IAM Policy Non-Compliance Detected

Đang mở

#39,869 mở ngày 24/8/2026 0 bình luận 0 reaction 0 người được giao Xem trên GitHub

Maintainer thường phản hồi trong vòng 1 ngày

Chưa có ai nhận issue này.

Đánh giá

Độ khó: 4/5
Thời gian dự kiến: 3-5 ngày
Mức phù hợp với người mới: 35/100

Loại issue: Lỗi
Độ rõ ràng: Cần làm rõ
Mức độ hoạt động: Sôi nổi
Công nghệ: gcp
Lĩnh vực: authorization, cloud, security

Hướng nghiên cứu

Bắt đầu bằng cách đọc ../iam/users.yml và so sánh các danh sách vai trò trong đó với các quyền GCP được hiển thị trong báo cáo kiểm tra. Làm rõ những khác biệt nào là có chủ đích và liệu tệp nguồn hay chính sách GCP cần được thay đổi; công việc được xem là hoàn tất khi dự án tuân thủ mà không đưa vào quyền truy cập trái phép.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Mô tả

Compliance Audit Report (2026-10-05 09:21:28 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/alloydb.editor'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/cloudsql.editor'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/datacatalog.editor'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

History

Click to expand

Compliance Audit Report (2026-09-28 09:19:00 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/automlrecommendations.editor'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/biglake.editor'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigquery.user'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/datastore.admin'}, {'role': 'roles/datastore.editor'}, {'role': 'roles/healthcare.dicomEditor'}, {'role': 'roles/healthcare.dicomStoreAdmin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/healthcare.hl7V2Editor'}, {'role': 'roles/healthcare.hl7V2StoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.networkAdmin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/editor'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.objectAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.securityAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'organizations/433637338589/roles/GcsBucketOwner'}, {'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataproc.admin'}, {'role': 'roles/editor'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/compute.admin'}, {'role': 'roles/config.admin'}, {'role': 'roles/config.agent'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/owner'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/run.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]
In ../iam/users.yml: [{'role': 'roles/alloydb.admin'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/biglake.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/dataflow.worker'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/pubsub.subscriber'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/tpu.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/iam.workloadIdentityPoolAdmin'}, {'role': 'roles/secretmanager.secretAccessor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

IAM policy for project apache-beam-testing is not compliant with the defined policies on ../iam/users.yml

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/cloudaicompanion.codeToolsAdmin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/storage.objectCreator'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/cloudsql.instanceUser'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/iam.serviceAccountAdmin'}, {'role': 'roles/owner'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.cryptoKeyEncrypterDecrypter'}, {'role': 'roles/cloudkms.orgServiceAgent'}, {'role': 'roles/cloudkms.serviceAgent'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]
In ../iam/users.yml: [{'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/artifactregistry.reader'}, {'role': 'roles/artifactregistry.writer'}, {'role': 'roles/autoscaling.metricsWriter'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/cloudfunctions.invoker'}, {'role': 'roles/compute.viewer'}, {'role': 'roles/container.serviceAgent'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/dataflow.developer'}, {'role': 'roles/dataproc.editor'}, {'role': 'roles/editor'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.roleAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/logging.logWriter'}, {'role': 'roles/managedkafka.admin'}, {'role': 'roles/managedkafka.client'}, {'role': 'roles/managedkafka.schemaRegistryEditor'}, {'role': 'roles/monitoring.metricWriter'}, {'role': 'roles/monitoring.viewer'}, {'role': 'roles/resourcemanager.projectIamAdmin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.databaseAdmin'}, {'role': 'roles/stackdriver.resourceMetadata.writer'}, {'role': 'roles/storage.admin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/cloudkms.admin'}, {'role': 'roles/cloudkms.autokeyAdmin'}, {'role': 'roles/cloudkms.cryptoKeyDecrypter'}, {'role': 'roles/cloudkms.cryptoKeyEncrypter'}, {'role': 'roles/cloudkms.cryptoOperator'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/aiplatform.user'}, {'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.createOnPushWriter'}, {'role': 'roles/bigquery.admin'}, {'role': 'roles/bigquery.dataEditor'}, {'role': 'roles/bigtable.admin'}, {'role': 'roles/bigtable.user'}, {'role': 'roles/container.admin'}, {'role': 'roles/dataflow.admin'}, {'role': 'roles/healthcare.fhirResourceEditor'}, {'role': 'roles/healthcare.fhirStoreAdmin'}, {'role': 'roles/iam.serviceAccountTokenCreator'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/pubsub.admin'}, {'role': 'roles/secretmanager.admin'}, {'role': 'roles/spanner.admin'}, {'role': 'roles/storage.admin'}, {'role': 'roles/storage.folderAdmin'}, {'role': 'roles/viewer'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/saasservicemgmt.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]
In ../iam/users.yml: [{'role': 'roles/compute.instanceAdmin.v1'}, {'role': 'roles/compute.networkViewer'}, {'role': 'roles/meshconfig.admin'}, {'role': 'roles/storage.objectAdmin'}, {'role': 'roles/trafficdirector.client'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/artifactregistry.admin'}, {'role': 'roles/artifactregistry.containerRegistryMigrationAdmin'}, {'role': 'roles/artifactregistry.createOnPushRepoAdmin'}, {'role': 'roles/artifactregistry.repoAdmin'}, {'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]
In ../iam/users.yml: [{'role': 'roles/bigquery.dataOwner'}, {'role': 'roles/container.admin'}, {'role': 'roles/iam.serviceAccountUser'}, {'role': 'roles/owner'}, {'role': 'roles/resourcemanager.projectIamAdmin'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'rol

Ngôn ngữ chính: Java
Star: 8.7k
Fork: 4.7k
Merge trung bình: 2 ngày 10 giờ
Pull request đã merge (30 ngày): 310

Chuẩn bị môi trường

Không có Dockerfile hay tệp Docker Compose
Có mẫu pull request
Đọc hướng dẫn đóng góp

Bắt đầu từ đâu

Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
Fork repository và làm thay đổi trên một nhánh.
Mở pull request có tham chiếu số hiệu của issue.

Issue khác của apache/beam

[Feature Request]: Support Protobuf 7.x in Python SDK
Có thể đã có người làm @sofiathoren đã nhận 9 ngày trước. Đang mở
- Có gì không ổn?
P2 python

Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 62/100

apache/beam#40580 · Mở ngày 14/10/2026

Maintainer thường phản hồi trong vòng 1 ngày
Upgrade vendored grpc to remove vulnerabilities coming from netty
Đang mở
- Có gì không ổn?
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 68/100

apache/beam#39624 · 2 reaction · Mở ngày 5/8/2026

Maintainer thường phản hồi trong vòng 1 ngày
[Bug]: PubsubIO used in batch incorrect batch cutoff size
Có thể đã có người làm @1fanwang đã nhận 59 ngày trước. Đang mở
- Có gì không ổn?
bug io P3 pinned pubsub

Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 78/100

apache/beam#28011 · 4 bình luận · Mở ngày 15/8/2023

Maintainer thường phản hồi trong vòng 1 ngày
Add Gradle instruction to Java quick start guide
Đang mở
- Có gì không ổn?
build P3 sub-task

Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 68/100

apache/beam#20256 · Mở ngày 4/6/2022

Maintainer thường phản hồi trong vòng 1 ngày
Missing required prop from BigQueryIO javadoc
Đang mở
- Có gì không ổn?
bug gcp io java P3

Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 65/100

apache/beam#20046 · Mở ngày 4/6/2022

Maintainer thường phản hồi trong vòng 1 ngày

Tất cả issue của apache/beam

Issue tương tự

Shaded google-api-client trust stores still include AAA Certificate Services (eMudhra CA compromise)
Đang mở
- Có gì không ổn?
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 72/100

snowflakedb/snowflake-jdbc#2763 · Mở ngày 23/10/2026
MacFileUtils: FSPathMakeRef passes an int where the C function takes its FSRef output pointer
Đang mở
- Có gì không ổn?
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 79/100

java-native-access/jna#1746 · Mở ngày 23/10/2026
Pooled clients leak a connection per call: pipelines and transactions taken from UnifiedJedis are never closed
Có thể đã có người làm @ali-jawad đã nhận hôm nay. Đang mở
- Có gì không ổn?
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 77/100

gresrun/jesque#333 · Mở ngày 23/10/2026
[BUG] spark: Iceberg REST catalog symlinks collide when multiple catalogs share one REST URI
Đang mở
- Có gì không ổn?
kind:bug state:needs-triage

Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 72/100

OpenLineage/OpenLineage#5100 · 1 bình luận · Mở ngày 23/10/2026

Maintainer thường phản hồi trong vòng 4 ngày
Validating client secret of realm-management client fails since Keycloak 26.8.0
Đang mở
- Có gì không ổn?
bug

Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 82/100

adorsys/keycloak-config-cli#1709 · Mở ngày 23/10/2026

Maintainer thường phản hồi trong vòng 1 ngày

Thêm issue về Java

IAM Policy Non-Compliance Detected

Có gì không ổn?

Đánh giá

Hướng nghiên cứu

Mô tả

Compliance Audit Report (2026-10-05 09:21:28 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

History

Compliance Audit Report (2026-09-28 09:19:00 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-21 09:15:42 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-14 09:15:25 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-09-07 09:15:43 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Compliance Audit Report (2026-08-31 09:16:03 UTC)

Permissions for user [email protected] differ. In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ. In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}] In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Chuẩn bị môi trường

Bắt đầu từ đâu

Issue khác của apache/beam

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Issue tương tự

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Có gì không ổn?

Nhận issue mới trong hộp thư của bạn

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}, {'role': 'roles/serviceusage.apiKeysViewer'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'projects/apache-beam-testing/roles/beam_infra_manager'}]

Permissions for user [email protected] differ.
In GCP: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}, {'role': 'roles/viewer'}]
In ../iam/users.yml: [{'role': 'roles/container.admin'}, {'role': 'roles/editor'}]