feat: support platform-wide querying

[scotwells]

Adds support for a new --platform-wide query that allows platform operators to query the platform instead of being locked into a project, organization, or user.

$ datumctl activity query --platform-wide                                                                            
TIMESTAMP             VERB     USER                      NAMESPACE     RESOURCE           NAME                                                                      STATUS
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-424e16cbfd4f62b779c2b39e16446c8fe4ce49d424bba5552015e9c3f825518d   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-b7aef9642b25163980d902b995a6962748fb56fcc34245fa81a33b1e94a459e9   200
2026-01-20 17:15:53   get      system:apiserver          milo-system   namespaces         milo-system                                                               200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-13beeb1395ec38c0e571d87d0514178e805328ec3f2228645133e225ff046daf   200
2026-01-20 17:15:53   get      system:apiserver          milo-system   namespaces         milo-system                                                               200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-1916cb6387e11fb96c03660f9ed40b0fa7518754d9f55292f06d69f39e51d57b   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-02ef403ed59cec0d85a40e54fc23428750cf6559439b75ef795ace048ad25a67   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-e717cb5028191200e5ce867486baa4cf9fb7ad409aeeeb28db2eb5113ef24e59   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-988c73ec3d8d86741eadbdf2d927bc24a4396b3a1cfa7e97a5548e26c6897828   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-76280330141e78fdb1799318bc313e4ea84ba16a8c5290586cbc178caa9e4321   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-4997db01cf04953ed8d7d952a7f0f86eba15a22eac47c60ca7bd75c4a8b9b48e   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-05c8bc8f75a6351bc53e01ae3acf84ad200268255b11ab96d6d571d0c493a626   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-d5df4e1c55a5f555e128a7dc176ef2a8b0da71cbf9f798662ff496375f3d5db0   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-c53c08416ee341a2e8ba6e166d6b04e769672f75ada57cabefef62a900686119   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-8a6581f19d46c4c72c61190a0586641a19a3a14668ea1eb12d421c8d48f6cc29   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-780c903c05692316fe7e93c4848c4d081068d30a2c01ca32afe9f96d53b5d047   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-8ab711e8e1d79bacb08a941fefbfd80dcacf251f1cf4a232c06d7d2310960f5b   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-548ba0d9804167864b5ca3262825e770dc04d7a5708643c0794e82c18160a9a5   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-013beed79038541873d6f551d4b205491eaba4c82670edb71597df5efceee790   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-6fb04cc8ff4670b862bef020d0bbe5513b2b4117c87e9d1f64675b47b70dbfc2   200
2026-01-20 17:15:53   get      system:apiserver          milo-system   namespaces         milo-system                                                               200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-9d3d8abdb63d61d2aca7d91cbdf69740247d85e780af950f30002b00f1c7cbd1   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-5877e55146caa9f10b80b917f3cc30d6c9a6422dc70ae65895a592ac0b0da1f1   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-4cdc5a6ce19bc9551408bdd9166b50c8318277725d5c4ad610686e12f454b01c   200
2026-01-20 17:15:53   update   milo-controller-manager   milo-system   allowancebuckets   bucket-2f3cd8717e479c39cfc7c27d349a4ad677f6055812fbca432c318e13d64fc42c   200

More results available. Use --continue-after 'eyJ0IjoiMjAyNi0wMS0yMFQyMzoxNTo1My4yMDA4MTJaIiwiYSI6IjFiNDNkNmI0LTQxYmUtNDNkZC1hZTYyLWU3OWI4NzhlMWY2ZCIsImgiOiJXd1A3WUVYSmtxMHNiQmItS3VheWN3PT0iLCJpIjoiMjAyNi0wMS0yMFQyMzoxNTo1OS43ODI2NzY3NTVaIn0=' to get the next page.
Or use --all-pages to fetch all results automatically.

This also adds support for a new datumctl activity history command which can be used to browse changes to a specific resource over time.

[drewr]

Will give it a try!

[gianarb]

This sounds comfortable for troubleshooting purpose. how does it work internally the user needs to have special permissions? Or does it take under consideration the user membership organization?

[scotwells]

@gianarb the user needs to have special permissions to query resources at the platform-level. This would only be used by platform operators / staff.