We can get information on running and recently-completed maintenance scripts (who ran what scripts when) by inspecting the job in Kubernetes. After seven days, the jobs are cleaned up. (Or sooner, if manually deleted.)

We should be able to look back further than that, and see (brainstorming):

• start time and completion time
• username label
• script label
• comment annotation
• argv from the MW container

We might already have this somewhere in Logstash, but I couldn't find it either in Kubernetes Events (neither the Job's SuccessfulCreate nor Completed event has all the necessary metadata) or Kubernetes Audit Log.

(This is distinct from T376776: tucking this data away in Logstash won't help bring it to oncallers' attention.)