website logo
HomeGithubSlack
⌘K
Overview
Quick Start
Supported Services
Running CloudGraph in EKS
Compliance
Rules Engine
AWS
Querying AWS Data
AWS Policy Packs
Billing Data
Services
Azure
Querying Azure Data
Azure Policy Packs
Services
GCP
Querying GCP Data
GCP Policy Packs
Services
K8s
Querying Kubernetes Data
Services
Docs powered by archbee 

Namespace

15min

Note: if you are running CloudGraph locally you can view the interactive, automatically generated documentation in either GraphQL Playground or Altair by clicking the docs button on the right-hand side of the screen. After reading the below information we highly suggest you use one of these tools to test your queries as they will autocomplete fields for you and let you know if your queries are valid before you even submit them.

Overview

You can currently query the following attributes and connections on a k8s Namespace:

GraphQL
|
type k8sNamespace {
  id: String!
  context: String!
  apiVersion: String
  kind: String
  metadata: {
    id: String
    annotations: {
      id: String!
      key: String
      value: String
    }
    clusterName: String
    creationTimestamp: String
    deletionGracePeriodSeconds: Int
    deletionTimestamp: String
    finalizers: [String]
    generateName: String
    generation: Int
    labels: {
      id: String!
      key: String
      value: String
    }
    ownerReferences: {
      id: String!
      apiVersion: String
      blockOwnerDeletion: Boolean
      controller: Boolean
      kind: String
      name: String
    }
    name: String
    namespace: String
    resourceVersion: String
    selfLink: String
  }
  spec: {
    finalizers: [String]
  }
  status: {
    phase: String
    conditions: {
      id: String!
      lastHeartbeatTime: String
      lastTransitionTime: String
      message: String
      reason: String
      status: String
      type: String
    }
  }
  networkPolicies: {
      id: String!
      # any networkPolicy properties
  }
  nodes: {
      id: String!
      # any node properties
  }
  pods: {
      id: String!
      # any pod properties
  }
  deployments: {
      id: String!
      # any deployment properties
  }
  ingresses: {
      id: String!
      # any ingress properties
  }
  secrets: {
      id: String!
      # any secret properties
  }
  services: {
      id: String!
      # any service properties
  }
  serviceAccounts: {
      id: String!
      # any serviceAccount properties
  }
  storageClasses: {
      id: String!
      # any storageClass properties
  }
  persistentVolumes: {
      id: String!
      # any persistentVolume properties
  }
  persistentVolumeClaims: {
      id: String!
      # any persistentVolumeCalim properties
  }
  roles: {
      id: String!
      # any role properties
  }
  jobs: {
      id: String!
      # any job properties
  }
  cronJobs: {
      id: String!
      # any cronJob properties
  }
}


Filtering

Get data for a single Namespace that you know the id for:

GraphQL
|
query {
  getk8sNamespace(id: "12345") {
    id
    # Other fields and connections here...
  }
}


Get data for all of the namespaces in a certain k8s Context:

GraphQL
|
query {
  queryk8sNamespace(filter: { context: { eq: "my-context-name" } }) {
    id
    # Other fields and connections here...
  }
}


Get data for all of the namespaces NOT in a certain k8s Context:

GraphQL
|
query {
  queryk8sNamespace(filter: { not: { context: { eq: "my-context-name" } } }) {
    id
    # Other fields and connections here...
  }
}




Advanced Filtering

Get data for all of the Namespaces that have Pods:

GraphQL
|
query {
  queryk8sNamespace(filter: { has: pods }) {
    id
    # Other fields and connections here...
  }
}

# Note that in addition to "pod" you can filter
# Using "has" based on any of the following attributes:

# apiVersion
# kind
# networkPolicies
# nodes
# deployments
# ingresses
# secrets
# services
# serviceAccounts
# storageClasses
# persistentVolumes
# persistentVolumeClaims
# roles
# jobs
# cronJobs


Use multiple filter selectors, (i.e. has, and, not, or) to get data for all of the Namespaces that have Pods AND Services OR that do not have Jobs. Note that you can use has, and, not, or completely independently of each other:

GraphQL
|
query {
  queryk8sNamespace(
    filter: {
      has: pods
      and: { has: services }
      or: { not: { has: jobs } }
    }
  ) {
    id
    # Other fields and connections here...
  }
}


You may also filter using a regex when filtering on a string field like, context if you want to look for a value that matches say, some-value (case insensitive):

GraphQL
|
query {
  queryk8sNamespace(
    filter: { context: { regexp: "/.*some-value*./i" } }
  ) {
    id
    # Other fields and connections here...
  }
}


Ordering

You can order the results you get back either asc or desc depending on your preference:

GraphQL
|
query {
  queryk8sNamespace(order: { desc: apiVersion }) {
    apiVersion
    # Other fields and connections here...
  }
}

# Note that in addition to "apiVersion" you can filter
# Using "asc" or "desc" based on any of the following attributes:

# id
# kind
# context


Only select and return the first two Namespaces that are found:

GraphQL
|
query {
  queryk8sNamespace(first: 2, order: { desc: apiVersion }) {
    apiVersion
    # Other fields and connections here...
  }
}


Only select and return the first two Namespaces that are found, but offset by one so Namespaces two & three are returned:

GraphQL
|
query {
  queryk8sNamespace(first: 2, order: { desc: apiVersion }, offset: 1) {
    apiVersion
    # Other fields and connections here...
  }
}


Aggregation

Count the number of Namespaces across all scanned K8s contexts:

GraphQL
|
query {
  aggregatek8sNamespace {
    count
    # Other fields and connections here...
  }
}

# Note that in addition to "count" you can request the
# Following min and max values based on attributes of your Namespaces:

# idMin
# idMax
# contextMin
# contextMax
# kindMin
# kindMax
# apiVersionMin
# apiVersionMax


Count the number of Namespaces in a single context. Note that you can apply all of the same filters that are listed above to aggregate queries:

GraphQL
|
query {
  aggregatek8sNamespace(filter: { context: { eq: "my-context-name" } }) {
    count
    # Other fields and connections here...
  }
}


Kitchen Sink

Putting it all together; get all data for all Namespaces across all k8s contexts in a single query. For the purposes of this example we will only get direct children of the Namespace but if you want to it's easy to go from say, namespace -> pods -> namespace ...etc:

GraphQL
|
query {
  queryk8sNamespace {
    id
    context
    apiVersion
    kind
    metadata {
      id
      annotations {
        id
        key
        value
      }
      clusterName
      creationTimestamp
      deletionGracePeriodSeconds
      deletionTimestamp
      finalizers
      generateName
      generation
      labels {
        id
        key
        value
      }
      ownerReferences {
        id
        apiVersion
        blockOwnerDeletion
        controller
        kind
        name
      }
      name
      namespace
      resourceVersion
      selfLink
    }
    spec {
      finalizers
    }
    status {
      phase
      conditions {
        id
        lastHeartbeatTime
        lastTransitionTime
        message
        reason
        status
        type
      }
    }
    networkPolicies {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        egress {
          id
          ports {
            id
            endPort
            port
            protocol
          }
          to {
            id
            ipBlock {
              cidr
              except
            }
            namespaceSelector {
              matchExpressions {
                id
                key
                operator
                values
              }
              matchLabels {
                id
                key
                value
              }
            }
            podSelector {
              matchExpressions {
                id
                key
                operator
                values
              }
              matchLabels {
                id
                key
                value
              }
            }
          }
        }
        ingress {
          id
          ports {
            id
            endPort
            port
            protocol
          }
          from {
            id
            ipBlock {
              cidr
              except
            }
            namespaceSelector {
              matchExpressions {
                id
                key
                operator
                values
              }
              matchLabels {
                id
                key
                value
              }
            }
            podSelector {
              matchExpressions {
                id
                key
                operator
                values
              }
              matchLabels {
                id
                key
                value
              }
            }
          }
        }
        podSelector {
          matchExpressions {
            id
            key
            operator
            values
          }
          matchLabels {
            id
            key
            value
          }
        }
        policyTypes
      }
    }
    nodes {
      id
      context
      apiVersion
      kind
      hostName
      externalIp
      internalIp
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        providerID
        unschedulable
        configSource {
          configMap {
            id
            kubeletConfigKey
            name
            namespace
            resourceVersion
          }
        }
        taints {
          id
          effect
          key
          timeAdded
          value
        }
        externalID
        podCIDR
        podCIDRs
      }
      status {
        addresses {
          id
          address
          type
        }
        daemonEndpoints {
          kubeletEndpoint {
            port
          }
        }
        conditions {
          id
          lastHeartbeatTime
          lastTransitionTime
          message
          reason
          status
          type
        }
        config {
          active {
            configMap {
              id
              kubeletConfigKey
              name
              namespace
              resourceVersion
            }
          }
          error
          assigned {
            configMap {
              id
              kubeletConfigKey
              name
              namespace
              resourceVersion
            }
          }
          lastKnownGood {
            configMap {
              id
              kubeletConfigKey
              name
              namespace
              resourceVersion
            }
          }
        }
        images {
          id
          names
          sizeBytes
        }
        nodeInfo {
          architecture
          bootID
          containerRuntimeVersion
          kernelVersion
          kubeProxyVersion
          kubeletVersion
          machineID
          operatingSystem
          osImage
          systemUUID
        }
        phase
        volumesAttached {
          id
          devicePath
          name
        }
        volumesInUse
      }
    }
    pods {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        activeDeadlineSeconds
        affinity {
          nodeAffinity {
            requiredDuringSchedulingIgnoredDuringExecution {
              nodeSelectorTerms {
                id
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchFields {
                  id
                  key
                  operator
                  values
                }
              }
            }
            preferredDuringSchedulingIgnoredDuringExecution {
              id
              weight
              preference {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
              podAffinityTerm {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
            }
          }
          podAffinity {
            requiredDuringSchedulingIgnoredDuringExecution {
              id
              labelSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              namespaceSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              namespaces
              topologyKey
            }
            preferredDuringSchedulingIgnoredDuringExecution {
              id
              weight
              preference {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
              podAffinityTerm {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
            }
          }
          podAntiAffinity {
            requiredDuringSchedulingIgnoredDuringExecution {
              id
              labelSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              namespaceSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              namespaces
              topologyKey
            }
            preferredDuringSchedulingIgnoredDuringExecution {
              id
              weight
              preference {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
              podAffinityTerm {
                id
                labelSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaceSelector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                namespaces
                topologyKey
              }
            }
          }
        }
        automountServiceAccountToken
        dnsPolicy
        enableServiceLinks
        hostIpc
        hostNetwork
        hostPid
        hostname
        nodeName
        preemptionPolicy
        priority
        priorityClassName
        restartPolicy
        runtimeClassName
        schedulerName
        serviceAccount
        serviceAccountName
        setHostnameAsFqdn
        shareProcessNamespace
        subdomain
        terminationGracePeriodSeconds
        containers {
          id
          args
          command
          env {
            id
            name
            value
            valueFrom {
              configMapKeyRef {
                key
                name
                optional
              }
              fieldRef {
                apiVersion
                fieldPath
              }
              resourceFieldRef {
                containerName
                divisor
                resource
              }
              secretKeyRef {
                key
                name
                optional
              }
            }
          }
          envFrom {
            id 
            prefix
            configMapRef {
              key
              name
              optional
            }
            secretRef {
              key
              name
              optional
            }
          }
          image
          imagePullPolicy
          lifecycle {
            postStart {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
            preStop {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
          }
          livenessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          name
          ports {
            id
            containerPort
            hostIp
            hostPort
            name
            protocol
          }
          readinessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          resources {
            limits {
              id
              key
              value
            }
            requests {
              id
              key
              value
            }
          }
          securityContext {
            allowPrivilegeEscalation
            capabilities {
              add
              drop
            }
            privileged
            procMount
            sysctls {
              id 
              name 
              value
            }
            fsGroup
            fsGroupChangePolicy
            readOnlyRootFilesystem
            runAsGroup
            runAsNonRoot
            runAsUser
            supplementalGroups
            seLinuxOptions {
              level
              role
              type
              user
            }
            seccompProfile {
              localhostProfile
              type
            }
            windowsOptions {
              gmsaCredentialSpec
              gmsaCredentialSpecName
              hostProcess
              runAsUserName
            }
          }
          startupProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          stdin
          stdinOnce
          terminationMessagePath
          terminationMessagePolicy
          tty
          volumeDevices {
            id
            name
            devicePath
          }
          volumeMounts {
            id
            mountPath
            mountPropagation
            name
            readOnly
            subPath
            subPathExpr
          }
          workingDir
        }
        ephemeralContainers {
          id
          args
          command
          env {
            id
            name
            value
            valueFrom {
              configMapKeyRef {
                key
                name
                optional
              }
              fieldRef {
                apiVersion
                fieldPath
              }
              resourceFieldRef {
                containerName
                divisor
                resource
              }
              secretKeyRef {
                key
                name
                optional
              }
            }
          }
          envFrom {
            id 
            prefix
            configMapRef {
              key
              name
              optional
            }
            secretRef {
              key
              name
              optional
            }
          }
          image
          imagePullPolicy
          lifecycle {
            postStart {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
            preStop {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
          }
          livenessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          name
          ports {
            id
            containerPort
            hostIp
            hostPort
            name
            protocol
          }
          readinessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          resources {
            limits {
              id
              key
              value
            }
            requests {
              id
              key
              value
            }
          }
          securityContext {
            allowPrivilegeEscalation
            capabilities {
              add
              drop
            }
            privileged
            procMount
            sysctls {
              id 
              name 
              value
            }
            fsGroup
            fsGroupChangePolicy
            readOnlyRootFilesystem
            runAsGroup
            runAsNonRoot
            runAsUser
            supplementalGroups
            seLinuxOptions {
              level
              role
              type
              user
            }
            seccompProfile {
              localhostProfile
              type
            }
            windowsOptions {
              gmsaCredentialSpec
              gmsaCredentialSpecName
              hostProcess
              runAsUserName
            }
          }
          startupProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          stdin
          stdinOnce
          terminationMessagePath
          terminationMessagePolicy
          tty
          volumeDevices {
            id
            name
            devicePath
          }
          volumeMounts {
            id
            mountPath
            mountPropagation
            name
            readOnly
            subPath
            subPathExpr
          }
          workingDir
        }
        initContainers {
          id
          args
          command
          env {
            id
            name
            value
            valueFrom {
              configMapKeyRef {
                key
                name
                optional
              }
              fieldRef {
                apiVersion
                fieldPath
              }
              resourceFieldRef {
                containerName
                divisor
                resource
              }
              secretKeyRef {
                key
                name
                optional
              }
            }
          }
          envFrom {
            id 
            prefix
            configMapRef {
              key
              name
              optional
            }
            secretRef {
              key
              name
              optional
            }
          }
          image
          imagePullPolicy
          lifecycle {
            postStart {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
            preStop {
              httpGet {
                httpHeaders {
                  id
                  name
                  value
                }
                host
                path
                scheme
                port
              }
              exec {
                command
              }
              tcpSocket {
                host
                port
              }
            }
          }
          livenessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          name
          ports {
            id
            containerPort
            hostIp
            hostPort
            name
            protocol
          }
          readinessProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          resources {
            limits {
              id
              key
              value
            }
            requests {
              id
              key
              value
            }
          }
          securityContext {
            allowPrivilegeEscalation
            capabilities {
              add
              drop
            }
            privileged
            procMount
            sysctls {
              id 
              name 
              value
            }
            fsGroup
            fsGroupChangePolicy
            readOnlyRootFilesystem
            runAsGroup
            runAsNonRoot
            runAsUser
            supplementalGroups
            seLinuxOptions {
              level
              role
              type
              user
            }
            seccompProfile {
              localhostProfile
              type
            }
            windowsOptions {
              gmsaCredentialSpec
              gmsaCredentialSpecName
              hostProcess
              runAsUserName
            }
          }
          startupProbe {
            failureThreshold
            initialDelaySeconds
            periodSeconds
            successThreshold
            terminationGracePeriodSeconds
            timeoutSeconds
            httpGet {
              httpHeaders {
                id
                name
                value
              }
              host
              path
              scheme
              port
            }
            exec {
              command
            }
            tcpSocket {
              host
              port
            }
          }
          stdin
          stdinOnce
          terminationMessagePath
          terminationMessagePolicy
          tty
          volumeDevices {
            id
            name
            devicePath
          }
          volumeMounts {
            id
            mountPath
            mountPropagation
            name
            readOnly
            subPath
            subPathExpr
          }
          workingDir
        }
        imagePullSecrets {
          id
          name
        }
        nodeSelector {
          id
          key
          value
        }
        overhead {
          id
          key
          value
        }
        readinessGates {
          id
          conditionType
        }
        securityContext {
          allowPrivilegeEscalation
          capabilities {
            add
            drop
          }
          privileged
          procMount
          sysctls {
            id 
            name 
            value
          }
          fsGroup
          fsGroupChangePolicy
          readOnlyRootFilesystem
          runAsGroup
          runAsNonRoot
          runAsUser
          supplementalGroups
          seLinuxOptions {
            level
            role
            type
            user
          }
          seccompProfile {
            localhostProfile
            type
          }
          windowsOptions {
            gmsaCredentialSpec
            gmsaCredentialSpecName
            hostProcess
            runAsUserName
          }
        }
        dnsConfig {
          nameservers
          searches
          options {
            id
            name
            value
          }
        }
        hostAliases {
          id
          ip
          hostNames
        }
        tolerations {
          id
          effect
          key
          operator
          tolerationSeconds
          value
        }
        topologySpreadConstraints {
          id
          labelSelector {
            matchExpressions {
              id
              key
              operator
              values
            }
            matchLabels {
              id
              key
              value
            }
          }
          maxSkew
          topologyKey
          whenUnsatisfiable
        }
        volumes {
          id
          name
          awsElasticBlockStore {
            fsType
            partition
            readOnly
            volumeId
          }
          azureDisk {
            cachingMode
            diskName
            diskUri
            fsType
            kind
            readOnly
          }
          azureFile {
            readOnly
            secretName
            shareName
          }
          cephfs {
            monitors
            path
            readOnly
            secretFile
            user
            secretRef {
              name
            }
          }
          cinder {
            fsType
            readOnly
            secretRef {
              name
            }
            volumeId
          }
          configMap {
            defaultMode
            items {
              id
              key
              mode
              path
            }
            name
            optional
          }
          csi {
            driver
            fsType
            readOnly
            volumeHandle
            controllerExpandSecretRef {
              name
            }
            controllerPublishSecretRef {
              name
            }
            volumeAttributes {
              id
              key
              value
            }
          }
          downwardApi {
            defaultMode
            items {
              id
              mode
              path
              fieldRef {
                apiVersion
                fieldPath
              }
              resourceFieldRef {
                containerName
                divisor
                resource
              }
            }
          }
          emptyDir {
            medium
            sizeLimit
          }
          ephemeral {
            volumeClaimTemplate {
              metadata {
                id
                annotations {
                  id
                  key
                  value
                }
                clusterName
                creationTimestamp
                deletionGracePeriodSeconds
                deletionTimestamp
                finalizers
                generateName
                generation
                labels {
                  id
                  key
                  value
                }
                ownerReferences {
                  id
                  apiVersion
                  blockOwnerDeletion
                  controller
                  kind
                  name
                }
                name
                namespace
                resourceVersion
                selfLink
              }
              spec {
                accessModes
                dataSource {
                  apiGroup
                  kind
                  name
                }
                dataSourceRef {
                  apiGroup
                  kind
                  name
                }
                resources {
                  limits {
                    id
                    key
                    value
                  }
                  requests {
                    id
                    key
                    value
                  }
                }
                selector {
                  matchExpressions {
                    id
                    key
                    operator
                    values
                  }
                  matchLabels {
                    id
                    key
                    value
                  }
                }
                storageClassName
                volumeMode
                volumeName
              }
            }
          }
          flexVolume {
            driver
            readOnly
            fsType
            secretRef {
              name
            }
            options {
              id
              key
              value
            }
          }
          flocker {
            datasetName
            datasetUuid
          }
          fc {
            fsType
            lun
            readOnly
            targetWWNs
            wwids
          }
          gcePersistentDisk {
            fsType
            partition
            pdName
            readOnly
          }
          gitRepo {
            directory
            repository
            revision
          }
          glusterfs {
            endpoints
            path
            readOnly
          }
          hostPath {
            path
            type
          }
          iscsi {
            chapAuthDiscovery
            chapAuthSession
            fsType
            initiatorName
            iqn
            iscsiInterface
            lun
            portals
            readOnly
            secretRef {
              name
            }
            targetPortal
          }
          nfs {
            path
            readOnly
            server
          }
          persistentVolumeClaim {
            claimName
            readOnly
          }
          photonPersistentDisk {
            fsType
            pdId
          }
          portworxVolume {
            fsType
            readOnly
            volumeId
          }
          projected {
            defaultMode
            sources {
              configMap {
                defaultMode
                items {
                  id
                  key
                  mode
                  path
                }
                name
                optional
              }
              downwardApi {
                items {
                  id
                  mode
                  path
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                }
              }
              secret {
                defaultMode
                items {
                  id
                  key
                  mode
                  path
                }
                name
                optional
              }
              serviceAccountToken {
                audience
                expirationSeconds
                path
              }
            }
          }
          quobyte {
            group
            readOnly
            registry
            tenant
            user
            volume
          }
          rbd {
            fsType
            image
            keyring
            monitors
            pool
            readOnly
            secretRef {
              name
            }
            user
          }
          scaleIo {
            fsType
            gateway
            protectionDomain
            readOnly
            secretRef {
              name
            }
            sslEnabled
            storageMode
            storagePool
            system
            volumeName
          }
          secret {
            defaultMode
            optional
            secretName
            items {
              id
              key
              mode
              path
            }
          }
          storageos {
            fsType
            readOnly
            secretRef {
              name
            }
            volumeName
            volumeNamespace
          }
          vsphereVolume {
            fsType
            storagePolicyId
            storagePolicyName
            volumePath
          }
        }
      }
      status {
        conditions {
          id
          lastProbeTime
          lastTransitionTime
          message
          reason
          status
          type
        }
        containerStatuses {
          id
          containerId
          imageId
          name
          ready
          restartCount
          started
          state {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
          lastState {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
        }
        ephemeralContainerStatuses {
          id
          containerId
          imageId
          name
          ready
          restartCount
          started
          state {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
          lastState {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
        }
        initContainerStatuses {
          id
          containerId
          imageId
          name
          ready
          restartCount
          started
          state {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
          lastState {
            waiting {
              message
              reason
            }
            running {
              startedAt
            }
            terminated {
              containerId
              exitCode
              finishedAt
              message
              reason
              signal
              startedAt
            }
          }
        }
        phase
        message
        hostIp
        podIp
        podIps {
          id
          ip
        }
        nominatedNodeName
        qosClass
        reason
        startTime
      }
    }
    deployments {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        minReadySeconds
        paused
        progressDeadlineSeconds
        replicas
        revisionHistoryLimit
        strategy {
          type
          rollingUpdate {
            maxSurge
            maxUnavailable
          }
        }
        selector {
          matchExpressions {
            id
            key
            operator
            values
          }
          matchLabels {
            id
            key
            value
          }
        }
        template {
          metadata {
            id
            annotations {
              id
              key
              value
            }
            clusterName
            creationTimestamp
            deletionGracePeriodSeconds
            deletionTimestamp
            finalizers
            generateName
            generation
            labels {
              id
              key
              value
            }
            ownerReferences {
              id
              apiVersion
              blockOwnerDeletion
              controller
              kind
              name
            }
            name
            namespace
            resourceVersion
            selfLink
          }
          spec {
            activeDeadlineSeconds
            affinity {
              nodeAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  nodeSelectorTerms {
                    id
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchFields {
                      id
                      key
                      operator
                      values
                    }
                  }
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
              podAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  id
                  labelSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaceSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaces
                  topologyKey
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
              podAntiAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  id
                  labelSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaceSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaces
                  topologyKey
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
            }
            automountServiceAccountToken
            dnsPolicy
            enableServiceLinks
            hostIpc
            hostNetwork
            hostPid
            hostname
            nodeName
            preemptionPolicy
            priority
            priorityClassName
            restartPolicy
            runtimeClassName
            schedulerName
            serviceAccount
            serviceAccountName
            setHostnameAsFqdn
            shareProcessNamespace
            subdomain
            terminationGracePeriodSeconds
            containers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            ephemeralContainers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            initContainers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            imagePullSecrets {
              id
              name
            }
            nodeSelector {
              id
              key
              value
            }
            overhead {
              id
              key
              value
            }
            readinessGates {
              id
              conditionType
            }
            securityContext {
              allowPrivilegeEscalation
              capabilities {
                add
                drop
              }
              privileged
              procMount
              sysctls {
                id 
                name 
                value
              }
              fsGroup
              fsGroupChangePolicy
              readOnlyRootFilesystem
              runAsGroup
              runAsNonRoot
              runAsUser
              supplementalGroups
              seLinuxOptions {
                level
                role
                type
                user
              }
              seccompProfile {
                localhostProfile
                type
              }
              windowsOptions {
                gmsaCredentialSpec
                gmsaCredentialSpecName
                hostProcess
                runAsUserName
              }
            }
            dnsConfig {
              nameservers
              searches
              options {
                id
                name
                value
              }
            }
            hostAliases {
              id
              ip
              hostNames
            }
            tolerations {
              id
              effect
              key
              operator
              tolerationSeconds
              value
            }
            topologySpreadConstraints {
              id
              labelSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              maxSkew
              topologyKey
              whenUnsatisfiable
            }
            volumes {
              id
              name
              awsElasticBlockStore {
                fsType
                partition
                readOnly
                volumeId
              }
              azureDisk {
                cachingMode
                diskName
                diskUri
                fsType
                kind
                readOnly
              }
              azureFile {
                readOnly
                secretName
                shareName
              }
              cephfs {
                monitors
                path
                readOnly
                secretFile
                user
                secretRef {
                  name
                }
              }
              cinder {
                fsType
                readOnly
                secretRef {
                  name
                }
                volumeId
              }
              configMap {
                defaultMode
                items {
                  id
                  key
                  mode
                  path
                }
                name
                optional
              }
              csi {
                driver
                fsType
                readOnly
                volumeHandle
                controllerExpandSecretRef {
                  name
                }
                controllerPublishSecretRef {
                  name
                }
                volumeAttributes {
                  id
                  key
                  value
                }
              }
              downwardApi {
                defaultMode
                items {
                  id
                  mode
                  path
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                }
              }
              emptyDir {
                medium
                sizeLimit
              }
              ephemeral {
                volumeClaimTemplate {
                  metadata {
                    id
                    annotations {
                      id
                      key
                      value
                    }
                    clusterName
                    creationTimestamp
                    deletionGracePeriodSeconds
                    deletionTimestamp
                    finalizers
                    generateName
                    generation
                    labels {
                      id
                      key
                      value
                    }
                    ownerReferences {
                      id
                      apiVersion
                      blockOwnerDeletion
                      controller
                      kind
                      name
                    }
                    name
                    namespace
                    resourceVersion
                    selfLink
                  }
                  spec {
                    accessModes
                    dataSource {
                      apiGroup
                      kind
                      name
                    }
                    dataSourceRef {
                      apiGroup
                      kind
                      name
                    }
                    resources {
                      limits {
                        id
                        key
                        value
                      }
                      requests {
                        id
                        key
                        value
                      }
                    }
                    selector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    storageClassName
                    volumeMode
                    volumeName
                  }
                }
              }
              flexVolume {
                driver
                readOnly
                fsType
                secretRef {
                  name
                }
                options {
                  id
                  key
                  value
                }
              }
              flocker {
                datasetName
                datasetUuid
              }
              fc {
                fsType
                lun
                readOnly
                targetWWNs
                wwids
              }
              gcePersistentDisk {
                fsType
                partition
                pdName
                readOnly
              }
              gitRepo {
                directory
                repository
                revision
              }
              glusterfs {
                endpoints
                path
                readOnly
              }
              hostPath {
                path
                type
              }
              iscsi {
                chapAuthDiscovery
                chapAuthSession
                fsType
                initiatorName
                iqn
                iscsiInterface
                lun
                portals
                readOnly
                secretRef {
                  name
                }
                targetPortal
              }
              nfs {
                path
                readOnly
                server
              }
              persistentVolumeClaim {
                claimName
                readOnly
              }
              photonPersistentDisk {
                fsType
                pdId
              }
              portworxVolume {
                fsType
                readOnly
                volumeId
              }
              projected {
                defaultMode
                sources {
                  configMap {
                    defaultMode
                    items {
                      id
                      key
                      mode
                      path
                    }
                    name
                    optional
                  }
                  downwardApi {
                    items {
                      id
                      mode
                      path
                      fieldRef {
                        apiVersion
                        fieldPath
                      }
                      resourceFieldRef {
                        containerName
                        divisor
                        resource
                      }
                    }
                  }
                  secret {
                    defaultMode
                    items {
                      id
                      key
                      mode
                      path
                    }
                    name
                    optional
                  }
                  serviceAccountToken {
                    audience
                    expirationSeconds
                    path
                  }
                }
              }
              quobyte {
                group
                readOnly
                registry
                tenant
                user
                volume
              }
              rbd {
                fsType
                image
                keyring
                monitors
                pool
                readOnly
                secretRef {
                  name
                }
                user
              }
              scaleIo {
                fsType
                gateway
                protectionDomain
                readOnly
                secretRef {
                  name
                }
                sslEnabled
                storageMode
                storagePool
                system
                volumeName
              }
              secret {
                defaultMode
                optional
                secretName
                items {
                  id
                  key
                  mode
                  path
                }
              }
              storageos {
                fsType
                readOnly
                secretRef {
                  name
                }
                volumeName
                volumeNamespace
              }
              vsphereVolume {
                fsType
                storagePolicyId
                storagePolicyName
                volumePath
              }
            }
          }
        }
      }
      status {
        availableReplicas
        collisionCount
        conditions {
          id
          lastTransitionTime
          lastUpdateTime
          message
          reason
          status
          type
        }
        observedGeneration
        readyReplicas
        replicas
        unavailableReplicas
        updatedReplicas
      }
    }
    ingresses {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        defaultBackend {
          resource {
            apiGroup
            kind
            name
          }
          service {
            name
            port {
              name
              number
            }
          }
        }
        ingressClassName
        rules {
          id
          host
          http {
            paths {
              id
              path
              pathType
              backend {
                resource {
                  apiGroup
                  kind
                  name
                }
                service {
                  name
                  port {
                    name
                    number
                  }
                }
              }
            }
          }
        }
        tls {
          id
          hosts
          secretName
        }
      }
      status {
        loadBalancer {
          ingress {
            id
            hostname
            ip
            ports {
              id
              error
              port
              protocol
            }
          }
        }
      }
    }
    secrets {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      data {
        id
        key
        value
      }
      immutable
      stringData {
        id
        key
        value
      }
      type
    }
    services {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        allocateLoadBalancerNodePorts
        clusterIp
        clusterIps
        externalIps
        externalName
        externalTrafficPolicy
        healthCheckNodePort
        internalTrafficPolicy
        ipFamilies
        ipFamilyPolicy
        loadBalancerClass
        loadBalancerIp
        loadBalancerSourceRanges
        ports {
          id
          appProtocol
          name
          nodePort
          port
          protocol
          targetPort
        }
        publishNotReadyAddresses
        selector {
          id
          key
          value
        }
        sessionAffinity
        sessionAffinityConfig {
          clientIp {
            timeoutSeconds
          }
        }
        type
      }
      status {
        conditions {
          id
          lastTransitionTime
          observedGeneration
          message
          reason
          status
          type
        }
        loadBalancer {
          ingress {
            id
            hostname
            ip
            ports {
              id
              error
              port
              protocol
            }
          }
        }
      }
    }
    serviceAccounts {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      automountServiceAccountToken
      imagePullSecrets {
        id
        name
      }
      secrets {
        id
        apiVersion
        fieldPath
        name
        kind
        namespace
        resourceVersion
      }
    }
    storageClasses {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      allowVolumeExpansion
      allowedTopologies {
        id
        matchLabelExpressions {
          id
          key
          values
        }
      }
      mountOptions
      provisioner
      parameters {
        id
        key
        value
      }
      reclaimPolicy
      volumeBindingMode
    }
    persistentVolumes {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        accessModes
        awsElasticBlockStore {
          fsType
          partition
          readOnly
          volumeId
        }
        azureDisk {
          cachingMode
          diskName
          diskUri
          fsType
          kind
          readOnly
        }
        azureFile {
          readOnly
          secretName
          shareName
        }
        capacity {
          id
          key
          value
        }
        cephfs {
          monitors
          path
          readOnly
          secretFile
          user
          secretRef {
            name
          }
        }
        cinder {
          fsType
          readOnly
          secretRef {
            name
          }
          volumeId
        }
        claimRef {
          id
          apiVersion
          fieldPath
          kind
          name
          namespace
          resourceVersion
        }
        csi {
          driver
          fsType
          readOnly
          volumeHandle
          controllerExpandSecretRef {
            name
          }
          controllerPublishSecretRef {
            name
          }
          volumeAttributes {
            id
            key
            value
          }
        }
        flexVolume {
          driver
          readOnly
          fsType
          secretRef {
            name
          }
          options {
            id
            key
            value
          }
        }
        flocker {
          datasetName
          datasetUuid
        }
        fc {
          fsType
          lun
          readOnly
          targetWWNs
          wwids
        }
        gcePersistentDisk {
          fsType
          partition
          pdName
          readOnly
        }
        glusterfs {
          endpoints
          path
          readOnly
        }
        hostPath {
          path
          type
        }
        iscsi {
          chapAuthDiscovery
          chapAuthSession
          fsType
          initiatorName
          iqn
          iscsiInterface
          lun
          portals
          readOnly
          secretRef {
            name
          }
          targetPortal
        }
        local {
          fsType
          path
        }
        nfs {
          path
          readOnly
          server
        }
        mountOptions
        nodeAffinity {
          required {
            nodeSelectorTerms {
              id
              matchExpressions {
                id
                key
                operator
                values
              }
              matchFields {
                id
                key
                operator
                values
              }
            }
          }
        }
        persistentVolumeReclaimPolicy
        photonPersistentDisk {
          fsType
          pdId
        }
        portworxVolume {
          fsType
          readOnly
          volumeId
        }
        quobyte {
          group
          readOnly
          registry
          tenant
          user
          volume
        }
        rbd {
          fsType
          image
          keyring
          monitors
          pool
          readOnly
          secretRef {
            name
          }
          user
        }
        scaleIo {
          fsType
          gateway
          protectionDomain
          readOnly
          secretRef {
            name
          }
          sslEnabled
          storageMode
          storagePool
          system
          volumeName
        }
        storageClassName
        storageos {
          fsType
          readOnly
          secretRef {
            name
          }
          volumeName
          volumeNamespace
        }
        volumeMode
        vsphereVolume {
          fsType
          storagePolicyId
          storagePolicyName
          volumePath
        }
      }
      status {
        phase
        reason
        message
      }
    }
    persistentVolumeClaims {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        accessModes
        dataSource {
          apiGroup
          kind
          name
        }
        dataSourceRef {
          apiGroup
          kind
          name
        }
        resources {
          limits {
            id
            key
            value
          }
          requests {
            id
            key
            value
          }
        }
        selector {
          matchExpressions {
            id
            key
            operator
            values
          }
          matchLabels {
            id
            key
            value
          }
        }
        storageClassName
        volumeMode
        volumeName
      }
      status {
        accessModes
        capacity {
          id
          key
          value
        }
        conditions {
          id
          lastTransitionTime
          lastProbeTime
          message
          reason
          status
          type
        }
        phase
      }
    }
    roles {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      rules {
        id
        apiGroups
        nonResourceUrls
        resources
        resourceNames
        verbs
      }
    }
    jobs {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        activeDeadlineSeconds
        backoffLimit
        completionMode
        completions
        manualSelector
        parallelism
        selector {
          matchExpressions {
            id
            key
            operator
            values
          }
          matchLabels {
            id
            key
            value
          }
        }
        suspend
        template {
          metadata {
            id
            annotations {
              id
              key
              value
            }
            clusterName
            creationTimestamp
            deletionGracePeriodSeconds
            deletionTimestamp
            finalizers
            generateName
            generation
            labels {
              id
              key
              value
            }
            ownerReferences {
              id
              apiVersion
              blockOwnerDeletion
              controller
              kind
              name
            }
            name
            namespace
            resourceVersion
            selfLink
          }
          spec {
            activeDeadlineSeconds
            affinity {
              nodeAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  nodeSelectorTerms {
                    id
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchFields {
                      id
                      key
                      operator
                      values
                    }
                  }
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
              podAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  id
                  labelSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaceSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaces
                  topologyKey
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
              podAntiAffinity {
                requiredDuringSchedulingIgnoredDuringExecution {
                  id
                  labelSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaceSelector {
                    matchExpressions {
                      id
                      key
                      operator
                      values
                    }
                    matchLabels {
                      id
                      key
                      value
                    }
                  }
                  namespaces
                  topologyKey
                }
                preferredDuringSchedulingIgnoredDuringExecution {
                  id
                  weight
                  preference {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                  podAffinityTerm {
                    id
                    labelSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaceSelector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    namespaces
                    topologyKey
                  }
                }
              }
            }
            automountServiceAccountToken
            dnsPolicy
            enableServiceLinks
            hostIpc
            hostNetwork
            hostPid
            hostname
            nodeName
            preemptionPolicy
            priority
            priorityClassName
            restartPolicy
            runtimeClassName
            schedulerName
            serviceAccount
            serviceAccountName
            setHostnameAsFqdn
            shareProcessNamespace
            subdomain
            terminationGracePeriodSeconds
            containers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            ephemeralContainers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            initContainers {
              id
              args
              command
              env {
                id
                name
                value
                valueFrom {
                  configMapKeyRef {
                    key
                    name
                    optional
                  }
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                  secretKeyRef {
                    key
                    name
                    optional
                  }
                }
              }
              envFrom {
                id 
                prefix
                configMapRef {
                  key
                  name
                  optional
                }
                secretRef {
                  key
                  name
                  optional
                }
              }
              image
              imagePullPolicy
              lifecycle {
                postStart {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
                preStop {
                  httpGet {
                    httpHeaders {
                      id
                      name
                      value
                    }
                    host
                    path
                    scheme
                    port
                  }
                  exec {
                    command
                  }
                  tcpSocket {
                    host
                    port
                  }
                }
              }
              livenessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              name
              ports {
                id
                containerPort
                hostIp
                hostPort
                name
                protocol
              }
              readinessProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              resources {
                limits {
                  id
                  key
                  value
                }
                requests {
                  id
                  key
                  value
                }
              }
              securityContext {
                allowPrivilegeEscalation
                capabilities {
                  add
                  drop
                }
                privileged
                procMount
                sysctls {
                  id 
                  name 
                  value
                }
                fsGroup
                fsGroupChangePolicy
                readOnlyRootFilesystem
                runAsGroup
                runAsNonRoot
                runAsUser
                supplementalGroups
                seLinuxOptions {
                  level
                  role
                  type
                  user
                }
                seccompProfile {
                  localhostProfile
                  type
                }
                windowsOptions {
                  gmsaCredentialSpec
                  gmsaCredentialSpecName
                  hostProcess
                  runAsUserName
                }
              }
              startupProbe {
                failureThreshold
                initialDelaySeconds
                periodSeconds
                successThreshold
                terminationGracePeriodSeconds
                timeoutSeconds
                httpGet {
                  httpHeaders {
                    id
                    name
                    value
                  }
                  host
                  path
                  scheme
                  port
                }
                exec {
                  command
                }
                tcpSocket {
                  host
                  port
                }
              }
              stdin
              stdinOnce
              terminationMessagePath
              terminationMessagePolicy
              tty
              volumeDevices {
                id
                name
                devicePath
              }
              volumeMounts {
                id
                mountPath
                mountPropagation
                name
                readOnly
                subPath
                subPathExpr
              }
              workingDir
            }
            imagePullSecrets {
              id
              name
            }
            nodeSelector {
              id
              key
              value
            }
            overhead {
              id
              key
              value
            }
            readinessGates {
              id
              conditionType
            }
            securityContext {
              allowPrivilegeEscalation
              capabilities {
                add
                drop
              }
              privileged
              procMount
              sysctls {
                id 
                name 
                value
              }
              fsGroup
              fsGroupChangePolicy
              readOnlyRootFilesystem
              runAsGroup
              runAsNonRoot
              runAsUser
              supplementalGroups
              seLinuxOptions {
                level
                role
                type
                user
              }
              seccompProfile {
                localhostProfile
                type
              }
              windowsOptions {
                gmsaCredentialSpec
                gmsaCredentialSpecName
                hostProcess
                runAsUserName
              }
            }
            dnsConfig {
              nameservers
              searches
              options {
                id
                name
                value
              }
            }
            hostAliases {
              id
              ip
              hostNames
            }
            tolerations {
              id
              effect
              key
              operator
              tolerationSeconds
              value
            }
            topologySpreadConstraints {
              id
              labelSelector {
                matchExpressions {
                  id
                  key
                  operator
                  values
                }
                matchLabels {
                  id
                  key
                  value
                }
              }
              maxSkew
              topologyKey
              whenUnsatisfiable
            }
            volumes {
              id
              name
              awsElasticBlockStore {
                fsType
                partition
                readOnly
                volumeId
              }
              azureDisk {
                cachingMode
                diskName
                diskUri
                fsType
                kind
                readOnly
              }
              azureFile {
                readOnly
                secretName
                shareName
              }
              cephfs {
                monitors
                path
                readOnly
                secretFile
                user
                secretRef {
                  name
                }
              }
              cinder {
                fsType
                readOnly
                secretRef {
                  name
                }
                volumeId
              }
              configMap {
                defaultMode
                items {
                  id
                  key
                  mode
                  path
                }
                name
                optional
              }
              csi {
                driver
                fsType
                readOnly
                volumeHandle
                controllerExpandSecretRef {
                  name
                }
                controllerPublishSecretRef {
                  name
                }
                volumeAttributes {
                  id
                  key
                  value
                }
              }
              downwardApi {
                defaultMode
                items {
                  id
                  mode
                  path
                  fieldRef {
                    apiVersion
                    fieldPath
                  }
                  resourceFieldRef {
                    containerName
                    divisor
                    resource
                  }
                }
              }
              emptyDir {
                medium
                sizeLimit
              }
              ephemeral {
                volumeClaimTemplate {
                  metadata {
                    id
                    annotations {
                      id
                      key
                      value
                    }
                    clusterName
                    creationTimestamp
                    deletionGracePeriodSeconds
                    deletionTimestamp
                    finalizers
                    generateName
                    generation
                    labels {
                      id
                      key
                      value
                    }
                    ownerReferences {
                      id
                      apiVersion
                      blockOwnerDeletion
                      controller
                      kind
                      name
                    }
                    name
                    namespace
                    resourceVersion
                    selfLink
                  }
                  spec {
                    accessModes
                    dataSource {
                      apiGroup
                      kind
                      name
                    }
                    dataSourceRef {
                      apiGroup
                      kind
                      name
                    }
                    resources {
                      limits {
                        id
                        key
                        value
                      }
                      requests {
                        id
                        key
                        value
                      }
                    }
                    selector {
                      matchExpressions {
                        id
                        key
                        operator
                        values
                      }
                      matchLabels {
                        id
                        key
                        value
                      }
                    }
                    storageClassName
                    volumeMode
                    volumeName
                  }
                }
              }
              flexVolume {
                driver
                readOnly
                fsType
                secretRef {
                  name
                }
                options {
                  id
                  key
                  value
                }
              }
              flocker {
                datasetName
                datasetUuid
              }
              fc {
                fsType
                lun
                readOnly
                targetWWNs
                wwids
              }
              gcePersistentDisk {
                fsType
                partition
                pdName
                readOnly
              }
              gitRepo {
                directory
                repository
                revision
              }
              glusterfs {
                endpoints
                path
                readOnly
              }
              hostPath {
                path
                type
              }
              iscsi {
                chapAuthDiscovery
                chapAuthSession
                fsType
                initiatorName
                iqn
                iscsiInterface
                lun
                portals
                readOnly
                secretRef {
                  name
                }
                targetPortal
              }
              nfs {
                path
                readOnly
                server
              }
              persistentVolumeClaim {
                claimName
                readOnly
              }
              photonPersistentDisk {
                fsType
                pdId
              }
              portworxVolume {
                fsType
                readOnly
                volumeId
              }
              projected {
                defaultMode
                sources {
                  configMap {
                    defaultMode
                    items {
                      id
                      key
                      mode
                      path
                    }
                    name
                    optional
                  }
                  downwardApi {
                    items {
                      id
                      mode
                      path
                      fieldRef {
                        apiVersion
                        fieldPath
                      }
                      resourceFieldRef {
                        containerName
                        divisor
                        resource
                      }
                    }
                  }
                  secret {
                    defaultMode
                    items {
                      id
                      key
                      mode
                      path
                    }
                    name
                    optional
                  }
                  serviceAccountToken {
                    audience
                    expirationSeconds
                    path
                  }
                }
              }
              quobyte {
                group
                readOnly
                registry
                tenant
                user
                volume
              }
              rbd {
                fsType
                image
                keyring
                monitors
                pool
                readOnly
                secretRef {
                  name
                }
                user
              }
              scaleIo {
                fsType
                gateway
                protectionDomain
                readOnly
                secretRef {
                  name
                }
                sslEnabled
                storageMode
                storagePool
                system
                volumeName
              }
              secret {
                defaultMode
                optional
                secretName
                items {
                  id
                  key
                  mode
                  path
                }
              }
              storageos {
                fsType
                readOnly
                secretRef {
                  name
                }
                volumeName
                volumeNamespace
              }
              vsphereVolume {
                fsType
                storagePolicyId
                storagePolicyName
                volumePath
              }
            }
          }
        }
        ttlSecondsAfterFinished
      }
      status {
        active
        completedIndexes
        completionTime
        conditions {
          id
          lastTransitionTime
          lastProbeTime
          message
          reason
          status
          type
        }
        failed
        startTime
        succeeded
        uncountedTerminatedPods {
          failed
          succeeded
        }
      }
    }
    cronJobs {
      id
      context
      apiVersion
      kind
      metadata {
        id
        annotations {
          id
          key
          value
        }
        clusterName
        creationTimestamp
        deletionGracePeriodSeconds
        deletionTimestamp
        finalizers
        generateName
        generation
        labels {
          id
          key
          value
        }
        ownerReferences {
          id
          apiVersion
          blockOwnerDeletion
          controller
          kind
          name
        }
        name
        namespace
        resourceVersion
        selfLink
      }
      spec {
        concurrencyPolicy
        failedJobsHistoryLimit
        jobTemplate {
          metadata {
            id
            annotations {
              id
              key
              value
            }
            clusterName
            creationTimestamp
            deletionGracePeriodSeconds
            deletionTimestamp
            finalizers
            generateName
            generation
            labels {
              id
              key
              value
            }
            ownerReferences {
              id
              apiVersion
              blockOwnerDeletion
              controller
              kind
              name
            }
            name
            namespace
            resourceVersion
            selfLink
          }
          spec {
            activeDeadlineSeconds
            backoffLimit
            completionMode
            completions
            manualSelector
            parallelism
            selector {
              matchExpressions {
                id
                key
                operator
                values
              }
              matchLabels {
                id
                key
                value
              }
            }
            suspend
            template {
              metadata {
                id
                annotations {
                  id
                  key
                  value
                }
                clusterName
                creationTimestamp
                deletionGracePeriodSeconds
                deletionTimestamp
                finalizers
                generateName
                generation
                labels {
                  id
                  key
                  value
                }
                ownerReferences {
                  id
                  apiVersion
                  blockOwnerDeletion
                  controller
                  kind
                  name
                }
                name
                namespace
                resourceVersion
                selfLink
              }
            }
            ttlSecondsAfterFinished
          }
        }
        schedule
        startingDeadlineSeconds
        successfulJobsHistoryLimit
        suspend
      }
      status {
        active {
          id
          apiVersion
          fieldPath
          kind
          name
          namespace
          resourceVersion
        }
        lastScheduleTime
        lastSuccessfulTime
      }
    }
  }
}



References

Dgraph documentation on querying

K8s Namespace documentation

Updated 03 Mar 2023
Did this page help you?
Yes
No
PREVIOUS
Job
NEXT
Network Policy
Docs powered by archbee 
TABLE OF CONTENTS
Overview
Filtering
Advanced Filtering
Ordering
Aggregation
Kitchen Sink
References