A demo/draft of spreadsheet code for asset management

[jack-r-warren]

I put a test spreadsheet in the shared drive: https://docs.google.com/spreadsheets/d/1isOybP49rb6n7uX2vtT_azKj-sgRzp7RWkOHxFSsSKE/edit?gid=591394540#gid=591394540

Idea is you paste that link in and it'll do the thing. For the "unique resource identifier", that'll need to be the full resource name you get from the cloud asset API. Sarah T said that because that full name is long and verbose, it'd be great to also have the tail end of it put in a separate short asset name column.

You'll need to set up ADC in a specific way for this to work.

gcloud auth application-default login --scopes=https://www.googleapis.com/auth/userinfo.email,https://www.googleapis.com/auth/accounts.reauth,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/sqlservice.login,openid,https://www.googleapis.com/auth/cloud-platform,https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/spreadsheets

The calendar scope is helpful for Beehive's read-workbench-protection-calendar feature, while the spreadsheet scope is what powers this read-and-mutate-spreadsheet thingy. I don't think we'll need to explicitly list those scopes for Kubernetes or anything but you will need to enable the API in the project.

That cloud asset API is here https://pkg.go.dev/cloud.google.com/go/asset/apiv1. https://pkg.go.dev/cloud.google.com/go/asset/apiv1#Client.QueryAssets is probably what you want.

[sonarcloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[github-actions]

What's New

---

POST /api/asset-inventory/procedures/v3/generate

Generate an asset inventory

[github-actions]

Published image from 3fa324c (merge 1ced747):

us-central1-docker.pkg.dev/dsp-artifact-registry/sherlock/sherlock:v1.6.11-1ced747
us-central1-docker.pkg.dev/dsp-devops-super-prod/sherlock/sherlock:v1.6.11-1ced747