Kubernetes audit-log telemetry sources
The Kubernetes API server records every API operation in the audit log. Each operation is identified by the resource type (objectRef.resource, e.g. pods, secrets), the audit verb (verb, e.g. create, list, delete), and an optional subresource (objectRef.subresource, e.g. exec, token). Search the Kubernetes rules.References