My activity¶
What kubelatch logs about every request you make through the proxy, and how to check it.
Where to see it¶
On Inicio (Home), the Mi actividad (My activity) section lists every request that kubectl (or k9s, Lens, Helm) has made with your credentials. By default, discovery requests aren't shown (/api, /apis, /version, the ones kubectl makes just to find out what resources exist); check Incluir peticiones de descubrimiento (Include discovery requests) to see them too.
Click a row's date to open that request's full detail.
What's logged for each request¶
| Field | What it is |
|---|---|
| Fecha (Date) | When the request arrived |
| Cluster | The cluster it was aimed at |
| Acción (Action) | The verb (get, create...) or, for exec, attach, port-forward and logs, that specific action (distinguished by the subresource, not the HTTP verb) |
| Recurso (Resource) | Type, name and namespace of the object (for example pods/exec web (default)) |
| Grupos suplantados (Impersonated groups) | The kubelatch:... groups you acted with in that request |
| IP de origen (Source IP) | The IP of the client that made the request |
| User-Agent | The client that sent it (kubectl, k9s, Lens...) |
| Estado (Status) | The cluster's response code (or kubelatch's if it rejected it first) |
| Duración (Duration) | How long it took |
| Audit-ID | The row's identifier, the same one the cluster gets in its own audit log and that appears in the response's Audit-ID header |
A kubectl exec leaves the executed command inside the request (in its query string, visible in the Petición (Request) field of the detail): an administrator or you yourself can see exactly what was run, not just that an exec happened.
Some rejections don't show up here
An attempt with an expired, revoked or mistyped token isn't tied to anyone, so it doesn't appear in your activity. Other kubelatch rejections only show up if you check Incluir peticiones de descubrimiento.
How long it's kept¶
kubelatch automatically deletes activity after 90 days (the administrator can change this). If you need to keep something longer, ask an administrator to export it.
Who can see it¶
You only see your own activity. An administrator sees everyone's from Auditoría (Audit), with more filters (subject, cluster, namespace, verb, resource, credential, dates).
Does your pipeline also need access? Continue to Credentials for GitHub Actions.