Skip to content

Collect audit-logs for edge-native clusters#27

Open
ChellaVigneshKP wants to merge 1 commit intomainfrom
feat/collect-audit-logs
Open

Collect audit-logs for edge-native clusters#27
ChellaVigneshKP wants to merge 1 commit intomainfrom
feat/collect-audit-logs

Conversation

@ChellaVigneshKP
Copy link

Adds support for collecting Kubernetes audit logs in edge-native support bundles.

Changes

  • Introduces audit log collection with new flags:

    • -u enable audit logs
    • -f start time, -t end time, -w lookback days (default: 3)
  • Supports flexible time formats (YYYY-MM-DD, datetime, ISO) and normalizes to UTC

  • Selects relevant audit log files and generates:

    • raw logs (compressed)
    • audit-filtered.jsonl (time-filtered via jq)
    • audit-range.txt (resolved time window)
    • audit-coverage-report.txt (coverage summary)
  • Collects audit-related diagnostics (apiserver config, journal logs, policies)

Notes

  • -f/-t override -w
  • Falls back gracefully if jq or audit logs are unavailable

@ChellaVigneshKP ChellaVigneshKP requested a review from a team as a code owner March 17, 2026 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant