StorageVersionMigration

Operation	Description	Sample	Rule
get-storageversionmigrations		Y	N
list-storageversionmigrations		Y	N
watch-storageversionmigrations		Y	N
create-storageversionmigrations		Y	N
update-storageversionmigrations		Y	N
patch-storageversionmigrations		Y	N
delete-storageversionmigrations		Y	N
deletecollection-storageversionmigrations		Y	N
get-storageversionmigrations-status		Y	N
update-storageversionmigrations-status		Y	N
patch-storageversionmigrations-status		Y	N
any-storageversionmigrations	Synthetic aggregation for rules that filter the storageversionmigrations resource with no specific verb. Not a distinct audit record; hosts rule listings that key on objectRef.resource alone.	N	N

get storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "Metadata",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations",
  "verb": "get",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:07.901841Z",
  "stageTimestamp": "2026-07-03T00:17:07.903699Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

list storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "Metadata",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations?limit=500&timeout=3s",
  "verb": "list",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:08.043497Z",
  "stageTimestamp": "2026-07-03T00:17:08.045048Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

watch storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "Metadata",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations?resourceVersion=1285&timeout=3s&watch=true",
  "verb": "watch",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:08.046185Z",
  "stageTimestamp": "2026-07-03T00:17:11.060591Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

create storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations?fieldManager=kubectl-create&fieldValidation=Strict",
  "verb": "create",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 201
  },
  "requestObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations"
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "responseObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1285",
      "creationTimestamp": "2026-07-03T00:17:07Z"
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:07.830005Z",
  "stageTimestamp": "2026-07-03T00:17:07.833975Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

update storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations?fieldManager=kubectl-replace&fieldValidation=Strict",
  "verb": "update",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "uid": "00000000-0000-0000-0000-000000000000",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1",
    "resourceVersion": "1293"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "responseObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.277631Z",
  "stageTimestamp": "2026-07-03T00:17:11.280172Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

patch storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations?fieldManager=kubectl-patch",
  "verb": "patch",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestObject": {
    "metadata": {
      "labels": {
        "dw-harn-patched": "1"
      }
    }
  },
  "responseObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.132187Z",
  "stageTimestamp": "2026-07-03T00:17:11.136039Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

delete storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations",
  "verb": "delete",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "status": "Failure",
    "message": "storageversionmigrations.storagemigration.k8s.io \"dw-harn-storageversionmigrations\" not found",
    "reason": "NotFound",
    "details": {
      "name": "dw-harn-storageversionmigrations",
      "group": "storagemigration.k8s.io",
      "kind": "storageversionmigrations"
    },
    "code": 404
  },
  "requestObject": {
    "kind": "DeleteOptions",
    "apiVersion": "meta.k8s.io/__internal",
    "propagationPolicy": "Background"
  },
  "responseObject": {
    "kind": "Status",
    "apiVersion": "v1",
    "metadata": {},
    "status": "Failure",
    "message": "storageversionmigrations.storagemigration.k8s.io \"dw-harn-storageversionmigrations\" not found",
    "reason": "NotFound",
    "details": {
      "name": "dw-harn-storageversionmigrations",
      "group": "storagemigration.k8s.io",
      "kind": "storageversionmigrations"
    },
    "code": 404
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.631303Z",
  "stageTimestamp": "2026-07-03T00:17:11.633104Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

deletecollection storageversionmigrations

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations?labelSelector=dw-harn-patched",
  "verb": "deletecollection",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "responseObject": {
    "kind": "StorageVersionMigrationList",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "resourceVersion": "1294"
    },
    "items": [
      {
        "metadata": {
          "name": "dw-harn-storageversionmigrations",
          "uid": "00000000-0000-0000-0000-000000000000",
          "resourceVersion": "1293",
          "creationTimestamp": "2026-07-03T00:17:07Z",
          "labels": {
            "dw-harn-patched": "1"
          }
        },
        "spec": {
          "resource": {
            "group": "",
            "resource": "events"
          }
        },
        "status": {}
      }
    ]
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.558693Z",
  "stageTimestamp": "2026-07-03T00:17:11.564287Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

get storageversionmigrations/status

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "Metadata",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations/status",
  "verb": "get",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1",
    "subresource": "status"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.346548Z",
  "stageTimestamp": "2026-07-03T00:17:11.347843Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

update storageversionmigrations/status

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations/status?fieldManager=kubectl-replace&fieldValidation=Strict",
  "verb": "update",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "uid": "00000000-0000-0000-0000-000000000000",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1",
    "resourceVersion": "1293",
    "subresource": "status"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "responseObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.421037Z",
  "stageTimestamp": "2026-07-03T00:17:11.423375Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

patch storageversionmigrations/status

Resource: storageversionmigrations

Example Audit Event #

{
  "kind": "Event",
  "apiVersion": "audit.k8s.io/v1",
  "level": "RequestResponse",
  "auditID": "00000000-0000-0000-0000-000000000000",
  "stage": "ResponseComplete",
  "requestURI": "/apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/dw-harn-storageversionmigrations/status?fieldManager=kubectl-patch",
  "verb": "patch",
  "user": {
    "username": "kubernetes-admin",
    "groups": [
      "kubeadm:cluster-admins",
      "system:authenticated"
    ],
    "extra": {
      "authentication.kubernetes.io/credential-id": [
        "X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
      ]
    }
  },
  "sourceIPs": [
    "203.0.113.10"
  ],
  "userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
  "objectRef": {
    "resource": "storageversionmigrations",
    "name": "dw-harn-storageversionmigrations",
    "apiGroup": "storagemigration.k8s.io",
    "apiVersion": "v1beta1",
    "subresource": "status"
  },
  "responseStatus": {
    "metadata": {},
    "code": 200
  },
  "requestObject": {},
  "responseObject": {
    "kind": "StorageVersionMigration",
    "apiVersion": "storagemigration.k8s.io/v1beta1",
    "metadata": {
      "name": "dw-harn-storageversionmigrations",
      "uid": "00000000-0000-0000-0000-000000000000",
      "resourceVersion": "1293",
      "creationTimestamp": "2026-07-03T00:17:07Z",
      "labels": {
        "dw-harn-patched": "1"
      }
    },
    "spec": {
      "resource": {
        "group": "",
        "resource": "events"
      }
    },
    "status": {}
  },
  "requestReceivedTimestamp": "2026-07-03T00:17:11.493652Z",
  "stageTimestamp": "2026-07-03T00:17:11.495985Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
  }
}

References #

Sample log: detection.wiki first-party kind capture

any verb on storageversionmigrations (synthetic aggregation)

Resource: storageversionmigrations

Description

Synthetic aggregation for rules that filter the storageversionmigrations resource with no specific verb. Not a distinct audit record; hosts rule listings that key on objectRef.resource alone.