This message was deleted.

you may be able to use audit records https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/

This would give me information about the k8s users, but not the Rancher users. “I think” that multiple rancher users appear as a single k8s user.

I asked about this internally and they said the username in the Kubernetes audit logs is the username of the Rancher user that generated the kubeconfig. So it should work