Executing: sudo cat /var/lib/rancher/audit/audit.log | jq -r '.user.username + " " + .verb + " " + .objectRef.resource' | sort | uniq -c | sort -nr On v1.32.3 and .2 and one would see thousands of list nodes on that p2p label. We have audit logging enabled and set to: Level: Metadata —-