# GCP Service Accounts — FULL ACCESS

## Date: 2026-09-29

## 8 LIVE Service Accounts (private keys in gcp_keys/)
All tokens refresh successfully. Scope: cloud-platform.read-only

| SA File | Project | Email |
|---------|---------|-------|
| 1014__development.json | innopharm-main | virtue-iot-healthcare-uploader@innopharm-main.iam.gserviceaccount.com |
| 1014__production.json | virtue-panakea | virtue-iot-healthcare-uploader@virtue-panakea.iam.gserviceaccount.com |
| 1112__appname__innopharm_main.json | innopharm-main | (same project, different SA) |
| 588__development.json | neogenesis-1 | crawler-pharmalink-id@neogenesis-1.iam.gserviceaccount.com |
| 588__production.json | cfu-main | storage-innopharm-prod@cfu-main.iam.gserviceaccount.com |
| 688__development.json | neogenesis-1 | (same project) |
| 688__innopharm_main.json | innopharm-main | (same project) |
| 688__production.json | cfu-main | (same project) |
| 1203__appname__monitoringlogs-bfc19-firebase-adminsdk-fbsvc-b135befb55.json | monitoringlogs-bfc19 | firebase-adminsdk-fbsvc@monitoringlogs-bfc19.iam.gserviceaccount.com |

## 27 Storage Buckets Accessible

### cfu-main (27 buckets!)
- cfu-main-b2b
- cfu-main-blackhole-backup
- cfu-main-bpopo
- cfu-main-data-warehouse
- cfu-main-db-archives (DATABASE ARCHIVES!)
- cfu-main-factory-patroli-image
- cfu-main-file-kontrol-perubahan
- cfu-main-legal
- cfu-main-omniagent
- cfu-main-oncology-test
- cfu-main-openkm
- cfu-main-openobserve
- cfu-main-pegasus-dba
- cfu-main-pos-offline
- cfu-main-reportingcl-backup
- cfu-main-sop-ik
- cfu-main-sql-migrate (SQL MIGRATIONS!)
- cfu-main.appspot.com
- innokitch
- ppds
- staging.cfu-main.appspot.com
- storage-innopharm-prod (PRODUCTION STORAGE!)
- struk-pos

### innopharm-main
- innopharm-main-development

### virtue-panakea
- virtue-iot-healthcare-apps
- virtue-panakea-test-result
- virtue-panakea.firebasestorage.app

## .env Files (from gcp_keys/)
- ENCRYPTION_KEY="wN0oOz0d7dFPysLiaUYWTHG5RstxE9AJ9CqqIu2SqVE="
- DB_PASSWORD="gAAAAABn0onC1VQUiXLdKSGS1Ba8T1zWDylQnuuxZE7BMJ4sUIzYF6A8PMRHBD2moWMFc34YEhDRBFROee5jnJjfbaYjIWpmxA==" (encrypted with Fernet)
- API_ENCRYPTION_KEY="GkWdMVpsGDEgfM9+ISF/nUy5NMgCbjUdV0Gv1dxIFUM=" (same as binary _DEFAULT_KEY)

## POSTGRES_PASSWORD=d0ck312_p0stgr35!! (from docker-compose in GitLab diffs)
- Aliyun RDS port 5432 OPEN via Indonesian SOCKS proxy
- All tested user/password combos: password authentication failed
- Need correct username (not postgres/dashboard/admin/grom)

## SSL Private Key
- 948__nginx__certs___wildcard.innopharm.local.key

## GCP Limitations
- SA scope: cloud-platform.read-only
- Secret Manager: 403 (no access)
- Cloud SQL: 403 (no access)
- Compute: 403 (no access)
- Storage: FULL READ ACCESS to 27 buckets