# Whizard Auditing

Use when working with WizTelemetry Auditing extension for KubeSphere, including...

- Repository: https://github.com/kubesphere/kubesphere (17074 stars)
- Category: Engineering
- License: see repository
- Last updated: 2026-07-15
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add kubesphere/kubesphere --skill whizard-auditing -g -a claude-code -y`
Codex: `npx skills add kubesphere/kubesphere --skill whizard-auditing -g -a codex -y`
Cursor: `npx skills add kubesphere/kubesphere --skill whizard-auditing -g -a cursor -y`
Gemini CLI: `npx skills add kubesphere/kubesphere --skill whizard-auditing -g -a gemini-cli -y`

## Description

Use when working with WizTelemetry Auditing extension for KubeSphere, including installation, configuration, and audit query API

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# WizTelemetry Auditing

## Overview

WizTelemetry Auditing is an extension component in the KubeSphere Observability Platform for Kubernetes and KubeSphere audit event collection, processing, and storage.

## When to Use

- Installing or configuring the WizTelemetry Auditing extension
- Understanding audit event collection architecture
- Using the audit query API to query audit events

## Components

| Component | Description | Default Enabled |
|-----------|-------------|-----------------|
| kube-auditing | Kubernetes audit event collection and export | true |

## Dependencies

- **WizTelemetry Platform Service** (whizard-telemetry): Required
- **WizTelemetry Data Pipeline** (vector): Required

## Installation

### Prerequisites

**REQUIRED: Complete all steps in order before generating InstallPlan.**

#### Step 1: Get Available Clusters and Confirm Target

**⚠️ CRITICAL: DO NOT proceed until target clusters are determined.**

**Step 1.1: Get available clusters**

```bash
kubectl get clusters -o jsonpath='{.items[*].metadata.name}'
```

**Step 1.2: Determine target clusters**

- If user **explicitly specified** target clusters in the request → Use those clusters directly, proceed to Step 2
- If user **did NOT specify** target clusters → Ask user to confirm which clusters to deploy to, then proceed to Step 2

**Ask user (if not specified):**
```
Available clusters: host, dev
Which clusters do you want to deploy WizTelemetry Auditing to?
```

#### Step 2: Get Latest Version (if not provided by user)

**MUST do this to get the latest version:**

```bash
kubectl get extensionversions -l kubesphere.io/extension-ref=whizard-auditing -o jsonpath='{range .items[*]}{.spec.version}{"\n"}{end}' | sort -V | tail -1
```

This outputs the latest version (e.g., `1.4.0`). Note this down - you'll use it in the InstallPlan.

### Install WizTelemetry Auditing

**⚠️ IMPORTANT: Complete prerequisite steps BEFORE this step.**

The rest: https://github.com/kubesphere/kubesphere/blob/HEAD/skills/whizard-auditing/SKILL.md