As the Eventing OIDC feature track describes, cluster administrators and developers should be able to see the following metrics for a particular resource:

• Number of unauthenticated requests (these requests will get a 401 status code)
• Number of requests with an invalid token (these requests will get a 401 status code)

In addition, event senders (Triggers, Subscriptions, Sources) should record the following metrics:

• Whether or not the event was delivered with an identity
• How often an identity was fetched (vs used from a cache) and any errors fetching tokens