datum-cloud/activity

Activity is a Kubernetes extension that transforms audit logs into a searchable, human-readable format, allowing users to query cluster activity using familiar `kubectl` commands. It provides a powerful search engine for Kubernetes events, enabling questions like "who deleted this deployment?" or "what changes happened in the last hour?" with support for complex filtering and time-based queries. This project is designed for platform teams, security teams, and developers who need to understand what's happening in their Kubernetes clusters without digging through raw audit logs. Built as a native Kubernetes aggregated API server, it feels like a natural part of the ecosystem and supports multi-tenant environments where teams can only access their own activity.