{"id":37192241,"url":"https://github.com/datum-cloud/activity","last_synced_at":"2026-01-21T18:05:13.331Z","repository":{"id":328250810,"uuid":"1114016829","full_name":"datum-cloud/activity","owner":"datum-cloud","description":"Transform Kubernetes audit logs into human-readable activity timelines using declarative descriptors.","archived":false,"fork":false,"pushed_at":"2026-01-13T01:51:21.000Z","size":589,"stargazers_count":1,"open_issues_count":2,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-01-13T01:53:45.980Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/datum-cloud.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-12-10T19:27:13.000Z","updated_at":"2026-01-09T19:32:29.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/datum-cloud/activity","commit_stats":null,"previous_names":["datum-cloud/activity"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/datum-cloud/activity","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/datum-cloud%2Factivity","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/datum-cloud%2Factivity/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/datum-cloud%2Factivity/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/datum-cloud%2Factivity/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/datum-cloud","download_url":"https://codeload.github.com/datum-cloud/activity/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/datum-cloud%2Factivity/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28436270,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T21:32:52.117Z","status":"ssl_error","status_checked_at":"2026-01-14T21:32:33.442Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-01-14T22:18:11.349Z","updated_at":"2026-01-14T22:18:12.207Z","avatar_url":"https://github.com/datum-cloud.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Activity\n\nEver wonder who changed that production secret? Or need to track down who deleted a deployment last week? Activity\nmakes it easy to ask questions about what's happening in your Kubernetes clusters.\n\n## What is this?\n\nActivity is a Kubernetes extension that lets you query your cluster's audit logs using familiar Kubernetes\ntools. Instead of digging through log files, you can use `kubectl` to ask questions like \"show me all the deletions in\nproduction\" or \"who accessed secrets in the last hour?\"\n\nThink of it as a search engine for everything that happens in your cluster. It's built as an aggregated API server,\nwhich means it feels like a natural part of Kubernetes, not a bolt-on tool.\n\n## Components\n\nActivity consists of several components that work together:\n\n- **activity-apiserver**: Kubernetes aggregated API server that processes audit log queries\n- **activity-ui**: React component library for building web interfaces\n- **kubectl-activity**: kubectl plugin for command-line querying\n\n## What can it do right now?\n\n- **Ask powerful questions** using CEL expressions: \"Find all secret deletions by users whose name starts with\n  'system:'\"\n- **Filter by what matters**: time ranges, namespaces, actions (create/update/delete), resource types, users, and more\n- **Fast queries** thanks to a high-performance ClickHouse backend with smart indexing\n- **Works like Kubernetes** because it's built as an aggregated API server—use `kubectl` or any Kubernetes client\n- **Multi-tenant by design** so teams can only see their own activity\n\n## What's coming next?\n\nWe're working on some exciting features to make activity tracking even more powerful:\n\n**Human-readable activity summaries** - Right now, you get raw audit events. Soon, you'll see friendly descriptions like\n\"Alice deleted the production-db secret in the billing namespace\" instead of decoding JSON structures.\n\n**Flexible, dynamic descriptions** - We're building a system that lets you define how events should be described for\nyour organization. Want to call them \"changes\" instead of \"updates\"? Prefer different phrasing for different teams? No\nproblem—and you won't need to re-process historical data to make changes.\n\nThese features are part of our vision to transform raw audit logs into clear, actionable insights that anyone can\nunderstand. You can follow the detailed roadmap in [this enhancement\nproposal](https://github.com/datum-cloud/enhancements/issues/469).\n\n## Who is this for?\n\n- **Platform teams** who need to understand cluster activity across multiple tenants\n- **Security teams** investigating incidents or building compliance reports\n- **Developers** debugging \"who changed what\" questions\n- **Anyone** who's ever wished Kubernetes audit logs were easier to query\n\n## Prerequisites\n\n**For users:**\n- Kubernetes 1.34+ cluster\n- kubectl configured to access your cluster\n\n**For developers:**\n- Go 1.24.0 or later\n- [Task](https://taskfile.dev) for development workflows\n- Docker for building container images\n\n## License\n\nSee [LICENSE](LICENSE) for details.\n\n---\n\n**Questions or feedback?** Open an issue—we're here to help!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdatum-cloud%2Factivity","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdatum-cloud%2Factivity","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdatum-cloud%2Factivity/lists"}