A Kubernetes admission controller that automatically tracks resource creation and modification by adding user information labels.

Things to do:

• Add tests
• Add documentation
• Add examples
• Add features:
  • Other labels
  • Think about annotations
  • Metrics

WhoDidThat Controller is a Kubernetes mutating admission webhook that adds audit labels to resources, tracking who created and last modified them. It adds the following labels:

• audit.k8s.io/created-by: The user who created the resource
• audit.k8s.io/last-modified-by: The user who last modified the resource

• Tracks resource creation and modification events
• Adds user information as Kubernetes labels
• Supports all Kubernetes resource types
• Multi-architecture support (AMD64 and ARM64)
• Minimal footprint using distroless container image

• Kubernetes cluster 1.16+
• kubectl configured to access your cluster
• cert-manager (recommended for TLS certificate management)

helm install whodidthat oci://ghcr.io/x0ddf/whodidthat

The following table lists the configurable parameters of the WhoDidThat chart and their default values:

Once installed, the controller automatically adds labels to resources when they are created or modified.

Example resource with added labels:

apiVersion: v1
kind: Pod
metadata:
  name: nginx
  labels:
    audit.k8s.io/created-by: john@example.com
    audit.k8s.io/last-modified-by: jane@example.com
spec:
  containers:
  - name: nginx
    image: nginx:latest

• Go 1.23+
• Docker

Build the binary:

go build -o whodidthat-controller

Build multi-arch container image:

docker buildx build \
    --platform linux/amd64,linux/arm64 \
    --tag ghcr.io/<your-github-username>/whodidthat-controller:latest \
    --push \
    .

go test ./...

Contributions are welcome! Please feel free to submit a Pull Request.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add some amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

This project is licensed under the MIT License - see the LICENSE file for details.