Summarize legacy token audit log events

legacy-token-report.jq

reduce (inputs | select(.annotations|has("authentication.k8s.io/legacy-token"))) as $e ({};
    $e.annotations."authentication.k8s.io/legacy-token" as $sa
    | $e.userAgent as $workload
    | ( $e.requestURI | split("?")[0] | if ($e.verb == "get" or $e.verb == "update") then (split("/")[:-1]|join("/")) else . end) as $path
    | .[$sa][$workload][$path].count +=1
    | .[$sa][$workload][$path].verbs |= ((. + [$e.verb])|unique)
    | .[$sa][$workload][$path].names |= ((. + [$e.objectRef.name // empty])|unique) 
    | .[$sa][$workload][$path].names |= if . | length == 0 then empty else . end  
)