Note: if you are running CloudGraph locally you can view the interactive, automatically generated documentation in either GraphQL Playground or Altair by clicking the docs button on the right-hand side of the screen. After reading the below information we highly suggest you use one of these tools to test your queries as they will autocomplete fields for you and let you know if your queries are valid before you even submit them.
You can currently query the following attributes and connections on a k8s Namespace:
type k8sNamespace {
id: String!
context: String!
apiVersion: String
kind: String
metadata: {
id: String
annotations: {
id: String!
key: String
value: String
}
clusterName: String
creationTimestamp: String
deletionGracePeriodSeconds: Int
deletionTimestamp: String
finalizers: [String]
generateName: String
generation: Int
labels: {
id: String!
key: String
value: String
}
ownerReferences: {
id: String!
apiVersion: String
blockOwnerDeletion: Boolean
controller: Boolean
kind: String
name: String
}
name: String
namespace: String
resourceVersion: String
selfLink: String
}
spec: {
finalizers: [String]
}
status: {
phase: String
conditions: {
id: String!
lastHeartbeatTime: String
lastTransitionTime: String
message: String
reason: String
status: String
type: String
}
}
networkPolicies: {
id: String!
}
nodes: {
id: String!
}
pods: {
id: String!
}
deployments: {
id: String!
}
ingresses: {
id: String!
}
secrets: {
id: String!
}
services: {
id: String!
}
serviceAccounts: {
id: String!
}
storageClasses: {
id: String!
}
persistentVolumes: {
id: String!
}
persistentVolumeClaims: {
id: String!
}
roles: {
id: String!
}
jobs: {
id: String!
}
cronJobs: {
id: String!
}
}
Get data for a single Namespace that you know the id for:
query {
getk8sNamespace(id: "12345") {
id
}
}
Get data for all of the namespaces in a certain k8s Context:
query {
queryk8sNamespace(filter: { context: { eq: "my-context-name" } }) {
id
}
}
Get data for all of the namespaces NOT in a certain k8s Context:
query {
queryk8sNamespace(filter: { not: { context: { eq: "my-context-name" } } }) {
id
}
}
Get data for all of the Namespaces that have Pods:
query {
queryk8sNamespace(filter: { has: pods }) {
id
}
}
Use multiple filter selectors, (i.e. has, and, not, or) to get data for all of the Namespaces that have Pods AND Services OR that do not have Jobs. Note that you can use has, and, not, or completely independently of each other:
query {
queryk8sNamespace(
filter: {
has: pods
and: { has: services }
or: { not: { has: jobs } }
}
) {
id
}
}
You may also filter using a regex when filtering on a string field like, context if you want to look for a value that matches say, some-value (case insensitive):
query {
queryk8sNamespace(
filter: { context: { regexp: "/.*some-value*./i" } }
) {
id
}
}
You can order the results you get back either asc or desc depending on your preference:
query {
queryk8sNamespace(order: { desc: apiVersion }) {
apiVersion
}
}
Only select and return the first two Namespaces that are found:
query {
queryk8sNamespace(first: 2, order: { desc: apiVersion }) {
apiVersion
}
}
Only select and return the first two Namespaces that are found, but offset by one so Namespaces two & three are returned:
query {
queryk8sNamespace(first: 2, order: { desc: apiVersion }, offset: 1) {
apiVersion
}
}
Count the number of Namespaces across all scanned K8s contexts:
query {
aggregatek8sNamespace {
count
}
}
Count the number of Namespaces in a single context. Note that you can apply all of the same filters that are listed above to aggregate queries:
query {
aggregatek8sNamespace(filter: { context: { eq: "my-context-name" } }) {
count
}
}
Putting it all together; get all data for all Namespaces across all k8s contexts in a single query. For the purposes of this example we will only get direct children of the Namespace but if you want to it's easy to go from say, namespace -> pods -> namespace ...etc:
query {
queryk8sNamespace {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
finalizers
}
status {
phase
conditions {
id
lastHeartbeatTime
lastTransitionTime
message
reason
status
type
}
}
networkPolicies {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
egress {
id
ports {
id
endPort
port
protocol
}
to {
id
ipBlock {
cidr
except
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
podSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
}
}
ingress {
id
ports {
id
endPort
port
protocol
}
from {
id
ipBlock {
cidr
except
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
podSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
}
}
podSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
policyTypes
}
}
nodes {
id
context
apiVersion
kind
hostName
externalIp
internalIp
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
providerID
unschedulable
configSource {
configMap {
id
kubeletConfigKey
name
namespace
resourceVersion
}
}
taints {
id
effect
key
timeAdded
value
}
externalID
podCIDR
podCIDRs
}
status {
addresses {
id
address
type
}
daemonEndpoints {
kubeletEndpoint {
port
}
}
conditions {
id
lastHeartbeatTime
lastTransitionTime
message
reason
status
type
}
config {
active {
configMap {
id
kubeletConfigKey
name
namespace
resourceVersion
}
}
error
assigned {
configMap {
id
kubeletConfigKey
name
namespace
resourceVersion
}
}
lastKnownGood {
configMap {
id
kubeletConfigKey
name
namespace
resourceVersion
}
}
}
images {
id
names
sizeBytes
}
nodeInfo {
architecture
bootID
containerRuntimeVersion
kernelVersion
kubeProxyVersion
kubeletVersion
machineID
operatingSystem
osImage
systemUUID
}
phase
volumesAttached {
id
devicePath
name
}
volumesInUse
}
}
pods {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
activeDeadlineSeconds
affinity {
nodeAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
nodeSelectorTerms {
id
matchExpressions {
id
key
operator
values
}
matchFields {
id
key
operator
values
}
}
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAntiAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
}
automountServiceAccountToken
dnsPolicy
enableServiceLinks
hostIpc
hostNetwork
hostPid
hostname
nodeName
preemptionPolicy
priority
priorityClassName
restartPolicy
runtimeClassName
schedulerName
serviceAccount
serviceAccountName
setHostnameAsFqdn
shareProcessNamespace
subdomain
terminationGracePeriodSeconds
containers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
ephemeralContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
initContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
imagePullSecrets {
id
name
}
nodeSelector {
id
key
value
}
overhead {
id
key
value
}
readinessGates {
id
conditionType
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
dnsConfig {
nameservers
searches
options {
id
name
value
}
}
hostAliases {
id
ip
hostNames
}
tolerations {
id
effect
key
operator
tolerationSeconds
value
}
topologySpreadConstraints {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
maxSkew
topologyKey
whenUnsatisfiable
}
volumes {
id
name
awsElasticBlockStore {
fsType
partition
readOnly
volumeId
}
azureDisk {
cachingMode
diskName
diskUri
fsType
kind
readOnly
}
azureFile {
readOnly
secretName
shareName
}
cephfs {
monitors
path
readOnly
secretFile
user
secretRef {
name
}
}
cinder {
fsType
readOnly
secretRef {
name
}
volumeId
}
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
csi {
driver
fsType
readOnly
volumeHandle
controllerExpandSecretRef {
name
}
controllerPublishSecretRef {
name
}
volumeAttributes {
id
key
value
}
}
downwardApi {
defaultMode
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
emptyDir {
medium
sizeLimit
}
ephemeral {
volumeClaimTemplate {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
accessModes
dataSource {
apiGroup
kind
name
}
dataSourceRef {
apiGroup
kind
name
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
storageClassName
volumeMode
volumeName
}
}
}
flexVolume {
driver
readOnly
fsType
secretRef {
name
}
options {
id
key
value
}
}
flocker {
datasetName
datasetUuid
}
fc {
fsType
lun
readOnly
targetWWNs
wwids
}
gcePersistentDisk {
fsType
partition
pdName
readOnly
}
gitRepo {
directory
repository
revision
}
glusterfs {
endpoints
path
readOnly
}
hostPath {
path
type
}
iscsi {
chapAuthDiscovery
chapAuthSession
fsType
initiatorName
iqn
iscsiInterface
lun
portals
readOnly
secretRef {
name
}
targetPortal
}
nfs {
path
readOnly
server
}
persistentVolumeClaim {
claimName
readOnly
}
photonPersistentDisk {
fsType
pdId
}
portworxVolume {
fsType
readOnly
volumeId
}
projected {
defaultMode
sources {
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
downwardApi {
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
secret {
defaultMode
items {
id
key
mode
path
}
name
optional
}
serviceAccountToken {
audience
expirationSeconds
path
}
}
}
quobyte {
group
readOnly
registry
tenant
user
volume
}
rbd {
fsType
image
keyring
monitors
pool
readOnly
secretRef {
name
}
user
}
scaleIo {
fsType
gateway
protectionDomain
readOnly
secretRef {
name
}
sslEnabled
storageMode
storagePool
system
volumeName
}
secret {
defaultMode
optional
secretName
items {
id
key
mode
path
}
}
storageos {
fsType
readOnly
secretRef {
name
}
volumeName
volumeNamespace
}
vsphereVolume {
fsType
storagePolicyId
storagePolicyName
volumePath
}
}
}
status {
conditions {
id
lastProbeTime
lastTransitionTime
message
reason
status
type
}
containerStatuses {
id
containerId
imageId
name
ready
restartCount
started
state {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
lastState {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
}
ephemeralContainerStatuses {
id
containerId
imageId
name
ready
restartCount
started
state {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
lastState {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
}
initContainerStatuses {
id
containerId
imageId
name
ready
restartCount
started
state {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
lastState {
waiting {
message
reason
}
running {
startedAt
}
terminated {
containerId
exitCode
finishedAt
message
reason
signal
startedAt
}
}
}
phase
message
hostIp
podIp
podIps {
id
ip
}
nominatedNodeName
qosClass
reason
startTime
}
}
deployments {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
minReadySeconds
paused
progressDeadlineSeconds
replicas
revisionHistoryLimit
strategy {
type
rollingUpdate {
maxSurge
maxUnavailable
}
}
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
template {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
activeDeadlineSeconds
affinity {
nodeAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
nodeSelectorTerms {
id
matchExpressions {
id
key
operator
values
}
matchFields {
id
key
operator
values
}
}
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAntiAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
}
automountServiceAccountToken
dnsPolicy
enableServiceLinks
hostIpc
hostNetwork
hostPid
hostname
nodeName
preemptionPolicy
priority
priorityClassName
restartPolicy
runtimeClassName
schedulerName
serviceAccount
serviceAccountName
setHostnameAsFqdn
shareProcessNamespace
subdomain
terminationGracePeriodSeconds
containers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
ephemeralContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
initContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
imagePullSecrets {
id
name
}
nodeSelector {
id
key
value
}
overhead {
id
key
value
}
readinessGates {
id
conditionType
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
dnsConfig {
nameservers
searches
options {
id
name
value
}
}
hostAliases {
id
ip
hostNames
}
tolerations {
id
effect
key
operator
tolerationSeconds
value
}
topologySpreadConstraints {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
maxSkew
topologyKey
whenUnsatisfiable
}
volumes {
id
name
awsElasticBlockStore {
fsType
partition
readOnly
volumeId
}
azureDisk {
cachingMode
diskName
diskUri
fsType
kind
readOnly
}
azureFile {
readOnly
secretName
shareName
}
cephfs {
monitors
path
readOnly
secretFile
user
secretRef {
name
}
}
cinder {
fsType
readOnly
secretRef {
name
}
volumeId
}
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
csi {
driver
fsType
readOnly
volumeHandle
controllerExpandSecretRef {
name
}
controllerPublishSecretRef {
name
}
volumeAttributes {
id
key
value
}
}
downwardApi {
defaultMode
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
emptyDir {
medium
sizeLimit
}
ephemeral {
volumeClaimTemplate {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
accessModes
dataSource {
apiGroup
kind
name
}
dataSourceRef {
apiGroup
kind
name
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
storageClassName
volumeMode
volumeName
}
}
}
flexVolume {
driver
readOnly
fsType
secretRef {
name
}
options {
id
key
value
}
}
flocker {
datasetName
datasetUuid
}
fc {
fsType
lun
readOnly
targetWWNs
wwids
}
gcePersistentDisk {
fsType
partition
pdName
readOnly
}
gitRepo {
directory
repository
revision
}
glusterfs {
endpoints
path
readOnly
}
hostPath {
path
type
}
iscsi {
chapAuthDiscovery
chapAuthSession
fsType
initiatorName
iqn
iscsiInterface
lun
portals
readOnly
secretRef {
name
}
targetPortal
}
nfs {
path
readOnly
server
}
persistentVolumeClaim {
claimName
readOnly
}
photonPersistentDisk {
fsType
pdId
}
portworxVolume {
fsType
readOnly
volumeId
}
projected {
defaultMode
sources {
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
downwardApi {
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
secret {
defaultMode
items {
id
key
mode
path
}
name
optional
}
serviceAccountToken {
audience
expirationSeconds
path
}
}
}
quobyte {
group
readOnly
registry
tenant
user
volume
}
rbd {
fsType
image
keyring
monitors
pool
readOnly
secretRef {
name
}
user
}
scaleIo {
fsType
gateway
protectionDomain
readOnly
secretRef {
name
}
sslEnabled
storageMode
storagePool
system
volumeName
}
secret {
defaultMode
optional
secretName
items {
id
key
mode
path
}
}
storageos {
fsType
readOnly
secretRef {
name
}
volumeName
volumeNamespace
}
vsphereVolume {
fsType
storagePolicyId
storagePolicyName
volumePath
}
}
}
}
}
status {
availableReplicas
collisionCount
conditions {
id
lastTransitionTime
lastUpdateTime
message
reason
status
type
}
observedGeneration
readyReplicas
replicas
unavailableReplicas
updatedReplicas
}
}
ingresses {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
defaultBackend {
resource {
apiGroup
kind
name
}
service {
name
port {
name
number
}
}
}
ingressClassName
rules {
id
host
http {
paths {
id
path
pathType
backend {
resource {
apiGroup
kind
name
}
service {
name
port {
name
number
}
}
}
}
}
}
tls {
id
hosts
secretName
}
}
status {
loadBalancer {
ingress {
id
hostname
ip
ports {
id
error
port
protocol
}
}
}
}
}
secrets {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
data {
id
key
value
}
immutable
stringData {
id
key
value
}
type
}
services {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
allocateLoadBalancerNodePorts
clusterIp
clusterIps
externalIps
externalName
externalTrafficPolicy
healthCheckNodePort
internalTrafficPolicy
ipFamilies
ipFamilyPolicy
loadBalancerClass
loadBalancerIp
loadBalancerSourceRanges
ports {
id
appProtocol
name
nodePort
port
protocol
targetPort
}
publishNotReadyAddresses
selector {
id
key
value
}
sessionAffinity
sessionAffinityConfig {
clientIp {
timeoutSeconds
}
}
type
}
status {
conditions {
id
lastTransitionTime
observedGeneration
message
reason
status
type
}
loadBalancer {
ingress {
id
hostname
ip
ports {
id
error
port
protocol
}
}
}
}
}
serviceAccounts {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
automountServiceAccountToken
imagePullSecrets {
id
name
}
secrets {
id
apiVersion
fieldPath
name
kind
namespace
resourceVersion
}
}
storageClasses {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
allowVolumeExpansion
allowedTopologies {
id
matchLabelExpressions {
id
key
values
}
}
mountOptions
provisioner
parameters {
id
key
value
}
reclaimPolicy
volumeBindingMode
}
persistentVolumes {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
accessModes
awsElasticBlockStore {
fsType
partition
readOnly
volumeId
}
azureDisk {
cachingMode
diskName
diskUri
fsType
kind
readOnly
}
azureFile {
readOnly
secretName
shareName
}
capacity {
id
key
value
}
cephfs {
monitors
path
readOnly
secretFile
user
secretRef {
name
}
}
cinder {
fsType
readOnly
secretRef {
name
}
volumeId
}
claimRef {
id
apiVersion
fieldPath
kind
name
namespace
resourceVersion
}
csi {
driver
fsType
readOnly
volumeHandle
controllerExpandSecretRef {
name
}
controllerPublishSecretRef {
name
}
volumeAttributes {
id
key
value
}
}
flexVolume {
driver
readOnly
fsType
secretRef {
name
}
options {
id
key
value
}
}
flocker {
datasetName
datasetUuid
}
fc {
fsType
lun
readOnly
targetWWNs
wwids
}
gcePersistentDisk {
fsType
partition
pdName
readOnly
}
glusterfs {
endpoints
path
readOnly
}
hostPath {
path
type
}
iscsi {
chapAuthDiscovery
chapAuthSession
fsType
initiatorName
iqn
iscsiInterface
lun
portals
readOnly
secretRef {
name
}
targetPortal
}
local {
fsType
path
}
nfs {
path
readOnly
server
}
mountOptions
nodeAffinity {
required {
nodeSelectorTerms {
id
matchExpressions {
id
key
operator
values
}
matchFields {
id
key
operator
values
}
}
}
}
persistentVolumeReclaimPolicy
photonPersistentDisk {
fsType
pdId
}
portworxVolume {
fsType
readOnly
volumeId
}
quobyte {
group
readOnly
registry
tenant
user
volume
}
rbd {
fsType
image
keyring
monitors
pool
readOnly
secretRef {
name
}
user
}
scaleIo {
fsType
gateway
protectionDomain
readOnly
secretRef {
name
}
sslEnabled
storageMode
storagePool
system
volumeName
}
storageClassName
storageos {
fsType
readOnly
secretRef {
name
}
volumeName
volumeNamespace
}
volumeMode
vsphereVolume {
fsType
storagePolicyId
storagePolicyName
volumePath
}
}
status {
phase
reason
message
}
}
persistentVolumeClaims {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
accessModes
dataSource {
apiGroup
kind
name
}
dataSourceRef {
apiGroup
kind
name
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
storageClassName
volumeMode
volumeName
}
status {
accessModes
capacity {
id
key
value
}
conditions {
id
lastTransitionTime
lastProbeTime
message
reason
status
type
}
phase
}
}
roles {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
rules {
id
apiGroups
nonResourceUrls
resources
resourceNames
verbs
}
}
jobs {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
activeDeadlineSeconds
backoffLimit
completionMode
completions
manualSelector
parallelism
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
suspend
template {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
activeDeadlineSeconds
affinity {
nodeAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
nodeSelectorTerms {
id
matchExpressions {
id
key
operator
values
}
matchFields {
id
key
operator
values
}
}
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
podAntiAffinity {
requiredDuringSchedulingIgnoredDuringExecution {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
preferredDuringSchedulingIgnoredDuringExecution {
id
weight
preference {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
podAffinityTerm {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaceSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
namespaces
topologyKey
}
}
}
}
automountServiceAccountToken
dnsPolicy
enableServiceLinks
hostIpc
hostNetwork
hostPid
hostname
nodeName
preemptionPolicy
priority
priorityClassName
restartPolicy
runtimeClassName
schedulerName
serviceAccount
serviceAccountName
setHostnameAsFqdn
shareProcessNamespace
subdomain
terminationGracePeriodSeconds
containers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
ephemeralContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
initContainers {
id
args
command
env {
id
name
value
valueFrom {
configMapKeyRef {
key
name
optional
}
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
secretKeyRef {
key
name
optional
}
}
}
envFrom {
id
prefix
configMapRef {
key
name
optional
}
secretRef {
key
name
optional
}
}
image
imagePullPolicy
lifecycle {
postStart {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
preStop {
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
}
livenessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
name
ports {
id
containerPort
hostIp
hostPort
name
protocol
}
readinessProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
startupProbe {
failureThreshold
initialDelaySeconds
periodSeconds
successThreshold
terminationGracePeriodSeconds
timeoutSeconds
httpGet {
httpHeaders {
id
name
value
}
host
path
scheme
port
}
exec {
command
}
tcpSocket {
host
port
}
}
stdin
stdinOnce
terminationMessagePath
terminationMessagePolicy
tty
volumeDevices {
id
name
devicePath
}
volumeMounts {
id
mountPath
mountPropagation
name
readOnly
subPath
subPathExpr
}
workingDir
}
imagePullSecrets {
id
name
}
nodeSelector {
id
key
value
}
overhead {
id
key
value
}
readinessGates {
id
conditionType
}
securityContext {
allowPrivilegeEscalation
capabilities {
add
drop
}
privileged
procMount
sysctls {
id
name
value
}
fsGroup
fsGroupChangePolicy
readOnlyRootFilesystem
runAsGroup
runAsNonRoot
runAsUser
supplementalGroups
seLinuxOptions {
level
role
type
user
}
seccompProfile {
localhostProfile
type
}
windowsOptions {
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
}
}
dnsConfig {
nameservers
searches
options {
id
name
value
}
}
hostAliases {
id
ip
hostNames
}
tolerations {
id
effect
key
operator
tolerationSeconds
value
}
topologySpreadConstraints {
id
labelSelector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
maxSkew
topologyKey
whenUnsatisfiable
}
volumes {
id
name
awsElasticBlockStore {
fsType
partition
readOnly
volumeId
}
azureDisk {
cachingMode
diskName
diskUri
fsType
kind
readOnly
}
azureFile {
readOnly
secretName
shareName
}
cephfs {
monitors
path
readOnly
secretFile
user
secretRef {
name
}
}
cinder {
fsType
readOnly
secretRef {
name
}
volumeId
}
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
csi {
driver
fsType
readOnly
volumeHandle
controllerExpandSecretRef {
name
}
controllerPublishSecretRef {
name
}
volumeAttributes {
id
key
value
}
}
downwardApi {
defaultMode
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
emptyDir {
medium
sizeLimit
}
ephemeral {
volumeClaimTemplate {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
accessModes
dataSource {
apiGroup
kind
name
}
dataSourceRef {
apiGroup
kind
name
}
resources {
limits {
id
key
value
}
requests {
id
key
value
}
}
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
storageClassName
volumeMode
volumeName
}
}
}
flexVolume {
driver
readOnly
fsType
secretRef {
name
}
options {
id
key
value
}
}
flocker {
datasetName
datasetUuid
}
fc {
fsType
lun
readOnly
targetWWNs
wwids
}
gcePersistentDisk {
fsType
partition
pdName
readOnly
}
gitRepo {
directory
repository
revision
}
glusterfs {
endpoints
path
readOnly
}
hostPath {
path
type
}
iscsi {
chapAuthDiscovery
chapAuthSession
fsType
initiatorName
iqn
iscsiInterface
lun
portals
readOnly
secretRef {
name
}
targetPortal
}
nfs {
path
readOnly
server
}
persistentVolumeClaim {
claimName
readOnly
}
photonPersistentDisk {
fsType
pdId
}
portworxVolume {
fsType
readOnly
volumeId
}
projected {
defaultMode
sources {
configMap {
defaultMode
items {
id
key
mode
path
}
name
optional
}
downwardApi {
items {
id
mode
path
fieldRef {
apiVersion
fieldPath
}
resourceFieldRef {
containerName
divisor
resource
}
}
}
secret {
defaultMode
items {
id
key
mode
path
}
name
optional
}
serviceAccountToken {
audience
expirationSeconds
path
}
}
}
quobyte {
group
readOnly
registry
tenant
user
volume
}
rbd {
fsType
image
keyring
monitors
pool
readOnly
secretRef {
name
}
user
}
scaleIo {
fsType
gateway
protectionDomain
readOnly
secretRef {
name
}
sslEnabled
storageMode
storagePool
system
volumeName
}
secret {
defaultMode
optional
secretName
items {
id
key
mode
path
}
}
storageos {
fsType
readOnly
secretRef {
name
}
volumeName
volumeNamespace
}
vsphereVolume {
fsType
storagePolicyId
storagePolicyName
volumePath
}
}
}
}
ttlSecondsAfterFinished
}
status {
active
completedIndexes
completionTime
conditions {
id
lastTransitionTime
lastProbeTime
message
reason
status
type
}
failed
startTime
succeeded
uncountedTerminatedPods {
failed
succeeded
}
}
}
cronJobs {
id
context
apiVersion
kind
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
concurrencyPolicy
failedJobsHistoryLimit
jobTemplate {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
spec {
activeDeadlineSeconds
backoffLimit
completionMode
completions
manualSelector
parallelism
selector {
matchExpressions {
id
key
operator
values
}
matchLabels {
id
key
value
}
}
suspend
template {
metadata {
id
annotations {
id
key
value
}
clusterName
creationTimestamp
deletionGracePeriodSeconds
deletionTimestamp
finalizers
generateName
generation
labels {
id
key
value
}
ownerReferences {
id
apiVersion
blockOwnerDeletion
controller
kind
name
}
name
namespace
resourceVersion
selfLink
}
}
ttlSecondsAfterFinished
}
}
schedule
startingDeadlineSeconds
successfulJobsHistoryLimit
suspend
}
status {
active {
id
apiVersion
fieldPath
kind
name
namespace
resourceVersion
}
lastScheduleTime
lastSuccessfulTime
}
}
}
}