021,7 +1025,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1173,7 +1177,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1188,7 +1192,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1208,6 +1212,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1219,6 +1224,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1226,6 +1232,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1235,30 +1242,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/bucketpolicyonly.txt b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/bucketpolicyonly.txt new file mode 100644 index 00000000000..5bdb1df5487 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-conform-capi-openstack: + Enabled: True + LockedTime: 2020-05-05 00:01:45.030000+00:00 + diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/cors.txt b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/cors.txt new file mode 100644 index 00000000000..1e255aa92e9 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/cors.txt @@ -0,0 +1 @@ +gs://k8s-conform-capi-openstack/ has no CORS configuration. diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/iam.json b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/iam.json new file mode 100644 index 00000000000..2f5976d864e --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/iam.json @@ -0,0 +1,38 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-conform", + "projectOwner:k8s-conform" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-conform-capi-openstack@kubernetes.io", + "projectViewer:k8s-conform" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-conform-capi-openstack@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:service-capi-openstack@k8s-conform.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/logging.txt b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/logging.txt new file mode 100644 index 00000000000..1e4f7071923 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-capi-openstack/logging.txt @@ -0,0 +1 @@ +gs://k8s-conform-capi-openstack/ has no logging configuration. diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/bucketpolicyonly.txt b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/bucketpolicyonly.txt new file mode 100644 index 00000000000..7199fd41906 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-conform-cri-o: + Enabled: True + LockedTime: 2020-05-07 00:44:27.336000+00:00 + diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/cors.txt b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/cors.txt new file mode 100644 index 00000000000..dd989273eae --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/cors.txt @@ -0,0 +1 @@ +gs://k8s-conform-cri-o/ has no CORS configuration. diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/iam.json b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/iam.json new file mode 100644 index 00000000000..145b9d17c8c --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/iam.json @@ -0,0 +1,38 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-conform", + "projectOwner:k8s-conform" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-conform-cri-o@kubernetes.io", + "projectViewer:k8s-conform" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-conform-cri-o@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:service-cri-o@k8s-conform.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/logging.txt b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/logging.txt new file mode 100644 index 00000000000..d0ba6d7812a --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-cri-o/logging.txt @@ -0,0 +1 @@ +gs://k8s-conform-cri-o/ has no logging configuration. diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/bucketpolicyonly.txt b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/bucketpolicyonly.txt new file mode 100644 index 00000000000..7637a3b9ce9 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-conform-huaweicloud: + Enabled: True + LockedTime: 2020-05-24 04:08:40.618000+00:00 + diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/cors.txt b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/cors.txt new file mode 100644 index 00000000000..982fcf5e016 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/cors.txt @@ -0,0 +1 @@ +gs://k8s-conform-huaweicloud/ has no CORS configuration. diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/iam.json b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/iam.json new file mode 100644 index 00000000000..33b39381df0 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/iam.json @@ -0,0 +1,38 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-conform", + "projectOwner:k8s-conform" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-conform-huaweicloud@kubernetes.io", + "projectViewer:k8s-conform" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-conform-huaweicloud@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:service-huaweicloud@k8s-conform.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/logging.txt b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/logging.txt new file mode 100644 index 00000000000..67390979f78 --- /dev/null +++ b/audit/projects/k8s-conform/buckets/k8s-conform-huaweicloud/logging.txt @@ -0,0 +1 @@ +gs://k8s-conform-huaweicloud/ has no logging configuration. diff --git a/audit/projects/k8s-conform/service-accounts/228988630781-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-conform/service-accounts/228988630781-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-conform/service-accounts/228988630781-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-conform/service-accounts/228988630781-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/description.json b/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/description.json new file mode 100644 index 00000000000..b3681db7d44 --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/description.json @@ -0,0 +1,8 @@ +{ + "displayName": "service-capi-openstack", + "email": "service-capi-openstack@k8s-conform.iam.gserviceaccount.com", + "name": "projects/k8s-conform/serviceAccounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com", + "oauth2ClientId": "115191210752954465501", + "projectId": "k8s-conform", + "uniqueId": "115191210752954465501" +} diff --git a/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/iam.json new file mode 100644 index 00000000000..0967ef424bc --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-capi-openstack@k8s-conform.iam.gserviceaccount.com/iam.json @@ -0,0 +1 @@ +{} diff --git a/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/description.json b/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/description.json new file mode 100644 index 00000000000..8ac3e8d9948 --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/description.json @@ -0,0 +1,8 @@ +{ + "displayName": "service-cri-o", + "email": "service-cri-o@k8s-conform.iam.gserviceaccount.com", + "name": "projects/k8s-conform/serviceAccounts/service-cri-o@k8s-conform.iam.gserviceaccount.com", + "oauth2ClientId": "118310596454734433596", + "projectId": "k8s-conform", + "uniqueId": "118310596454734433596" +} diff --git a/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/iam.json new file mode 100644 index 00000000000..0967ef424bc --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-cri-o@k8s-conform.iam.gserviceaccount.com/iam.json @@ -0,0 +1 @@ +{} diff --git a/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/description.json b/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/description.json new file mode 100644 index 00000000000..3fbc10df8aa --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/description.json @@ -0,0 +1,8 @@ +{ + "displayName": "service-huaweicloud", + "email": "service-huaweicloud@k8s-conform.iam.gserviceaccount.com", + "name": "projects/k8s-conform/serviceAccounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com", + "oauth2ClientId": "115892797574676430686", + "projectId": "k8s-conform", + "uniqueId": "115892797574676430686" +} diff --git a/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/iam.json new file mode 100644 index 00000000000..0967ef424bc --- /dev/null +++ b/audit/projects/k8s-conform/service-accounts/service-huaweicloud@k8s-conform.iam.gserviceaccount.com/iam.json @@ -0,0 +1 @@ +{} diff --git a/audit/projects/k8s-conform/services/compute/project-info.json b/audit/projects/k8s-conform/services/compute/project-info.json index 1222d31d2bb..41e15e93baa 100644 --- a/audit/projects/k8s-conform/services/compute/project-info.json +++ b/audit/projects/k8s-conform/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-conform/services/enabled.json b/audit/projects/k8s-conform/services/enabled.json index d0efa7292ed..0fba9865ccb 100644 --- a/audit/projects/k8s-conform/services/enabled.json +++ b/audit/projects/k8s-conform/services/enabled.json @@ -280,6 +280,175 @@ "parent": "projects/228988630781", "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/228988630781/services/storage-api.googleapis.com", + "parent": "projects/228988630781", + "state": "ENABLED" + }, { "config": { "authentication": {}, diff --git a/audit/projects/k8s-gcr-audit-test-prod/service-accounts/375340694213-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-gcr-audit-test-prod/service-accounts/375340694213-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-gcr-audit-test-prod/service-accounts/375340694213-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-gcr-audit-test-prod/service-accounts/375340694213-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-gcr-audit-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-audit-test-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-gcr-audit-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-audit-test-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-gcr-audit-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-audit-test-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-gcr-audit-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-audit-test-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-gcr-audit-test-prod/services/compute/project-info.json b/audit/projects/k8s-gcr-audit-test-prod/services/compute/project-info.json index 7b1750cf1d4..4dae8704a4c 100644 --- a/audit/projects/k8s-gcr-audit-test-prod/services/compute/project-info.json +++ b/audit/projects/k8s-gcr-audit-test-prod/services/compute/project-info.json @@ -38,7 +38,7 @@ { "limit": 250.0, "metric": "ROUTES", - "usage": 23.0 + "usage": 24.0 }, { "limit": 45.0, @@ -123,7 +123,7 @@ { "limit": 175.0, "metric": "SUBNETWORKS", - "usage": 22.0 + "usage": 23.0 }, { "limit": 30.0, @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-gcr-audit-test-prod/services/enabled.json b/audit/projects/k8s-gcr-audit-test-prod/services/enabled.json index ccfda68dab2..a9cbec6632c 100644 --- a/audit/projects/k8s-gcr-audit-test-prod/services/enabled.json +++ b/audit/projects/k8s-gcr-audit-test-prod/services/enabled.json @@ -17,7 +17,7 @@ "migration": {}, "name": "clouderrorreporting.googleapis.com", "quota": {}, - "title": "Stackdriver Error Reporting API", + "title": "Error Reporting API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -409,12 +409,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -453,6 +455,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -470,6 +473,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -494,7 +498,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -510,7 +514,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -662,7 +666,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -677,7 +681,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -697,6 +701,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -708,6 +713,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -715,6 +721,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -724,30 +731,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-gcr-backup-test-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod-bak.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-gcr-backup-test-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod-bak.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-gcr-backup-test-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod-bak.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-gcr-backup-test-prod-bak/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod-bak.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-gcr-backup-test-prod-bak/services/enabled.json b/audit/projects/k8s-gcr-backup-test-prod-bak/services/enabled.json index 48758893504..9d791a521cf 100644 --- a/audit/projects/k8s-gcr-backup-test-prod-bak/services/enabled.json +++ b/audit/projects/k8s-gcr-backup-test-prod-bak/services/enabled.json @@ -119,12 +119,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -163,6 +165,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -180,6 +183,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", diff --git a/audit/projects/k8s-gcr-backup-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-gcr-backup-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-gcr-backup-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-gcr-backup-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-gcr-backup-test-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-gcr-backup-test-prod/services/enabled.json b/audit/projects/k8s-gcr-backup-test-prod/services/enabled.json index 4555f8808d0..5185c9624ac 100644 --- a/audit/projects/k8s-gcr-backup-test-prod/services/enabled.json +++ b/audit/projects/k8s-gcr-backup-test-prod/services/enabled.json @@ -119,12 +119,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -163,6 +165,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -180,6 +183,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", diff --git a/audit/projects/k8s-gsuite/service-accounts/gsuite-groups-manager@k8s-gsuite.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-gsuite/service-accounts/gsuite-groups-manager@k8s-gsuite.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-gsuite/service-accounts/gsuite-groups-manager@k8s-gsuite.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-gsuite/service-accounts/gsuite-groups-manager@k8s-gsuite.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-release-test-prod/buckets/asia.artifacts.k8s-release-test-prod.appspot.com/iam.json b/audit/projects/k8s-release-test-prod/buckets/asia.artifacts.k8s-release-test-prod.appspot.com/iam.json index bdfbe2f6d4e..0388664ecb6 100644 --- a/audit/projects/k8s-release-test-prod/buckets/asia.artifacts.k8s-release-test-prod.appspot.com/iam.json +++ b/audit/projects/k8s-release-test-prod/buckets/asia.artifacts.k8s-release-test-prod.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "projectViewer:k8s-release-test-prod" ], @@ -19,6 +20,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com" ], diff --git a/audit/projects/k8s-release-test-prod/buckets/eu.artifacts.k8s-release-test-prod.appspot.com/iam.json b/audit/projects/k8s-release-test-prod/buckets/eu.artifacts.k8s-release-test-prod.appspot.com/iam.json index bdfbe2f6d4e..0388664ecb6 100644 --- a/audit/projects/k8s-release-test-prod/buckets/eu.artifacts.k8s-release-test-prod.appspot.com/iam.json +++ b/audit/projects/k8s-release-test-prod/buckets/eu.artifacts.k8s-release-test-prod.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "projectViewer:k8s-release-test-prod" ], @@ -19,6 +20,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com" ], diff --git a/audit/projects/k8s-release-test-prod/buckets/k8s-release-test-prod/iam.json b/audit/projects/k8s-release-test-prod/buckets/k8s-release-test-prod/iam.json index efb00b2c60c..379a009353e 100644 --- a/audit/projects/k8s-release-test-prod/buckets/k8s-release-test-prod/iam.json +++ b/audit/projects/k8s-release-test-prod/buckets/k8s-release-test-prod/iam.json @@ -12,7 +12,8 @@ "members": [ "group:k8s-infra-release-admins@kubernetes.io", "group:k8s-infra-release-editors@kubernetes.io", - "projectViewer:k8s-release-test-prod" + "projectViewer:k8s-release-test-prod", + "serviceAccount:615281671549@cloudbuild.gserviceaccount.com" ], "role": "roles/storage.legacyBucketReader" }, @@ -20,7 +21,8 @@ "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", "group:k8s-infra-release-admins@kubernetes.io", - "group:k8s-infra-release-editors@kubernetes.io" + "group:k8s-infra-release-editors@kubernetes.io", + "serviceAccount:615281671549@cloudbuild.gserviceaccount.com" ], "role": "roles/storage.objectAdmin" }, diff --git a/audit/projects/k8s-release-test-prod/buckets/us.artifacts.k8s-release-test-prod.appspot.com/iam.json b/audit/projects/k8s-release-test-prod/buckets/us.artifacts.k8s-release-test-prod.appspot.com/iam.json index bdfbe2f6d4e..0388664ecb6 100644 --- a/audit/projects/k8s-release-test-prod/buckets/us.artifacts.k8s-release-test-prod.appspot.com/iam.json +++ b/audit/projects/k8s-release-test-prod/buckets/us.artifacts.k8s-release-test-prod.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "projectViewer:k8s-release-test-prod" ], @@ -19,6 +20,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com" ], diff --git a/audit/projects/k8s-release-test-prod/iam.json b/audit/projects/k8s-release-test-prod/iam.json index 00c0154ceed..57163a12d0d 100644 --- a/audit/projects/k8s-release-test-prod/iam.json +++ b/audit/projects/k8s-release-test-prod/iam.json @@ -71,6 +71,7 @@ "group:k8s-infra-release-admins@kubernetes.io", "group:k8s-infra-release-editors@kubernetes.io", "group:k8s-infra-release-viewers@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io", "group:k8s-infra-staging-release-test@kubernetes.io" ], "role": "roles/viewer" diff --git a/audit/projects/k8s-release-test-prod/service-accounts/925892675446-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-release-test-prod/service-accounts/925892675446-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-release-test-prod/service-accounts/925892675446-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-release-test-prod/service-accounts/925892675446-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-release-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-release-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-release-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-release-test-prod/service-accounts/k8s-infra-gcr-promoter@k8s-release-test-prod.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-release-test-prod/services/compute/project-info.json b/audit/projects/k8s-release-test-prod/services/compute/project-info.json index c65ca9ebfc1..3d76a0b795d 100644 --- a/audit/projects/k8s-release-test-prod/services/compute/project-info.json +++ b/audit/projects/k8s-release-test-prod/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-release-test-prod/services/enabled.json b/audit/projects/k8s-release-test-prod/services/enabled.json index 9506534d126..6267e143599 100644 --- a/audit/projects/k8s-release-test-prod/services/enabled.json +++ b/audit/projects/k8s-release-test-prod/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -426,12 +430,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -470,6 +476,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -487,6 +494,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -511,7 +519,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -527,7 +535,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-releng-prod/description.json b/audit/projects/k8s-releng-prod/description.json new file mode 100644 index 00000000000..7c0026332c1 --- /dev/null +++ b/audit/projects/k8s-releng-prod/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-06T23:27:29.234Z", + "lifecycleState": "ACTIVE", + "name": "k8s-releng-prod", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-releng-prod", + "projectNumber": "689098785215" +} diff --git a/audit/projects/k8s-releng-prod/iam.json b/audit/projects/k8s-releng-prod/iam.json new file mode 100644 index 00000000000..9b34de93b47 --- /dev/null +++ b/audit/projects/k8s-releng-prod/iam.json @@ -0,0 +1,29 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-release-admins@kubernetes.io" + ], + "role": "roles/cloudkms.admin" + }, + { + "members": [ + "group:k8s-infra-release-admins@kubernetes.io" + ], + "role": "roles/cloudkms.cryptoKeyEncrypterDecrypter" + }, + { + "members": [ + "user:thockin@google.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-release-admins@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-releng-prod/services/enabled.json b/audit/projects/k8s-releng-prod/services/enabled.json new file mode 100644 index 00000000000..7e9a493b358 --- /dev/null +++ b/audit/projects/k8s-releng-prod/services/enabled.json @@ -0,0 +1,50 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/689098785215/services/cloudkms.googleapis.com", + "parent": "projects/689098785215", + "serviceAccounts": [ + { + "email": "service-689098785215@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-sig-release-prototype/service-accounts/248671828424-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-sig-release-prototype/service-accounts/248671828424-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-sig-release-prototype/service-accounts/248671828424-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-sig-release-prototype/service-accounts/248671828424-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-sig-release-prototype/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-sig-release-prototype/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-sig-release-prototype/services/compute/project-info.json b/audit/projects/k8s-sig-release-prototype/services/compute/project-info.json index 12718e20c5b..00456a2348b 100644 --- a/audit/projects/k8s-sig-release-prototype/services/compute/project-info.json +++ b/audit/projects/k8s-sig-release-prototype/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-sig-release-prototype/services/enabled.json b/audit/projects/k8s-sig-release-prototype/services/enabled.json index 804bb96d15d..453ac8645f0 100644 --- a/audit/projects/k8s-sig-release-prototype/services/enabled.json +++ b/audit/projects/k8s-sig-release-prototype/services/enabled.json @@ -414,7 +414,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -447,7 +447,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -464,7 +464,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -755,7 +755,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -771,7 +771,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -923,7 +923,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -938,7 +938,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -958,6 +958,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -969,6 +970,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -976,6 +978,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -985,30 +988,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-apisnoop/services/enabled.json b/audit/projects/k8s-staging-apisnoop/services/enabled.json index 6b474259524..5650bb94508 100644 --- a/audit/projects/k8s-staging-apisnoop/services/enabled.json +++ b/audit/projects/k8s-staging-apisnoop/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/782271650518/services/cloudkms.googleapis.com", + "parent": "projects/782271650518", + "serviceAccounts": [ + { + "email": "service-782271650518@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-artifact-promoter/services/enabled.json b/audit/projects/k8s-staging-artifact-promoter/services/enabled.json index 18e1fabcd27..405503d3372 100644 --- a/audit/projects/k8s-staging-artifact-promoter/services/enabled.json +++ b/audit/projects/k8s-staging-artifact-promoter/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/675573440409/services/cloudkms.googleapis.com", + "parent": "projects/675573440409", + "serviceAccounts": [ + { + "email": "service-675573440409@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..9f92656084d --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://artifacts.k8s-staging-autoscaling.appspot.com: + Enabled: True + LockedTime: 2020-06-18 19:01:27.162000+00:00 + diff --git a/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/cors.txt b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/cors.txt new file mode 100644 index 00000000000..7ca030b9158 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-autoscaling.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/iam.json b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/iam.json new file mode 100644 index 00000000000..5a5eb94a86b --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-autoscaling", + "projectOwner:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-autoscaling@kubernetes.io", + "projectViewer:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/logging.txt b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/logging.txt new file mode 100644 index 00000000000..c72e77d1566 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/artifacts.k8s-staging-autoscaling.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-autoscaling.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/bucketpolicyonly.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/bucketpolicyonly.txt new file mode 100644 index 00000000000..1af6292e1eb --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-autoscaling-gcb: + Enabled: True + LockedTime: 2020-06-18 19:02:10.119000+00:00 + diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/cors.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/cors.txt new file mode 100644 index 00000000000..33addc8308e --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-autoscaling-gcb/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/iam.json b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/iam.json new file mode 100644 index 00000000000..d8354b86d07 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/iam.json @@ -0,0 +1,39 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-autoscaling", + "projectOwner:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-autoscaling@kubernetes.io", + "projectViewer:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/logging.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/logging.txt new file mode 100644 index 00000000000..b630723aecf --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling-gcb/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-autoscaling-gcb/ has no logging configuration. diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/bucketpolicyonly.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/bucketpolicyonly.txt new file mode 100644 index 00000000000..9b60f78e551 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-autoscaling: + Enabled: True + LockedTime: 2020-06-18 19:01:50.417000+00:00 + diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/cors.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/cors.txt new file mode 100644 index 00000000000..5474f99e626 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-autoscaling/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/iam.json b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/iam.json new file mode 100644 index 00000000000..5a5eb94a86b --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-autoscaling", + "projectOwner:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-autoscaling@kubernetes.io", + "projectViewer:k8s-staging-autoscaling" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/logging.txt b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/logging.txt new file mode 100644 index 00000000000..1c03821e617 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/buckets/k8s-staging-autoscaling/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-autoscaling/ has no logging configuration. diff --git a/audit/projects/k8s-staging-autoscaling/description.json b/audit/projects/k8s-staging-autoscaling/description.json new file mode 100644 index 00000000000..43421e53465 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-20T19:00:32.292Z", + "lifecycleState": "ACTIVE", + "name": "k8s-staging-autoscaling", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-staging-autoscaling", + "projectNumber": "371644685964" +} diff --git a/audit/projects/k8s-staging-autoscaling/iam.json b/audit/projects/k8s-staging-autoscaling/iam.json new file mode 100644 index 00000000000..8a67c9c2180 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/iam.json @@ -0,0 +1,50 @@ +{ + "bindings": [ + { + "members": [ + "serviceAccount:371644685964@cloudbuild.gserviceaccount.com", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.builds.builder" + }, + { + "members": [ + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/cloudbuild.builds.editor" + }, + { + "members": [ + "serviceAccount:service-371644685964@gcp-sa-cloudbuild.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.serviceAgent" + }, + { + "members": [ + "serviceAccount:service-371644685964@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/editor" + }, + { + "members": [ + "user:davanum@gmail.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-release-viewers@kubernetes.io", + "group:k8s-infra-staging-autoscaling@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-staging-autoscaling/services/enabled.json b/audit/projects/k8s-staging-autoscaling/services/enabled.json new file mode 100644 index 00000000000..3025e8f5218 --- /dev/null +++ b/audit/projects/k8s-staging-autoscaling/services/enabled.json @@ -0,0 +1,902 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Creates and manages builds on Google Cloud Platform." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudbuild.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/cloud-build/docs/" + } + }, + "migration": {}, + "name": "cloudbuild.googleapis.com", + "quota": {}, + "title": "Cloud Build API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudbuild.googleapis.com", + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "composer.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "composer.googleapis.com", + "datalogic.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ] + }, + "name": "projects/371644685964/services/cloudbuild.googleapis.com", + "parent": "projects/371644685964", + "serviceAccounts": [ + { + "email": "371644685964@cloudbuild.gserviceaccount.com", + "role": "roles/cloudbuild.builds.builder" + }, + { + "email": "service-371644685964@gcp-sa-cloudbuild.iam.gserviceaccount.com", + "role": "roles/cloudbuild.serviceAgent", + "tag": "p4sa" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/371644685964/services/cloudkms.googleapis.com", + "parent": "projects/371644685964", + "serviceAccounts": [ + { + "email": "service-371644685964@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Container Registry provides secure, private Docker image storage on Google Cloud Platform. Our API follows the Docker Registry API specification, so we are fully compatible with the Docker CLI client, as well as standard tooling using the Docker Registry API." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "containerregistry.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/container-registry/" + } + }, + "migration": {}, + "name": "containerregistry.googleapis.com", + "quota": {}, + "title": "Container Registry API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "containerregistry.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "run.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/371644685964/services/containerregistry.googleapis.com", + "parent": "projects/371644685964", + "serviceAccounts": [ + { + "email": "service-371644685964@containerregistry.iam.gserviceaccount.com", + "role": "roles/editor" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation", + "serviceusage.googleapis.com/skip-secure-gcp-if-no-resource-container" + ], + "legacy": { + "apiV1Name": "logging", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/logging/docs/" + } + }, + "migration": {}, + "name": "logging.googleapis.com", + "quota": {}, + "title": "Cloud Logging API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "logging.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ] + }, + "name": "projects/371644685964/services/logging.googleapis.com", + "parent": "projects/371644685964", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Provides reliable, many-to-many, asynchronous messaging between applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation" + ], + "legacy": { + "apiV1Name": "pubsub", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/pubsub/docs" + } + }, + "migration": { + "preferDistribDiscovery": true + }, + "name": "pubsub.googleapis.com", + "quota": {}, + "title": "Cloud Pub/Sub API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "pubsub.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "computescanning.googleapis.com", + "container.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "deploymenthistory.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-computescanning.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-deploymenthistory.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ] + }, + "name": "projects/371644685964/services/pubsub.googleapis.com", + "parent": "projects/371644685964", + "serviceAccounts": [ + { + "email": "service-371644685964@gcp-sa-pubsub.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/371644685964/services/storage-api.googleapis.com", + "parent": "projects/371644685964", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Cloud Storage is a RESTful service for storing and accessing your data on Google's\n infrastructure." + }, + "legacy": { + "apiV1Name": "storage_component", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/" + } + }, + "migration": {}, + "name": "storage-component.googleapis.com", + "quota": {}, + "title": "Cloud Storage", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-component.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/371644685964/services/storage-component.googleapis.com", + "parent": "projects/371644685964", + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-staging-build-image/services/enabled.json b/audit/projects/k8s-staging-build-image/services/enabled.json index d68b99db02c..8c64814a9a5 100644 --- a/audit/projects/k8s-staging-build-image/services/enabled.json +++ b/audit/projects/k8s-staging-build-image/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/960211007710/services/cloudkms.googleapis.com", + "parent": "projects/960211007710", + "serviceAccounts": [ + { + "email": "service-960211007710@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-capi-docker/services/enabled.json b/audit/projects/k8s-staging-capi-docker/services/enabled.json index d890eda8af1..ce48d5dc9f9 100644 --- a/audit/projects/k8s-staging-capi-docker/services/enabled.json +++ b/audit/projects/k8s-staging-capi-docker/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/44019431644/services/cloudkms.googleapis.com", + "parent": "projects/44019431644", + "serviceAccounts": [ + { + "email": "service-44019431644@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-capi-kubeadm/services/enabled.json b/audit/projects/k8s-staging-capi-kubeadm/services/enabled.json index dfed03a1286..e4ff0817869 100644 --- a/audit/projects/k8s-staging-capi-kubeadm/services/enabled.json +++ b/audit/projects/k8s-staging-capi-kubeadm/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/778608689920/services/cloudkms.googleapis.com", + "parent": "projects/778608689920", + "serviceAccounts": [ + { + "email": "service-778608689920@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-capi-openstack/service-accounts/129051311436-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-capi-openstack/service-accounts/129051311436-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-capi-openstack/service-accounts/129051311436-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-capi-openstack/service-accounts/129051311436-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-capi-openstack/services/compute/project-info.json b/audit/projects/k8s-staging-capi-openstack/services/compute/project-info.json index bf8b48304cc..f97edbbff00 100644 --- a/audit/projects/k8s-staging-capi-openstack/services/compute/project-info.json +++ b/audit/projects/k8s-staging-capi-openstack/services/compute/project-info.json @@ -38,7 +38,7 @@ { "limit": 250.0, "metric": "ROUTES", - "usage": 23.0 + "usage": 24.0 }, { "limit": 45.0, @@ -123,7 +123,7 @@ { "limit": 175.0, "metric": "SUBNETWORKS", - "usage": 22.0 + "usage": 23.0 }, { "limit": 30.0, @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-capi-openstack/services/enabled.json b/audit/projects/k8s-staging-capi-openstack/services/enabled.json index c90ea87c504..b9177880b5b 100644 --- a/audit/projects/k8s-staging-capi-openstack/services/enabled.json +++ b/audit/projects/k8s-staging-capi-openstack/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/129051311436/services/cloudkms.googleapis.com", + "parent": "projects/129051311436", + "serviceAccounts": [ + { + "email": "service-129051311436@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -308,12 +360,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -352,6 +406,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -369,6 +424,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -393,7 +449,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -409,7 +465,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..8b9b6c1437a --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://artifacts.k8s-staging-capi-vsphere.appspot.com: + Enabled: True + LockedTime: 2020-06-04 15:39:34.369000+00:00 + diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/cors.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/cors.txt new file mode 100644 index 00000000000..00ca8cfc38b --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-capi-vsphere.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/iam.json b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/iam.json new file mode 100644 index 00000000000..88d150c15a1 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-capi-vsphere", + "projectOwner:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-capi-vsphere@kubernetes.io", + "projectViewer:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/logging.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/logging.txt new file mode 100644 index 00000000000..34d9990b9a3 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/artifacts.k8s-staging-capi-vsphere.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-capi-vsphere.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/bucketpolicyonly.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/bucketpolicyonly.txt new file mode 100644 index 00000000000..1e228cde8b9 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-capi-vsphere-gcb: + Enabled: True + LockedTime: 2020-06-04 15:40:18.341000+00:00 + diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/cors.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/cors.txt new file mode 100644 index 00000000000..5b9bf3f1392 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-capi-vsphere-gcb/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/iam.json b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/iam.json new file mode 100644 index 00000000000..beb0e3d5a44 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/iam.json @@ -0,0 +1,39 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-capi-vsphere", + "projectOwner:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-capi-vsphere@kubernetes.io", + "projectViewer:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/logging.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/logging.txt new file mode 100644 index 00000000000..d1fffc6b2b3 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere-gcb/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-capi-vsphere-gcb/ has no logging configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/bucketpolicyonly.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/bucketpolicyonly.txt new file mode 100644 index 00000000000..1a421ebd0f5 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-capi-vsphere: + Enabled: True + LockedTime: 2020-06-04 15:39:58.184000+00:00 + diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/cors.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/cors.txt new file mode 100644 index 00000000000..415cf3032e6 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-capi-vsphere/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/iam.json b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/iam.json new file mode 100644 index 00000000000..88d150c15a1 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-capi-vsphere", + "projectOwner:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-capi-vsphere@kubernetes.io", + "projectViewer:k8s-staging-capi-vsphere" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/logging.txt b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/logging.txt new file mode 100644 index 00000000000..ed38fa8ed23 --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/buckets/k8s-staging-capi-vsphere/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-capi-vsphere/ has no logging configuration. diff --git a/audit/projects/k8s-staging-capi-vsphere/description.json b/audit/projects/k8s-staging-capi-vsphere/description.json new file mode 100644 index 00000000000..c2e56918adf --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-06T15:38:42.269Z", + "lifecycleState": "ACTIVE", + "name": "k8s-staging-capi-vsphere", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-staging-capi-vsphere", + "projectNumber": "459565607671" +} diff --git a/audit/projects/k8s-staging-capi-vsphere/iam.json b/audit/projects/k8s-staging-capi-vsphere/iam.json new file mode 100644 index 00000000000..3419e0e1fbe --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/iam.json @@ -0,0 +1,49 @@ +{ + "bindings": [ + { + "members": [ + "serviceAccount:459565607671@cloudbuild.gserviceaccount.com", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.builds.builder" + }, + { + "members": [ + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/cloudbuild.builds.editor" + }, + { + "members": [ + "serviceAccount:service-459565607671@gcp-sa-cloudbuild.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.serviceAgent" + }, + { + "members": [ + "serviceAccount:service-459565607671@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/editor" + }, + { + "members": [ + "user:davanum@gmail.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-capi-vsphere@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-staging-capi-vsphere/services/enabled.json b/audit/projects/k8s-staging-capi-vsphere/services/enabled.json new file mode 100644 index 00000000000..1a1ca00f13a --- /dev/null +++ b/audit/projects/k8s-staging-capi-vsphere/services/enabled.json @@ -0,0 +1,902 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Creates and manages builds on Google Cloud Platform." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudbuild.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/cloud-build/docs/" + } + }, + "migration": {}, + "name": "cloudbuild.googleapis.com", + "quota": {}, + "title": "Cloud Build API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudbuild.googleapis.com", + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "composer.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "composer.googleapis.com", + "datalogic.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ] + }, + "name": "projects/459565607671/services/cloudbuild.googleapis.com", + "parent": "projects/459565607671", + "serviceAccounts": [ + { + "email": "459565607671@cloudbuild.gserviceaccount.com", + "role": "roles/cloudbuild.builds.builder" + }, + { + "email": "service-459565607671@gcp-sa-cloudbuild.iam.gserviceaccount.com", + "role": "roles/cloudbuild.serviceAgent", + "tag": "p4sa" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/459565607671/services/cloudkms.googleapis.com", + "parent": "projects/459565607671", + "serviceAccounts": [ + { + "email": "service-459565607671@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Container Registry provides secure, private Docker image storage on Google Cloud Platform. Our API follows the Docker Registry API specification, so we are fully compatible with the Docker CLI client, as well as standard tooling using the Docker Registry API." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "containerregistry.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/container-registry/" + } + }, + "migration": {}, + "name": "containerregistry.googleapis.com", + "quota": {}, + "title": "Container Registry API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "containerregistry.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "run.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/459565607671/services/containerregistry.googleapis.com", + "parent": "projects/459565607671", + "serviceAccounts": [ + { + "email": "service-459565607671@containerregistry.iam.gserviceaccount.com", + "role": "roles/editor" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation", + "serviceusage.googleapis.com/skip-secure-gcp-if-no-resource-container" + ], + "legacy": { + "apiV1Name": "logging", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/logging/docs/" + } + }, + "migration": {}, + "name": "logging.googleapis.com", + "quota": {}, + "title": "Cloud Logging API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "logging.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ] + }, + "name": "projects/459565607671/services/logging.googleapis.com", + "parent": "projects/459565607671", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Provides reliable, many-to-many, asynchronous messaging between applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation" + ], + "legacy": { + "apiV1Name": "pubsub", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/pubsub/docs" + } + }, + "migration": { + "preferDistribDiscovery": true + }, + "name": "pubsub.googleapis.com", + "quota": {}, + "title": "Cloud Pub/Sub API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "pubsub.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "computescanning.googleapis.com", + "container.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "deploymenthistory.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-computescanning.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-deploymenthistory.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ] + }, + "name": "projects/459565607671/services/pubsub.googleapis.com", + "parent": "projects/459565607671", + "serviceAccounts": [ + { + "email": "service-459565607671@gcp-sa-pubsub.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/459565607671/services/storage-api.googleapis.com", + "parent": "projects/459565607671", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Cloud Storage is a RESTful service for storing and accessing your data on Google's\n infrastructure." + }, + "legacy": { + "apiV1Name": "storage_component", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/" + } + }, + "migration": {}, + "name": "storage-component.googleapis.com", + "quota": {}, + "title": "Cloud Storage", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-component.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/459565607671/services/storage-component.googleapis.com", + "parent": "projects/459565607671", + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-staging-cip-test/buckets/asia.artifacts.k8s-staging-cip-test.appspot.com/iam.json b/audit/projects/k8s-staging-cip-test/buckets/asia.artifacts.k8s-staging-cip-test.appspot.com/iam.json index a1478b46a78..f9896e19e8f 100644 --- a/audit/projects/k8s-staging-cip-test/buckets/asia.artifacts.k8s-staging-cip-test.appspot.com/iam.json +++ b/audit/projects/k8s-staging-cip-test/buckets/asia.artifacts.k8s-staging-cip-test.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-cip-test@kubernetes.io", "projectViewer:k8s-staging-cip-test" ], "role": "roles/storage.legacyBucketReader" @@ -18,6 +19,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cip-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com" ], "role": "roles/storage.objectAdmin" diff --git a/audit/projects/k8s-staging-cip-test/buckets/eu.artifacts.k8s-staging-cip-test.appspot.com/iam.json b/audit/projects/k8s-staging-cip-test/buckets/eu.artifacts.k8s-staging-cip-test.appspot.com/iam.json index a1478b46a78..f9896e19e8f 100644 --- a/audit/projects/k8s-staging-cip-test/buckets/eu.artifacts.k8s-staging-cip-test.appspot.com/iam.json +++ b/audit/projects/k8s-staging-cip-test/buckets/eu.artifacts.k8s-staging-cip-test.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-cip-test@kubernetes.io", "projectViewer:k8s-staging-cip-test" ], "role": "roles/storage.legacyBucketReader" @@ -18,6 +19,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cip-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com" ], "role": "roles/storage.objectAdmin" diff --git a/audit/projects/k8s-staging-cip-test/buckets/us.artifacts.k8s-staging-cip-test.appspot.com/iam.json b/audit/projects/k8s-staging-cip-test/buckets/us.artifacts.k8s-staging-cip-test.appspot.com/iam.json index a1478b46a78..f9896e19e8f 100644 --- a/audit/projects/k8s-staging-cip-test/buckets/us.artifacts.k8s-staging-cip-test.appspot.com/iam.json +++ b/audit/projects/k8s-staging-cip-test/buckets/us.artifacts.k8s-staging-cip-test.appspot.com/iam.json @@ -11,6 +11,7 @@ }, { "members": [ + "group:k8s-infra-staging-cip-test@kubernetes.io", "projectViewer:k8s-staging-cip-test" ], "role": "roles/storage.legacyBucketReader" @@ -18,6 +19,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cip-test@kubernetes.io", "serviceAccount:k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com" ], "role": "roles/storage.objectAdmin" diff --git a/audit/projects/k8s-staging-cip-test/service-accounts/324460563566-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-cip-test/service-accounts/324460563566-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-cip-test/service-accounts/324460563566-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-cip-test/service-accounts/324460563566-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-cip-test/service-accounts/k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-cip-test/service-accounts/k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-cip-test/service-accounts/k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-cip-test/service-accounts/k8s-infra-gcr-promoter@k8s-staging-cip-test.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-cip-test/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-staging-cip-test/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-staging-cip-test/services/compute/project-info.json b/audit/projects/k8s-staging-cip-test/services/compute/project-info.json index fd60148e396..6cd3a8fda6d 100644 --- a/audit/projects/k8s-staging-cip-test/services/compute/project-info.json +++ b/audit/projects/k8s-staging-cip-test/services/compute/project-info.json @@ -38,7 +38,7 @@ { "limit": 250.0, "metric": "ROUTES", - "usage": 23.0 + "usage": 24.0 }, { "limit": 45.0, @@ -123,7 +123,7 @@ { "limit": 175.0, "metric": "SUBNETWORKS", - "usage": 22.0 + "usage": 23.0 }, { "limit": 30.0, @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-cip-test/services/enabled.json b/audit/projects/k8s-staging-cip-test/services/enabled.json index 812d780a84a..777418582e0 100644 --- a/audit/projects/k8s-staging-cip-test/services/enabled.json +++ b/audit/projects/k8s-staging-cip-test/services/enabled.json @@ -441,9 +441,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -454,10 +456,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -496,7 +500,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -529,7 +533,55 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/324460563566/services/cloudkms.googleapis.com", + "parent": "projects/324460563566", + "serviceAccounts": [ + { + "email": "service-324460563566@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -546,7 +598,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -911,12 +963,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -955,6 +1009,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -972,6 +1027,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -1038,7 +1094,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -1054,7 +1110,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1206,7 +1262,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1221,7 +1277,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1241,6 +1297,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1252,6 +1309,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1259,6 +1317,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1268,30 +1327,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-cluster-api-aws/service-accounts/433651898792-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-cluster-api-aws/service-accounts/433651898792-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-cluster-api-aws/service-accounts/433651898792-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-cluster-api-aws/service-accounts/433651898792-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-cluster-api-aws/services/compute/project-info.json b/audit/projects/k8s-staging-cluster-api-aws/services/compute/project-info.json index 24a28d902cf..ff3f272639d 100644 --- a/audit/projects/k8s-staging-cluster-api-aws/services/compute/project-info.json +++ b/audit/projects/k8s-staging-cluster-api-aws/services/compute/project-info.json @@ -38,7 +38,7 @@ { "limit": 250.0, "metric": "ROUTES", - "usage": 23.0 + "usage": 24.0 }, { "limit": 45.0, @@ -123,7 +123,7 @@ { "limit": 175.0, "metric": "SUBNETWORKS", - "usage": 22.0 + "usage": 23.0 }, { "limit": 30.0, @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-cluster-api-aws/services/enabled.json b/audit/projects/k8s-staging-cluster-api-aws/services/enabled.json index 5d83228f486..f4aa3a030b2 100644 --- a/audit/projects/k8s-staging-cluster-api-aws/services/enabled.json +++ b/audit/projects/k8s-staging-cluster-api-aws/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/433651898792/services/cloudkms.googleapis.com", + "parent": "projects/433651898792", + "serviceAccounts": [ + { + "email": "service-433651898792@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -308,12 +360,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -352,6 +406,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -369,6 +424,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -393,7 +449,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -409,7 +465,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-cluster-api-azure/services/enabled.json b/audit/projects/k8s-staging-cluster-api-azure/services/enabled.json index e7f842a3e9a..01258c7e809 100644 --- a/audit/projects/k8s-staging-cluster-api-azure/services/enabled.json +++ b/audit/projects/k8s-staging-cluster-api-azure/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/1087109869165/services/cloudkms.googleapis.com", + "parent": "projects/1087109869165", + "serviceAccounts": [ + { + "email": "service-1087109869165@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..19687b2dbfc --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://artifacts.k8s-staging-cluster-api-do.appspot.com: + Enabled: True + LockedTime: 2020-06-18 19:27:02.469000+00:00 + diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/cors.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/cors.txt new file mode 100644 index 00000000000..3c3fc7729b3 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-cluster-api-do.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/iam.json b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/iam.json new file mode 100644 index 00000000000..ef6706cd08b --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-cluster-api-do", + "projectOwner:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-cluster-api-do@kubernetes.io", + "projectViewer:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/logging.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/logging.txt new file mode 100644 index 00000000000..145806c7f22 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/artifacts.k8s-staging-cluster-api-do.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-cluster-api-do.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/bucketpolicyonly.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/bucketpolicyonly.txt new file mode 100644 index 00000000000..3ef80578ff9 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-cluster-api-do-gcb: + Enabled: True + LockedTime: 2020-06-18 19:27:47.046000+00:00 + diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/cors.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/cors.txt new file mode 100644 index 00000000000..76eeace56f9 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-cluster-api-do-gcb/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/iam.json b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/iam.json new file mode 100644 index 00000000000..45db2fb0093 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/iam.json @@ -0,0 +1,39 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-cluster-api-do", + "projectOwner:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-cluster-api-do@kubernetes.io", + "projectViewer:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/logging.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/logging.txt new file mode 100644 index 00000000000..3437a98688f --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do-gcb/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-cluster-api-do-gcb/ has no logging configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/bucketpolicyonly.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/bucketpolicyonly.txt new file mode 100644 index 00000000000..d960dfebbf3 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-cluster-api-do: + Enabled: True + LockedTime: 2020-06-18 19:27:27.941000+00:00 + diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/cors.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/cors.txt new file mode 100644 index 00000000000..f89a92060d2 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-cluster-api-do/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/iam.json b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/iam.json new file mode 100644 index 00000000000..ef6706cd08b --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-cluster-api-do", + "projectOwner:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-cluster-api-do@kubernetes.io", + "projectViewer:k8s-staging-cluster-api-do" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/logging.txt b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/logging.txt new file mode 100644 index 00000000000..32246a6ce7b --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/buckets/k8s-staging-cluster-api-do/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-cluster-api-do/ has no logging configuration. diff --git a/audit/projects/k8s-staging-cluster-api-do/description.json b/audit/projects/k8s-staging-cluster-api-do/description.json new file mode 100644 index 00000000000..61a6a6cf4ed --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-20T19:26:12.162Z", + "lifecycleState": "ACTIVE", + "name": "k8s-staging-cluster-api-do", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-staging-cluster-api-do", + "projectNumber": "226017735054" +} diff --git a/audit/projects/k8s-staging-cluster-api-do/iam.json b/audit/projects/k8s-staging-cluster-api-do/iam.json new file mode 100644 index 00000000000..4962a26b3d4 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/iam.json @@ -0,0 +1,50 @@ +{ + "bindings": [ + { + "members": [ + "serviceAccount:226017735054@cloudbuild.gserviceaccount.com", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.builds.builder" + }, + { + "members": [ + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/cloudbuild.builds.editor" + }, + { + "members": [ + "serviceAccount:service-226017735054@gcp-sa-cloudbuild.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.serviceAgent" + }, + { + "members": [ + "serviceAccount:service-226017735054@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/editor" + }, + { + "members": [ + "user:davanum@gmail.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-release-viewers@kubernetes.io", + "group:k8s-infra-staging-cluster-api-do@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-staging-cluster-api-do/services/enabled.json b/audit/projects/k8s-staging-cluster-api-do/services/enabled.json new file mode 100644 index 00000000000..1a0d2ad2ad3 --- /dev/null +++ b/audit/projects/k8s-staging-cluster-api-do/services/enabled.json @@ -0,0 +1,902 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Creates and manages builds on Google Cloud Platform." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudbuild.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/cloud-build/docs/" + } + }, + "migration": {}, + "name": "cloudbuild.googleapis.com", + "quota": {}, + "title": "Cloud Build API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudbuild.googleapis.com", + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "composer.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "composer.googleapis.com", + "datalogic.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ] + }, + "name": "projects/226017735054/services/cloudbuild.googleapis.com", + "parent": "projects/226017735054", + "serviceAccounts": [ + { + "email": "226017735054@cloudbuild.gserviceaccount.com", + "role": "roles/cloudbuild.builds.builder" + }, + { + "email": "service-226017735054@gcp-sa-cloudbuild.iam.gserviceaccount.com", + "role": "roles/cloudbuild.serviceAgent", + "tag": "p4sa" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/226017735054/services/cloudkms.googleapis.com", + "parent": "projects/226017735054", + "serviceAccounts": [ + { + "email": "service-226017735054@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Container Registry provides secure, private Docker image storage on Google Cloud Platform. Our API follows the Docker Registry API specification, so we are fully compatible with the Docker CLI client, as well as standard tooling using the Docker Registry API." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "containerregistry.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/container-registry/" + } + }, + "migration": {}, + "name": "containerregistry.googleapis.com", + "quota": {}, + "title": "Container Registry API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "containerregistry.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "run.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/226017735054/services/containerregistry.googleapis.com", + "parent": "projects/226017735054", + "serviceAccounts": [ + { + "email": "service-226017735054@containerregistry.iam.gserviceaccount.com", + "role": "roles/editor" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation", + "serviceusage.googleapis.com/skip-secure-gcp-if-no-resource-container" + ], + "legacy": { + "apiV1Name": "logging", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/logging/docs/" + } + }, + "migration": {}, + "name": "logging.googleapis.com", + "quota": {}, + "title": "Cloud Logging API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "logging.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ] + }, + "name": "projects/226017735054/services/logging.googleapis.com", + "parent": "projects/226017735054", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Provides reliable, many-to-many, asynchronous messaging between applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation" + ], + "legacy": { + "apiV1Name": "pubsub", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/pubsub/docs" + } + }, + "migration": { + "preferDistribDiscovery": true + }, + "name": "pubsub.googleapis.com", + "quota": {}, + "title": "Cloud Pub/Sub API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "pubsub.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "computescanning.googleapis.com", + "container.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "deploymenthistory.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-computescanning.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-deploymenthistory.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ] + }, + "name": "projects/226017735054/services/pubsub.googleapis.com", + "parent": "projects/226017735054", + "serviceAccounts": [ + { + "email": "service-226017735054@gcp-sa-pubsub.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/226017735054/services/storage-api.googleapis.com", + "parent": "projects/226017735054", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Cloud Storage is a RESTful service for storing and accessing your data on Google's\n infrastructure." + }, + "legacy": { + "apiV1Name": "storage_component", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/" + } + }, + "migration": {}, + "name": "storage-component.googleapis.com", + "quota": {}, + "title": "Cloud Storage", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-component.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/226017735054/services/storage-component.googleapis.com", + "parent": "projects/226017735054", + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-staging-cluster-api-gcp/services/enabled.json b/audit/projects/k8s-staging-cluster-api-gcp/services/enabled.json index cb40bff0715..3b6dd09cd80 100644 --- a/audit/projects/k8s-staging-cluster-api-gcp/services/enabled.json +++ b/audit/projects/k8s-staging-cluster-api-gcp/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/606075400249/services/cloudkms.googleapis.com", + "parent": "projects/606075400249", + "serviceAccounts": [ + { + "email": "service-606075400249@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-cluster-api/service-accounts/190130481896-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-cluster-api/service-accounts/190130481896-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-cluster-api/service-accounts/190130481896-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-cluster-api/service-accounts/190130481896-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-cluster-api/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-staging-cluster-api/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-staging-cluster-api/services/compute/project-info.json b/audit/projects/k8s-staging-cluster-api/services/compute/project-info.json index a94afc56e79..8a7dae0085f 100644 --- a/audit/projects/k8s-staging-cluster-api/services/compute/project-info.json +++ b/audit/projects/k8s-staging-cluster-api/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-cluster-api/services/enabled.json b/audit/projects/k8s-staging-cluster-api/services/enabled.json index c9f4b2eeaf1..b9343b4484c 100644 --- a/audit/projects/k8s-staging-cluster-api/services/enabled.json +++ b/audit/projects/k8s-staging-cluster-api/services/enabled.json @@ -441,9 +441,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -454,10 +456,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -496,7 +500,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -529,7 +533,55 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/190130481896/services/cloudkms.googleapis.com", + "parent": "projects/190130481896", + "serviceAccounts": [ + { + "email": "service-190130481896@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -546,7 +598,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -841,12 +893,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -885,6 +939,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -902,6 +957,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -968,7 +1024,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -984,7 +1040,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1136,7 +1192,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1151,7 +1207,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1171,6 +1227,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1182,6 +1239,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1189,6 +1247,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1198,30 +1257,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-coredns/service-accounts/848617618266-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-coredns/service-accounts/848617618266-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-coredns/service-accounts/848617618266-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-coredns/service-accounts/848617618266-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-coredns/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-staging-coredns/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-staging-coredns/services/compute/project-info.json b/audit/projects/k8s-staging-coredns/services/compute/project-info.json index 558ecf84f8d..8bea31e8ff0 100644 --- a/audit/projects/k8s-staging-coredns/services/compute/project-info.json +++ b/audit/projects/k8s-staging-coredns/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-coredns/services/enabled.json b/audit/projects/k8s-staging-coredns/services/enabled.json index d1ce8f31fee..fc103d88cae 100644 --- a/audit/projects/k8s-staging-coredns/services/enabled.json +++ b/audit/projects/k8s-staging-coredns/services/enabled.json @@ -441,9 +441,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -454,10 +456,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -496,7 +500,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -529,7 +533,55 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/848617618266/services/cloudkms.googleapis.com", + "parent": "projects/848617618266", + "serviceAccounts": [ + { + "email": "service-848617618266@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -546,7 +598,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -911,12 +963,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -955,6 +1009,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -972,6 +1027,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -1087,7 +1143,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -1103,7 +1159,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1255,7 +1311,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1270,7 +1326,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1290,6 +1346,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1301,6 +1358,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1308,6 +1366,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1317,30 +1376,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-csi/service-accounts/874328413592-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-csi/service-accounts/874328413592-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-csi/service-accounts/874328413592-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-csi/service-accounts/874328413592-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-csi/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-staging-csi/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-staging-csi/services/compute/project-info.json b/audit/projects/k8s-staging-csi/services/compute/project-info.json index c129f6bcc92..4881b282480 100644 --- a/audit/projects/k8s-staging-csi/services/compute/project-info.json +++ b/audit/projects/k8s-staging-csi/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-csi/services/enabled.json b/audit/projects/k8s-staging-csi/services/enabled.json index f82ccfd0809..3fba124c531 100644 --- a/audit/projects/k8s-staging-csi/services/enabled.json +++ b/audit/projects/k8s-staging-csi/services/enabled.json @@ -441,9 +441,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -454,10 +456,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -496,7 +500,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -529,7 +533,55 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/874328413592/services/cloudkms.googleapis.com", + "parent": "projects/874328413592", + "serviceAccounts": [ + { + "email": "service-874328413592@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -546,7 +598,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -841,12 +893,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -885,6 +939,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -902,6 +957,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -968,7 +1024,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -984,7 +1040,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1136,7 +1192,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1151,7 +1207,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1171,6 +1227,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1182,6 +1239,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1189,6 +1247,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1198,30 +1257,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-descheduler/services/enabled.json b/audit/projects/k8s-staging-descheduler/services/enabled.json index 304ea629f7d..cec8ac0a1b2 100644 --- a/audit/projects/k8s-staging-descheduler/services/enabled.json +++ b/audit/projects/k8s-staging-descheduler/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/1009880777024/services/cloudkms.googleapis.com", + "parent": "projects/1009880777024", + "serviceAccounts": [ + { + "email": "service-1009880777024@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-e2e-test-images/services/enabled.json b/audit/projects/k8s-staging-e2e-test-images/services/enabled.json index 7618173270a..f3cfc91ac58 100644 --- a/audit/projects/k8s-staging-e2e-test-images/services/enabled.json +++ b/audit/projects/k8s-staging-e2e-test-images/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/456067983721/services/cloudkms.googleapis.com", + "parent": "projects/456067983721", + "serviceAccounts": [ + { + "email": "service-456067983721@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-external-dns/services/enabled.json b/audit/projects/k8s-staging-external-dns/services/enabled.json index 9017a9e6ae0..a612419367f 100644 --- a/audit/projects/k8s-staging-external-dns/services/enabled.json +++ b/audit/projects/k8s-staging-external-dns/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/548739681389/services/cloudkms.googleapis.com", + "parent": "projects/548739681389", + "serviceAccounts": [ + { + "email": "service-548739681389@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-kas-network-proxy/services/enabled.json b/audit/projects/k8s-staging-kas-network-proxy/services/enabled.json index a4c5918e247..56d5cf71b06 100644 --- a/audit/projects/k8s-staging-kas-network-proxy/services/enabled.json +++ b/audit/projects/k8s-staging-kas-network-proxy/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/670598002495/services/cloudkms.googleapis.com", + "parent": "projects/670598002495", + "serviceAccounts": [ + { + "email": "service-670598002495@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-kops/services/bigquery/bigquery.datasets.json b/audit/projects/k8s-staging-kops/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/k8s-staging-kops/services/enabled.json b/audit/projects/k8s-staging-kops/services/enabled.json index 77c806f5cee..c865bec195c 100644 --- a/audit/projects/k8s-staging-kops/services/enabled.json +++ b/audit/projects/k8s-staging-kops/services/enabled.json @@ -441,9 +441,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -454,10 +456,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -496,7 +500,7 @@ }, "name": "clouddebugger.googleapis.com", "quota": {}, - "title": "Stackdriver Debugger API", + "title": "Cloud Debugger API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -529,7 +533,55 @@ "config": { "authentication": {}, "documentation": { - "summary": "Sends application trace data to Stackdriver Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Trace API directly. If you are looking to instrument your application for Stackdriver Trace, we recommend using OpenCensus.\n" + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/889470918518/services/cloudkms.googleapis.com", + "parent": "projects/889470918518", + "serviceAccounts": [ + { + "email": "service-889470918518@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Sends application trace data to Cloud Trace for viewing. Trace data is collected for all App Engine applications by default. Trace data from other applications can be provided using this API. This library is used to interact with the Cloud Trace API directly. If you are looking to instrument your application for Cloud Trace, we recommend using OpenCensus.\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -546,7 +598,7 @@ }, "name": "cloudtrace.googleapis.com", "quota": {}, - "title": "Stackdriver Trace API", + "title": "Cloud Trace API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -664,12 +716,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -708,6 +762,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -725,6 +780,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -791,7 +847,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -807,7 +863,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -959,7 +1015,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -974,7 +1030,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -994,6 +1050,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1005,6 +1062,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1012,6 +1070,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1021,30 +1080,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", diff --git a/audit/projects/k8s-staging-kube-state-metrics/services/enabled.json b/audit/projects/k8s-staging-kube-state-metrics/services/enabled.json index b29653581ca..733806d7faf 100644 --- a/audit/projects/k8s-staging-kube-state-metrics/services/enabled.json +++ b/audit/projects/k8s-staging-kube-state-metrics/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/1023797992882/services/cloudkms.googleapis.com", + "parent": "projects/1023797992882", + "serviceAccounts": [ + { + "email": "service-1023797992882@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-kubeadm/services/enabled.json b/audit/projects/k8s-staging-kubeadm/services/enabled.json index 0501f3a5c0e..93766179b33 100644 --- a/audit/projects/k8s-staging-kubeadm/services/enabled.json +++ b/audit/projects/k8s-staging-kubeadm/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/487125676961/services/cloudkms.googleapis.com", + "parent": "projects/487125676961", + "serviceAccounts": [ + { + "email": "service-487125676961@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..6ce0ab631b4 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://artifacts.k8s-staging-kubernetes.appspot.com: + Enabled: True + LockedTime: 2020-06-04 23:30:24.021000+00:00 + diff --git a/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/cors.txt b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/cors.txt new file mode 100644 index 00000000000..68e6f86c2fa --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-kubernetes.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/iam.json b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/iam.json new file mode 100644 index 00000000000..34c80e5d078 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-kubernetes", + "projectOwner:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", + "projectViewer:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/logging.txt b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/logging.txt new file mode 100644 index 00000000000..57bf50db1bd --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/artifacts.k8s-staging-kubernetes.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-kubernetes.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/bucketpolicyonly.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/bucketpolicyonly.txt new file mode 100644 index 00000000000..b8d89f3cb16 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-kubernetes-gcb: + Enabled: True + LockedTime: 2020-06-04 23:31:00.823000+00:00 + diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/cors.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/cors.txt new file mode 100644 index 00000000000..dcf75585012 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-kubernetes-gcb/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/iam.json b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/iam.json new file mode 100644 index 00000000000..495f36821f4 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/iam.json @@ -0,0 +1,39 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-kubernetes", + "projectOwner:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", + "projectViewer:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/logging.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/logging.txt new file mode 100644 index 00000000000..69331fc3ee0 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes-gcb/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-kubernetes-gcb/ has no logging configuration. diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/bucketpolicyonly.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/bucketpolicyonly.txt new file mode 100644 index 00000000000..83dba5f8e12 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-kubernetes: + Enabled: True + LockedTime: 2020-06-04 23:30:44.022000+00:00 + diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/cors.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/cors.txt new file mode 100644 index 00000000000..9376290d23f --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-kubernetes/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/iam.json b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/iam.json new file mode 100644 index 00000000000..34c80e5d078 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-kubernetes", + "projectOwner:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io", + "projectViewer:k8s-staging-kubernetes" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/logging.txt b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/logging.txt new file mode 100644 index 00000000000..551e9a4c23d --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/buckets/k8s-staging-kubernetes/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-kubernetes/ has no logging configuration. diff --git a/audit/projects/k8s-staging-kubernetes/description.json b/audit/projects/k8s-staging-kubernetes/description.json new file mode 100644 index 00000000000..a0695afb098 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-06T23:29:41.824Z", + "lifecycleState": "ACTIVE", + "name": "k8s-staging-kubernetes", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-staging-kubernetes", + "projectNumber": "615281671549" +} diff --git a/audit/projects/k8s-staging-kubernetes/iam.json b/audit/projects/k8s-staging-kubernetes/iam.json new file mode 100644 index 00000000000..78cac28b434 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/iam.json @@ -0,0 +1,49 @@ +{ + "bindings": [ + { + "members": [ + "serviceAccount:615281671549@cloudbuild.gserviceaccount.com", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.builds.builder" + }, + { + "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/cloudbuild.builds.editor" + }, + { + "members": [ + "serviceAccount:service-615281671549@gcp-sa-cloudbuild.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.serviceAgent" + }, + { + "members": [ + "serviceAccount:service-615281671549@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/editor" + }, + { + "members": [ + "user:thockin@google.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-kubernetes@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-staging-kubernetes/services/enabled.json b/audit/projects/k8s-staging-kubernetes/services/enabled.json new file mode 100644 index 00000000000..f98d66334f1 --- /dev/null +++ b/audit/projects/k8s-staging-kubernetes/services/enabled.json @@ -0,0 +1,902 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Creates and manages builds on Google Cloud Platform." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudbuild.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/cloud-build/docs/" + } + }, + "migration": {}, + "name": "cloudbuild.googleapis.com", + "quota": {}, + "title": "Cloud Build API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudbuild.googleapis.com", + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "composer.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "composer.googleapis.com", + "datalogic.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ] + }, + "name": "projects/615281671549/services/cloudbuild.googleapis.com", + "parent": "projects/615281671549", + "serviceAccounts": [ + { + "email": "615281671549@cloudbuild.gserviceaccount.com", + "role": "roles/cloudbuild.builds.builder" + }, + { + "email": "service-615281671549@gcp-sa-cloudbuild.iam.gserviceaccount.com", + "role": "roles/cloudbuild.serviceAgent", + "tag": "p4sa" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/615281671549/services/cloudkms.googleapis.com", + "parent": "projects/615281671549", + "serviceAccounts": [ + { + "email": "service-615281671549@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Container Registry provides secure, private Docker image storage on Google Cloud Platform. Our API follows the Docker Registry API specification, so we are fully compatible with the Docker CLI client, as well as standard tooling using the Docker Registry API." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "containerregistry.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/container-registry/" + } + }, + "migration": {}, + "name": "containerregistry.googleapis.com", + "quota": {}, + "title": "Container Registry API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "containerregistry.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "run.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/615281671549/services/containerregistry.googleapis.com", + "parent": "projects/615281671549", + "serviceAccounts": [ + { + "email": "service-615281671549@containerregistry.iam.gserviceaccount.com", + "role": "roles/editor" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation", + "serviceusage.googleapis.com/skip-secure-gcp-if-no-resource-container" + ], + "legacy": { + "apiV1Name": "logging", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/logging/docs/" + } + }, + "migration": {}, + "name": "logging.googleapis.com", + "quota": {}, + "title": "Cloud Logging API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "logging.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ] + }, + "name": "projects/615281671549/services/logging.googleapis.com", + "parent": "projects/615281671549", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Provides reliable, many-to-many, asynchronous messaging between applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation" + ], + "legacy": { + "apiV1Name": "pubsub", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/pubsub/docs" + } + }, + "migration": { + "preferDistribDiscovery": true + }, + "name": "pubsub.googleapis.com", + "quota": {}, + "title": "Cloud Pub/Sub API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "pubsub.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "computescanning.googleapis.com", + "container.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "deploymenthistory.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-computescanning.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-deploymenthistory.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ] + }, + "name": "projects/615281671549/services/pubsub.googleapis.com", + "parent": "projects/615281671549", + "serviceAccounts": [ + { + "email": "service-615281671549@gcp-sa-pubsub.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/615281671549/services/storage-api.googleapis.com", + "parent": "projects/615281671549", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Cloud Storage is a RESTful service for storing and accessing your data on Google's\n infrastructure." + }, + "legacy": { + "apiV1Name": "storage_component", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/" + } + }, + "migration": {}, + "name": "storage-component.googleapis.com", + "quota": {}, + "title": "Cloud Storage", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-component.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/615281671549/services/storage-component.googleapis.com", + "parent": "projects/615281671549", + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-staging-metrics-server/iam.json b/audit/projects/k8s-staging-metrics-server/iam.json index 173e64b7eb3..44f1dacb9f8 100644 --- a/audit/projects/k8s-staging-metrics-server/iam.json +++ b/audit/projects/k8s-staging-metrics-server/iam.json @@ -40,6 +40,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-release-viewers@kubernetes.io", "group:k8s-infra-staging-metrics-server@kubernetes.io" ], "role": "roles/viewer" diff --git a/audit/projects/k8s-staging-metrics-server/services/enabled.json b/audit/projects/k8s-staging-metrics-server/services/enabled.json index dda16ad117c..6b64a711e86 100644 --- a/audit/projects/k8s-staging-metrics-server/services/enabled.json +++ b/audit/projects/k8s-staging-metrics-server/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/229033024066/services/cloudkms.googleapis.com", + "parent": "projects/229033024066", + "serviceAccounts": [ + { + "email": "service-229033024066@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-multitenancy/services/enabled.json b/audit/projects/k8s-staging-multitenancy/services/enabled.json index 0365e0e5ce3..c5ac6bd6b91 100644 --- a/audit/projects/k8s-staging-multitenancy/services/enabled.json +++ b/audit/projects/k8s-staging-multitenancy/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/817922591645/services/cloudkms.googleapis.com", + "parent": "projects/817922591645", + "serviceAccounts": [ + { + "email": "service-817922591645@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-nfd/services/enabled.json b/audit/projects/k8s-staging-nfd/services/enabled.json index 0ae66617717..45f8c0e8f53 100644 --- a/audit/projects/k8s-staging-nfd/services/enabled.json +++ b/audit/projects/k8s-staging-nfd/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/5125544917/services/cloudkms.googleapis.com", + "parent": "projects/5125544917", + "serviceAccounts": [ + { + "email": "service-5125544917@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-npd/services/enabled.json b/audit/projects/k8s-staging-npd/services/enabled.json index fbe925200c4..ba1a3705fc2 100644 --- a/audit/projects/k8s-staging-npd/services/enabled.json +++ b/audit/projects/k8s-staging-npd/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/152738448582/services/cloudkms.googleapis.com", + "parent": "projects/152738448582", + "serviceAccounts": [ + { + "email": "service-152738448582@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-provider-azure/services/enabled.json b/audit/projects/k8s-staging-provider-azure/services/enabled.json index 3a71a6c2d88..2be350ca457 100644 --- a/audit/projects/k8s-staging-provider-azure/services/enabled.json +++ b/audit/projects/k8s-staging-provider-azure/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/83539169056/services/cloudkms.googleapis.com", + "parent": "projects/83539169056", + "serviceAccounts": [ + { + "email": "service-83539169056@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-publishing-bot/services/enabled.json b/audit/projects/k8s-staging-publishing-bot/services/enabled.json index f29feccf35c..cfb6ce38cc1 100644 --- a/audit/projects/k8s-staging-publishing-bot/services/enabled.json +++ b/audit/projects/k8s-staging-publishing-bot/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/438481731081/services/cloudkms.googleapis.com", + "parent": "projects/438481731081", + "serviceAccounts": [ + { + "email": "service-438481731081@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-release-test/service-accounts/634027639865-compute@developer.gserviceaccount.com/iam.json b/audit/projects/k8s-staging-release-test/service-accounts/634027639865-compute@developer.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/k8s-staging-release-test/service-accounts/634027639865-compute@developer.gserviceaccount.com/iam.json +++ b/audit/projects/k8s-staging-release-test/service-accounts/634027639865-compute@developer.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/k8s-staging-release-test/services/compute/project-info.json b/audit/projects/k8s-staging-release-test/services/compute/project-info.json index ec85df47762..409095d1223 100644 --- a/audit/projects/k8s-staging-release-test/services/compute/project-info.json +++ b/audit/projects/k8s-staging-release-test/services/compute/project-info.json @@ -170,6 +170,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 15.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/k8s-staging-release-test/services/enabled.json b/audit/projects/k8s-staging-release-test/services/enabled.json index 52ff6732cfb..9b2a8ce0dea 100644 --- a/audit/projects/k8s-staging-release-test/services/enabled.json +++ b/audit/projects/k8s-staging-release-test/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -356,12 +360,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -400,6 +406,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -417,6 +424,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -441,7 +449,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -457,7 +465,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/bucketpolicyonly.txt b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/bucketpolicyonly.txt new file mode 100644 index 00000000000..e1d07876bfe --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://artifacts.k8s-staging-releng.appspot.com: + Enabled: True + LockedTime: 2020-06-04 23:32:13.116000+00:00 + diff --git a/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/cors.txt b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/cors.txt new file mode 100644 index 00000000000..870a76a8cd3 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/cors.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-releng.appspot.com/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/iam.json b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/iam.json new file mode 100644 index 00000000000..b8818b78659 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-releng", + "projectOwner:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-releng@kubernetes.io", + "projectViewer:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/logging.txt b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/logging.txt new file mode 100644 index 00000000000..2c06eb37515 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/artifacts.k8s-staging-releng.appspot.com/logging.txt @@ -0,0 +1 @@ +gs://artifacts.k8s-staging-releng.appspot.com/ has no logging configuration. diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/bucketpolicyonly.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/bucketpolicyonly.txt new file mode 100644 index 00000000000..6976f85e550 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-releng-gcb: + Enabled: True + LockedTime: 2020-06-04 23:32:49.620000+00:00 + diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/cors.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/cors.txt new file mode 100644 index 00000000000..75d697001c7 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-releng-gcb/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/iam.json b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/iam.json new file mode 100644 index 00000000000..efa8f1d0574 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/iam.json @@ -0,0 +1,39 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-releng", + "projectOwner:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-releng@kubernetes.io", + "projectViewer:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectCreator" + }, + { + "members": [ + "allUsers", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/logging.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/logging.txt new file mode 100644 index 00000000000..c4d277cb22d --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng-gcb/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-releng-gcb/ has no logging configuration. diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/bucketpolicyonly.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/bucketpolicyonly.txt new file mode 100644 index 00000000000..725903c4b2a --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/bucketpolicyonly.txt @@ -0,0 +1,4 @@ +Bucket Policy Only setting for gs://k8s-staging-releng: + Enabled: True + LockedTime: 2020-06-04 23:32:32.717000+00:00 + diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/cors.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/cors.txt new file mode 100644 index 00000000000..ba639dfb743 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/cors.txt @@ -0,0 +1 @@ +gs://k8s-staging-releng/ has no CORS configuration. diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/iam.json b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/iam.json new file mode 100644 index 00000000000..b8818b78659 --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/iam.json @@ -0,0 +1,32 @@ +{ + "bindings": [ + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "projectEditor:k8s-staging-releng", + "projectOwner:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketOwner" + }, + { + "members": [ + "group:k8s-infra-staging-releng@kubernetes.io", + "projectViewer:k8s-staging-releng" + ], + "role": "roles/storage.legacyBucketReader" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/storage.objectAdmin" + }, + { + "members": [ + "allUsers" + ], + "role": "roles/storage.objectViewer" + } + ] +} diff --git a/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/logging.txt b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/logging.txt new file mode 100644 index 00000000000..54555d249ba --- /dev/null +++ b/audit/projects/k8s-staging-releng/buckets/k8s-staging-releng/logging.txt @@ -0,0 +1 @@ +gs://k8s-staging-releng/ has no logging configuration. diff --git a/audit/projects/k8s-staging-releng/description.json b/audit/projects/k8s-staging-releng/description.json new file mode 100644 index 00000000000..b83069ab005 --- /dev/null +++ b/audit/projects/k8s-staging-releng/description.json @@ -0,0 +1,11 @@ +{ + "createTime": "2020-03-06T23:31:33.707Z", + "lifecycleState": "ACTIVE", + "name": "k8s-staging-releng", + "parent": { + "id": "758905017065", + "type": "organization" + }, + "projectId": "k8s-staging-releng", + "projectNumber": "117157742389" +} diff --git a/audit/projects/k8s-staging-releng/iam.json b/audit/projects/k8s-staging-releng/iam.json new file mode 100644 index 00000000000..9bc92f34d21 --- /dev/null +++ b/audit/projects/k8s-staging-releng/iam.json @@ -0,0 +1,50 @@ +{ + "bindings": [ + { + "members": [ + "serviceAccount:117157742389@cloudbuild.gserviceaccount.com", + "serviceAccount:deployer@k8s-prow.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.builds.builder" + }, + { + "members": [ + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/cloudbuild.builds.editor" + }, + { + "members": [ + "serviceAccount:service-117157742389@gcp-sa-cloudbuild.iam.gserviceaccount.com" + ], + "role": "roles/cloudbuild.serviceAgent" + }, + { + "members": [ + "serviceAccount:service-117157742389@containerregistry.iam.gserviceaccount.com" + ], + "role": "roles/editor" + }, + { + "members": [ + "user:thockin@google.com" + ], + "role": "roles/owner" + }, + { + "members": [ + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/serviceusage.serviceUsageConsumer" + }, + { + "members": [ + "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-release-viewers@kubernetes.io", + "group:k8s-infra-staging-releng@kubernetes.io" + ], + "role": "roles/viewer" + } + ], + "version": 1 +} diff --git a/audit/projects/k8s-staging-releng/services/enabled.json b/audit/projects/k8s-staging-releng/services/enabled.json new file mode 100644 index 00000000000..08f32b60ce0 --- /dev/null +++ b/audit/projects/k8s-staging-releng/services/enabled.json @@ -0,0 +1,902 @@ +[ + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Creates and manages builds on Google Cloud Platform." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudbuild.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/cloud-build/docs/" + } + }, + "migration": {}, + "name": "cloudbuild.googleapis.com", + "quota": {}, + "title": "Cloud Build API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudbuild.googleapis.com", + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "containerregistry.googleapis.com", + "logging.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "composer.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "composer.googleapis.com", + "datalogic.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "managedvms.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com" + ] + }, + "name": "projects/117157742389/services/cloudbuild.googleapis.com", + "parent": "projects/117157742389", + "serviceAccounts": [ + { + "email": "117157742389@cloudbuild.gserviceaccount.com", + "role": "roles/cloudbuild.builds.builder" + }, + { + "email": "service-117157742389@gcp-sa-cloudbuild.iam.gserviceaccount.com", + "role": "roles/cloudbuild.serviceAgent", + "tag": "p4sa" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/117157742389/services/cloudkms.googleapis.com", + "parent": "projects/117157742389", + "serviceAccounts": [ + { + "email": "service-117157742389@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Container Registry provides secure, private Docker image storage on Google Cloud Platform. Our API follows the Docker Registry API specification, so we are fully compatible with the Docker CLI client, as well as standard tooling using the Docker Registry API." + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "containerregistry.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/container-registry/" + } + }, + "migration": {}, + "name": "containerregistry.googleapis.com", + "quota": {}, + "title": "Container Registry API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud", + "serviceusage.googleapis.com/billing-enabled" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "containerregistry.googleapis.com", + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyDependsOn": [ + "pubsub.googleapis.com", + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "run.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/117157742389/services/containerregistry.googleapis.com", + "parent": "projects/117157742389", + "serviceAccounts": [ + { + "email": "service-117157742389@containerregistry.iam.gserviceaccount.com", + "role": "roles/editor" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation", + "serviceusage.googleapis.com/skip-secure-gcp-if-no-resource-container" + ], + "legacy": { + "apiV1Name": "logging", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/logging/docs/" + } + }, + "migration": {}, + "name": "logging.googleapis.com", + "quota": {}, + "title": "Cloud Logging API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "logging.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-endpoints.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "canary-ml.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-endpoints-googleapis.corp.google.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "endpoints.googleapis.com", + "managedvms.googleapis.com", + "memcache.googleapis.com", + "ml.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "stackdriver.googleapis.com", + "stackdriverprovisioning.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datalab.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-ml.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-vpcaccess.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-datalab.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-ml.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "test-vpcaccess.sandbox.googleapis.com", + "tpu.googleapis.com", + "vpcaccess.googleapis.com" + ] + }, + "name": "projects/117157742389/services/logging.googleapis.com", + "parent": "projects/117157742389", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Provides reliable, many-to-many, asynchronous messaging between applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch", + "serviceusage.googleapis.com/skip-activation" + ], + "legacy": { + "apiV1Name": "pubsub", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/pubsub/docs" + } + }, + "migration": { + "preferDistribDiscovery": true + }, + "name": "pubsub.googleapis.com", + "quota": {}, + "title": "Cloud Pub/Sub API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "pubsub.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "redis.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "computescanning.googleapis.com", + "container.googleapis.com", + "containeranalysis.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "deploymenthistory.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "dev-workflow.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containeranalysis.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "staging-workflow.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-computescanning.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-deploymenthistory.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com", + "workflow.googleapis.com" + ] + }, + "name": "projects/117157742389/services/pubsub.googleapis.com", + "parent": "projects/117157742389", + "serviceAccounts": [ + { + "email": "service-117157742389@gcp-sa-pubsub.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Lets you store and retrieve potentially-large, immutable data objects." + }, + "legacy": { + "apiV1Name": "storage_api", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/docs/json_api/v1/", + "requestQuotaUrl": "https://docs.google.com/a/google.com/spreadsheet/viewform?formkey=dFctTHl0LW52UUJsQ1BET19uZmVuWFE6MQ&entry_0={email}&entry_1={id}" + } + }, + "migration": {}, + "name": "storage-api.googleapis.com", + "quota": {}, + "title": "Google Cloud Storage JSON API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-api.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "containerregistry.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "managedvms.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-run.sandbox.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-memcache.sandbox.googleapis.com", + "autopush-pod-cloudbuild.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", + "cloudapis.googleapis.com", + "cloudbuild.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "container.googleapis.com", + "containerregistry.googleapis.com", + "containerscanning.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-cloudbuild.sandbox.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "dev-pod-cloudbuild.sandbox.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", + "memcache.googleapis.com", + "nonprod-cloudbuild.sandbox.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-pod-cloudbuild.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "proxy-cloudbuild.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "resourceviews.googleapis.com", + "run.googleapis.com", + "servicebroker.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", + "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-containerregistry.sandbox.googleapis.com", + "staging-containerscanning.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-memcache.sandbox.googleapis.com", + "staging-pod-cloudbuild.sandbox.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-memcache.sandbox.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/117157742389/services/storage-api.googleapis.com", + "parent": "projects/117157742389", + "state": "ENABLED" + }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Google Cloud Storage is a RESTful service for storing and accessing your data on Google's\n infrastructure." + }, + "legacy": { + "apiV1Name": "storage_component", + "devconsole": { + "learnmoreUrl": "https://developers.google.com/storage/" + } + }, + "migration": {}, + "name": "storage-component.googleapis.com", + "quota": {}, + "title": "Cloud Storage", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "storage-component.googleapis.com" + ], + "directlyRequiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ], + "requiredBy": [ + "appengineflex.googleapis.com", + "automl.googleapis.com", + "autopush-automl.sandbox.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", + "autopush-datalogic.sandbox.googleapis.com", + "autopush-spinnaker.sandbox.googleapis.com", + "cloudapis.googleapis.com", + "cloudfunctions.googleapis.com", + "composer.googleapis.com", + "dataflow-daily.sandbox.googleapis.com", + "dataflow-dev-staging.sandbox.googleapis.com", + "dataflow-staging.sandbox.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", + "datalogic.googleapis.com", + "dataprep.googleapis.com", + "dataproc-control.googleapis.com", + "dataproc.googleapis.com", + "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", + "firebasestorage.googleapis.com", + "managedvms.googleapis.com", + "preprod-cloudfunctions.sandbox.googleapis.com", + "preprod-run.sandbox.googleapis.com", + "quantum.googleapis.com", + "redis.googleapis.com", + "run.googleapis.com", + "spinnaker.googleapis.com", + "staging-appengineflex.sandbox.googleapis.com", + "staging-automl.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", + "staging-composer.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", + "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-dataproc-control.sandbox.googleapis.com", + "staging-dataproc.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", + "staging-redis.sandbox.googleapis.com", + "staging-run.sandbox.googleapis.com", + "staging-spinnaker.sandbox.googleapis.com", + "staging-tpu.sandbox.googleapis.com", + "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", + "test-dataproc-control.sandbox.googleapis.com", + "test-dataproc.sandbox.googleapis.com", + "test-managedvms.googleapis.com", + "test-redis.sandbox.googleapis.com", + "test-run.sandbox.googleapis.com", + "test-tpu.sandbox.googleapis.com", + "tpu.googleapis.com" + ] + }, + "name": "projects/117157742389/services/storage-component.googleapis.com", + "parent": "projects/117157742389", + "state": "ENABLED" + } +] diff --git a/audit/projects/k8s-staging-scl-image-builder/services/enabled.json b/audit/projects/k8s-staging-scl-image-builder/services/enabled.json index 24454b06b83..6d182c08953 100644 --- a/audit/projects/k8s-staging-scl-image-builder/services/enabled.json +++ b/audit/projects/k8s-staging-scl-image-builder/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/974299031321/services/cloudkms.googleapis.com", + "parent": "projects/974299031321", + "serviceAccounts": [ + { + "email": "service-974299031321@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-service-apis/services/enabled.json b/audit/projects/k8s-staging-service-apis/services/enabled.json index 11fb2919d3b..ab0cebd0c37 100644 --- a/audit/projects/k8s-staging-service-apis/services/enabled.json +++ b/audit/projects/k8s-staging-service-apis/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/1031494980804/services/cloudkms.googleapis.com", + "parent": "projects/1031494980804", + "serviceAccounts": [ + { + "email": "service-1031494980804@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/k8s-staging-txtdirect/iam.json b/audit/projects/k8s-staging-txtdirect/iam.json index 740bb5f5a66..305b7f1af95 100644 --- a/audit/projects/k8s-staging-txtdirect/iam.json +++ b/audit/projects/k8s-staging-txtdirect/iam.json @@ -40,6 +40,7 @@ { "members": [ "group:k8s-infra-artifact-admins@kubernetes.io", + "group:k8s-infra-release-viewers@kubernetes.io", "group:k8s-infra-staging-txtdirect@kubernetes.io" ], "role": "roles/viewer" diff --git a/audit/projects/k8s-staging-txtdirect/services/enabled.json b/audit/projects/k8s-staging-txtdirect/services/enabled.json index f4ea08a2ee4..02b1148b22f 100644 --- a/audit/projects/k8s-staging-txtdirect/services/enabled.json +++ b/audit/projects/k8s-staging-txtdirect/services/enabled.json @@ -46,9 +46,11 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ], "requiredBy": [ @@ -59,10 +61,12 @@ "dev-composer.sandbox.googleapis.com", "managedvms.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-managedvms.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-managedvms.googleapis.com" ] }, @@ -81,6 +85,54 @@ ], "state": "ENABLED" }, + { + "config": { + "authentication": {}, + "documentation": { + "summary": "Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.\n" + }, + "features": [ + "googleprod.com/service/use-monarch" + ], + "legacy": { + "apiV1Name": "cloudkms.googleapis.com", + "devconsole": { + "learnmoreUrl": "https://cloud.google.com/kms/" + } + }, + "migration": {}, + "name": "cloudkms.googleapis.com", + "quota": {}, + "title": "Cloud Key Management Service (KMS) API", + "usage": { + "requirements": [ + "serviceusage.googleapis.com/tos/cloud" + ], + "serviceAccess": "PUBLIC" + } + }, + "dependencyConfig": { + "dependsOn": [ + "cloudkms.googleapis.com" + ], + "directlyRequiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ], + "requiredBy": [ + "servicebroker.googleapis.com", + "staging-servicebroker.sandbox.googleapis.com" + ] + }, + "name": "projects/662592719730/services/cloudkms.googleapis.com", + "parent": "projects/662592719730", + "serviceAccounts": [ + { + "email": "service-662592719730@gcp-sa-ekms.iam.gserviceaccount.com" + } + ], + "state": "ENABLED" + }, { "config": { "authentication": {}, @@ -131,12 +183,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -175,6 +229,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -192,6 +247,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -216,7 +272,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -232,7 +288,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" diff --git a/audit/projects/kubernetes-public/service-accounts/gke-nodes-aaa@kubernetes-public.iam.gserviceaccount.com/iam.json b/audit/projects/kubernetes-public/service-accounts/gke-nodes-aaa@kubernetes-public.iam.gserviceaccount.com/iam.json index 61a2092b1b7..0967ef424bc 100644 --- a/audit/projects/kubernetes-public/service-accounts/gke-nodes-aaa@kubernetes-public.iam.gserviceaccount.com/iam.json +++ b/audit/projects/kubernetes-public/service-accounts/gke-nodes-aaa@kubernetes-public.iam.gserviceaccount.com/iam.json @@ -1,3 +1 @@ -{ - "version": 1 -} +{} diff --git a/audit/projects/kubernetes-public/services/bigquery/bigquery.datasets.json b/audit/projects/kubernetes-public/services/bigquery/bigquery.datasets.json new file mode 100644 index 00000000000..e69de29bb2d diff --git a/audit/projects/kubernetes-public/services/compute/project-info.json b/audit/projects/kubernetes-public/services/compute/project-info.json index 641aea8e365..af29a2d3984 100644 --- a/audit/projects/kubernetes-public/services/compute/project-info.json +++ b/audit/projects/kubernetes-public/services/compute/project-info.json @@ -56,7 +56,7 @@ { "limit": 300.0, "metric": "ROUTES", - "usage": 27.0 + "usage": 28.0 }, { "limit": 150.0, @@ -141,7 +141,7 @@ { "limit": 275.0, "metric": "SUBNETWORKS", - "usage": 23.0 + "usage": 24.0 }, { "limit": 100.0, @@ -188,6 +188,11 @@ "metric": "MACHINE_IMAGES", "usage": 0.0 }, + { + "limit": 20.0, + "metric": "SECURITY_POLICY_CEVAL_RULES", + "usage": 0.0 + }, { "limit": 50.0, "metric": "EXTERNAL_VPN_GATEWAYS", diff --git a/audit/projects/kubernetes-public/services/container/clusters.txt b/audit/projects/kubernetes-public/services/container/clusters.txt index e045857dfd8..eecae704f21 100644 --- a/audit/projects/kubernetes-public/services/container/clusters.txt +++ b/audit/projects/kubernetes-public/services/container/clusters.txt @@ -1,2 +1,2 @@ -aaa us-central1 us-central1-c;us-central1-a;us-central1-f 5 RUNNING +aaa us-central1 us-central1-c;us-central1-a;us-central1-f 8 RUNNING development2 us-central1-b us-central1-b 1 RUNNING diff --git a/audit/projects/kubernetes-public/services/enabled.json b/audit/projects/kubernetes-public/services/enabled.json index 43ed9676ab8..dbde9bb0092 100644 --- a/audit/projects/kubernetes-public/services/enabled.json +++ b/audit/projects/kubernetes-public/services/enabled.json @@ -350,7 +350,7 @@ "migration": {}, "name": "clouderrorreporting.googleapis.com", "quota": {}, - "title": "Stackdriver Error Reporting API", + "title": "Error Reporting API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -661,6 +661,7 @@ "containerregistry.googleapis.com", "iam.googleapis.com", "iamcredentials.googleapis.com", + "monitoring.googleapis.com", "oslogin.googleapis.com", "pubsub.googleapis.com", "storage-api.googleapis.com" @@ -670,7 +671,8 @@ "bigquery.googleapis.com", "compute.googleapis.com", "containerregistry.googleapis.com", - "iam.googleapis.com" + "iam.googleapis.com", + "monitoring.googleapis.com" ], "directlyRequiredBy": [ "autopush-datafusion.sandbox.googleapis.com", @@ -815,12 +817,14 @@ "run.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", "staging-pod-cloudbuild.sandbox.googleapis.com", "staging-run.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-run.sandbox.googleapis.com" ], @@ -859,6 +863,7 @@ "staging-appengineflex.sandbox.googleapis.com", "staging-binaryauthorization.sandbox.googleapis.com", "staging-cloudbuild.sandbox.googleapis.com", + "staging-cloudfunctions.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", "staging-container.sandbox.googleapis.com", "staging-containerscanning.sandbox.googleapis.com", @@ -876,6 +881,7 @@ "test-appengineflex.sandbox.googleapis.com", "test-binaryauthorization.sandbox.googleapis.com", "test-cloudbuild.sandbox.googleapis.com", + "test-cloudfunctions.sandbox.googleapis.com", "test-container.sandbox.googleapis.com", "test-file.sandbox.googleapis.com", "test-managedvms.googleapis.com", @@ -1122,7 +1128,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Writes log entries and manages your Stackdriver Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the Stackdriver Logging documentation." + "summary": "Writes log entries and manages your Cloud Logging configuration.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the documentation at https://cloud.google.com/logging/docs." }, "features": [ "googleprod.com/service/use-monarch", @@ -1138,7 +1144,7 @@ "migration": {}, "name": "logging.googleapis.com", "quota": {}, - "title": "Stackdriver Logging API", + "title": "Cloud Logging API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1290,7 +1296,7 @@ "config": { "authentication": {}, "documentation": { - "summary": "Manages your Stackdriver Monitoring data and configurations. Most projects must be associated with a Stackdriver account, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Stackdriver Monitoring documentation](/monitoring/docs).\n" + "summary": "Manages your Cloud Monitoring data and configurations. Most projects must be associated with a Workspace, with a few exceptions as noted on the individual method pages.\nThe table entries below are presented in alphabetical order, not in order of common use. For explanations of the concepts found in the table entries, read the [Cloud Monitoring documentation](/monitoring/docs).\n" }, "features": [ "googleprod.com/service/use-monarch" @@ -1305,7 +1311,7 @@ "migration": {}, "name": "monitoring.googleapis.com", "quota": {}, - "title": "Stackdriver Monitoring API", + "title": "Cloud Monitoring API", "usage": { "requirements": [ "serviceusage.googleapis.com/tos/cloud" @@ -1325,6 +1331,7 @@ "autopush-spinnaker.sandbox.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", "datalogic.googleapis.com", "dev-composer.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", @@ -1336,6 +1343,7 @@ "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", @@ -1343,6 +1351,7 @@ "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com", @@ -1352,30 +1361,53 @@ ], "requiredBy": [ "appengineflex.googleapis.com", + "autopush-datafusion.sandbox.googleapis.com", "autopush-datalogic.sandbox.googleapis.com", "autopush-endpoints.sandbox.googleapis.com", "autopush-memcache.sandbox.googleapis.com", "autopush-spinnaker.sandbox.googleapis.com", + "autoscaler.googleapis.com", + "binaryauthorization.googleapis.com", + "cloud-infrastructure.googleapis.com", "cloudapis.googleapis.com", "composer.googleapis.com", + "container.googleapis.com", + "dataflow.googleapis.com", + "datafusion.googleapis.com", "datalogic.googleapis.com", + "dataprep.googleapis.com", "dev-composer.sandbox.googleapis.com", + "dev-dataprep.sandbox.googleapis.com", "dev-endpoints-googleapis.corp.google.com", "endpoints.googleapis.com", + "file.googleapis.com", + "managedvms.googleapis.com", + "manager.googleapis.com", "memcache.googleapis.com", "redis.googleapis.com", + "resourceviews.googleapis.com", "spinnaker.googleapis.com", "stackdriver.googleapis.com", "stackdriverprovisioning.googleapis.com", "staging-appengineflex.sandbox.googleapis.com", + "staging-binaryauthorization.sandbox.googleapis.com", "staging-composer.sandbox.googleapis.com", + "staging-container.sandbox.googleapis.com", + "staging-datafusion.sandbox.googleapis.com", "staging-datalogic.sandbox.googleapis.com", + "staging-dataprep.googleapis.com", + "staging-file.sandbox.googleapis.com", + "staging-managedvms.googleapis.com", "staging-memcache.sandbox.googleapis.com", "staging-redis.sandbox.googleapis.com", "staging-spinnaker.sandbox.googleapis.com", "staging-tpu.sandbox.googleapis.com", "staging-vpcaccess.sandbox.googleapis.com", "test-appengineflex.sandbox.googleapis.com", + "test-binaryauthorization.sandbox.googleapis.com", + "test-container.sandbox.googleapis.com", + "test-file.sandbox.googleapis.com", + "test-managedvms.googleapis.com", "test-memcache.sandbox.googleapis.com", "test-redis.sandbox.googleapis.com", "test-tpu.sandbox.googleapis.com",