Skip to content

audit: migrate buckets, organizations to new format #2103

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
k8s-ci-robot merged 3 commits into from
May 27, 2021
Merged

audit: migrate buckets, organizations to new format #2103

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
fe29eb3
audit: migrate to new file layout
spiffxp May 26, 2021
0b3ee34
audit: initial export of logging resources
spiffxp May 26, 2021
03bd384
audit: initial export of monitoring resources
spiffxp May 26, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
0 audit/org_kubernetes.io/iam.json → audit/organizations/kubernetes.io/iam.json
View file
Open in desktop
File renamed without changes.
0 ...t/org_kubernetes.io/roles/CustomRole.json → ...tions/kubernetes.io/roles/CustomRole.json
View file
Open in desktop
File renamed without changes.
0 ...org_kubernetes.io/roles/audit.viewer.json → ...ons/kubernetes.io/roles/audit.viewer.json
View file
Open in desktop
File renamed without changes.
0 ...es.io/roles/iam.serviceAccountLister.json → ...es.io/roles/iam.serviceAccountLister.json
View file
Open in desktop
File renamed without changes.
0 ...bernetes.io/roles/organization.admin.json → ...bernetes.io/roles/organization.admin.json
View file
Open in desktop
File renamed without changes.
0 .../org_kubernetes.io/roles/prow.viewer.json → ...ions/kubernetes.io/roles/prow.viewer.json
View file
Open in desktop
File renamed without changes.
0 ....io/roles/secretmanager.secretLister.json → ....io/roles/secretmanager.secretLister.json
View file
Open in desktop
File renamed without changes.
4 changes: 0 additions & 4 deletions ...s-prod-bak/buckets/asia.artifacts.k8s-artifacts-prod-bak.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...k8s-artifacts-prod-bak/buckets/asia.artifacts.k8s-artifacts-prod-bak.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...-artifacts-prod-bak/buckets/asia.artifacts.k8s-artifacts-prod-bak.appspot.com/logging.txt
View file
Open in desktop

This file was deleted.

18 changes: 18 additions & 0 deletions ...artifacts-prod-bak/buckets/asia.artifacts.k8s-artifacts-prod-bak.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://asia.artifacts.k8s-artifacts-prod-bak.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: None
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions ...cts-prod-bak/buckets/eu.artifacts.k8s-artifacts-prod-bak.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...s/k8s-artifacts-prod-bak/buckets/eu.artifacts.k8s-artifacts-prod-bak.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...8s-artifacts-prod-bak/buckets/eu.artifacts.k8s-artifacts-prod-bak.appspot.com/logging.txt
View file
Open in desktop

This file was deleted.

18 changes: 18 additions & 0 deletions ...s-artifacts-prod-bak/buckets/eu.artifacts.k8s-artifacts-prod-bak.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://eu.artifacts.k8s-artifacts-prod-bak.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: None
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod-bak/buckets/k8s-artifacts-prod-bak/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod-bak/buckets/k8s-artifacts-prod-bak/cors.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod-bak/buckets/k8s-artifacts-prod-bak/logging.txt
View file
Open in desktop

This file was deleted.

18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod-bak/buckets/k8s-artifacts-prod-bak/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-prod-bak/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: None
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions ...cts-prod-bak/buckets/us.artifacts.k8s-artifacts-prod-bak.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...s/k8s-artifacts-prod-bak/buckets/us.artifacts.k8s-artifacts-prod-bak.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...8s-artifacts-prod-bak/buckets/us.artifacts.k8s-artifacts-prod-bak.appspot.com/logging.txt
View file
Open in desktop

This file was deleted.

18 changes: 18 additions & 0 deletions ...s-artifacts-prod-bak/buckets/us.artifacts.k8s-artifacts-prod-bak.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://us.artifacts.k8s-artifacts-prod-bak.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: None
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions ...artifacts-prod/buckets/asia.artifacts.k8s-artifacts-prod.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion ...rojects/k8s-artifacts-prod/buckets/asia.artifacts.k8s-artifacts-prod.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

0 ...8s-artifacts-prod.appspot.com/logging.txt → ...s-artifacts-prod.appspot.com/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions ...cts/k8s-artifacts-prod/buckets/asia.artifacts.k8s-artifacts-prod.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://asia.artifacts.k8s-artifacts-prod.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions ...s-artifacts-prod/buckets/eu.artifacts.k8s-artifacts-prod.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion .../projects/k8s-artifacts-prod/buckets/eu.artifacts.k8s-artifacts-prod.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

0 ...8s-artifacts-prod.appspot.com/logging.txt → ...s-artifacts-prod.appspot.com/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions ...jects/k8s-artifacts-prod/buckets/eu.artifacts.k8s-artifacts-prod.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://eu.artifacts.k8s-artifacts-prod.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cni/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cni/cors.txt
View file
Open in desktop

This file was deleted.

0 ...rod/buckets/k8s-artifacts-cni/logging.txt → ...od/buckets/k8s-artifacts-cni/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cni/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-cni/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cri-tools/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cri-tools/cors.txt
View file
Open in desktop

This file was deleted.

0 ...ckets/k8s-artifacts-cri-tools/logging.txt → ...kets/k8s-artifacts-cri-tools/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-cri-tools/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-cri-tools/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-csi/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-csi/cors.txt
View file
Open in desktop

This file was deleted.

0 ...rod/buckets/k8s-artifacts-csi/logging.txt → ...od/buckets/k8s-artifacts-csi/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-csi/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-csi/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-gcslogs/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-gcslogs/cors.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-gcslogs/logging.txt
View file
Open in desktop

This file was deleted.

18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-gcslogs/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-gcslogs/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: None
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-kind/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-kind/cors.txt
View file
Open in desktop

This file was deleted.

0 ...od/buckets/k8s-artifacts-kind/logging.txt → ...d/buckets/k8s-artifacts-kind/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-kind/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-kind/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-prod/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-prod/cors.txt
View file
Open in desktop

This file was deleted.

0 ...od/buckets/k8s-artifacts-prod/logging.txt → ...d/buckets/k8s-artifacts-prod/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions audit/projects/k8s-artifacts-prod/buckets/k8s-artifacts-prod/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://k8s-artifacts-prod/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
4 changes: 0 additions & 4 deletions ...s-artifacts-prod/buckets/us.artifacts.k8s-artifacts-prod.appspot.com/bucketpolicyonly.txt
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion .../projects/k8s-artifacts-prod/buckets/us.artifacts.k8s-artifacts-prod.appspot.com/cors.txt
View file
Open in desktop

This file was deleted.

0 ...8s-artifacts-prod.appspot.com/logging.txt → ...s-artifacts-prod.appspot.com/logging.json
View file
Open in desktop
File renamed without changes.
18 changes: 18 additions & 0 deletions ...jects/k8s-artifacts-prod/buckets/us.artifacts.k8s-artifacts-prod.appspot.com/metadata.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
gs://us.artifacts.k8s-artifacts-prod.appspot.com/ :
Storage class: STANDARD
Location type: multi-region
Location constraint: US
Versioning enabled: None
Logging configuration: Present
Website configuration: None
CORS configuration: None
Lifecycle configuration: None
Requester Pays enabled: None
Labels: None
Default KMS key: None
Time created: TBD
Time updated: TBD
Metageneration: 8
Bucket Policy Only enabled: True
ACL: []
Default ACL: []
9 changes: 9 additions & 0 deletions audit/projects/k8s-artifacts-prod/services/logging/logs.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
[
"projects/k8s-artifacts-prod/logs/cip-audit-log",
"projects/k8s-artifacts-prod/logs/cloudaudit.googleapis.com%2Factivity",
"projects/k8s-artifacts-prod/logs/cloudaudit.googleapis.com%2Fdata_access",
"projects/k8s-artifacts-prod/logs/cloudaudit.googleapis.com%2Fsystem_event",
"projects/k8s-artifacts-prod/logs/requests",
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Frequests",
"projects/k8s-artifacts-prod/logs/run.googleapis.com%2Fstderr"
]
17 changes: 17 additions & 0 deletions audit/projects/k8s-artifacts-prod/services/logging/metrics.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
[
{
"createTime": "2020-03-31T00:22:03.194834184Z",
"description": "CIP Auditor has an alert",
"filter": "logName=\"projects/k8s-artifacts-prod/logs/cip-audit-log\" AND severity>=ERROR ",
"metricDescriptor": {
"description": "CIP Auditor has an alert",
"metricKind": "DELTA",
"name": "projects/k8s-artifacts-prod/metricDescriptors/logging.googleapis.com/user/cip-auditor-alert",
"type": "logging.googleapis.com/user/cip-auditor-alert",
"unit": "1",
"valueType": "INT64"
},
"name": "cip-auditor-alert",
"updateTime": "2020-03-31T00:34:18.785786156Z"
}
]
Loading