We own a startling number of GCS buckets and I would like to delete the ones we don't need. Since their names are globally unique and they can be taken as soon as they're deleted, better to make them unreadable for a while in case they're in use, and we can get rid of them for real in a few months.
I'm enabling UBA on go-build-log and go-build-snapshots, at which point
setting per-object ACLs will fail.
TryBot-Result: Gopher Robot <firstname.lastname@example.org>
Reviewed-by: Dmitri Shuralyov <email@example.com>
Run-TryBot: Heschi Kreinick <firstname.lastname@example.org>
Reviewed-by: Dmitri Shuralyov <email@example.com>
First stage is complete: I've deleted everything that wasn't publicly available and locked down what was. I also converted a few buckets to UBA on general principle. Next is to wait a month and then delete the stuff that I just locked down.