releng

Releng

Analyzed script: ensure-releng.sh

---

Table of Content

• Terraform resources
• Components
• Yaml representation of Components

---

Terraform resources

• Provider: Google
  • google_project
  • google_project_service
  • google_project_iam_binding
  • google_project_iam_member^G2

Components

• Components for project: k8s-releng-prod:
  • Project:
    • k8s-releng-prod
  • IAM Policy Binding:
    • roles/viewer:
      • group:k8s-infra-release-admins@kubernetes.io
    • roles/cloudkms.admin:
      • group:k8s-infra-release-admins@kubernetes.io
    • roles/cloudkms.cryptoKeyEncrypterDecrypter:
      • group:k8s-infra-release-admins@kubernetes.io
  • API:
    • cloudkms

Yaml representation of Components^G1,G2

google_project:
  - name: k8s-releng-prod
google_project_iam_binding:
  - role: roles/viewer
    members:
      - group:k8s-infra-release-admins@kubernetes.io
    project: k8s-releng-prod
  - role: roles/cloudkms.admin
    members:
      - group:k8s-infra-release-admins@kubernetes.io
    project: k8s-releng-prod
  - role: roles/cloudkms.cryptoKeyEncrypterDecrypter
    members:
      - group:k8s-infra-release-admins@kubernetes.io
    project: k8s-releng-prod
google_project_service:
  - service: cloudkms.googleapis.com
    project: k8s-releng-prod