Namespace
Note: if you are running CloudGraph locally you can view the interactive, automatically generated documentation in either GraphQL Playground or Altair by clicking the docs button on the right-hand side of the screen. After reading the below information we highly suggest you use one of these tools to test your queries as they will autocomplete fields for you and let you know if your queries are valid before you even submit them.
You can currently query the following attributes and connections on a k8s Namespace:
type k8sNamespace { id: String! context: String! apiVersion: String kind: String metadata: { id: String annotations: { id: String! key: String value: String } clusterName: String creationTimestamp: String deletionGracePeriodSeconds: Int deletionTimestamp: String finalizers: [String] generateName: String generation: Int labels: { id: String! key: String value: String } ownerReferences: { id: String! apiVersion: String blockOwnerDeletion: Boolean controller: Boolean kind: String name: String } name: String namespace: String resourceVersion: String selfLink: String } spec: { finalizers: [String] } status: { phase: String conditions: { id: String! lastHeartbeatTime: String lastTransitionTime: String message: String reason: String status: String type: String } } networkPolicies: { id: String! # any networkPolicy properties } nodes: { id: String! # any node properties } pods: { id: String! # any pod properties } deployments: { id: String! # any deployment properties } ingresses: { id: String! # any ingress properties } secrets: { id: String! # any secret properties } services: { id: String! # any service properties } serviceAccounts: { id: String! # any serviceAccount properties } storageClasses: { id: String! # any storageClass properties } persistentVolumes: { id: String! # any persistentVolume properties } persistentVolumeClaims: { id: String! # any persistentVolumeCalim properties } roles: { id: String! # any role properties } jobs: { id: String! # any job properties } cronJobs: { id: String! # any cronJob properties } }
Get data for a single Namespace that you know the id for:
query { getk8sNamespace(id: "12345") { id # Other fields and connections here... } }
Get data for all of the namespaces in a certain k8s Context:
query { queryk8sNamespace(filter: { context: { eq: "my-context-name" } }) { id # Other fields and connections here... } }
Get data for all of the namespaces NOT in a certain k8s Context:
query { queryk8sNamespace(filter: { not: { context: { eq: "my-context-name" } } }) { id # Other fields and connections here... } }
Get data for all of the Namespaces that have Pods:
query { queryk8sNamespace(filter: { has: pods }) { id # Other fields and connections here... } } # Note that in addition to "pod" you can filter # Using "has" based on any of the following attributes: # apiVersion # kind # networkPolicies # nodes # deployments # ingresses # secrets # services # serviceAccounts # storageClasses # persistentVolumes # persistentVolumeClaims # roles # jobs # cronJobs
Use multiple filter selectors, (i.e. has, and, not, or) to get data for all of the Namespaces that have Pods AND Services OR that do not have Jobs. Note that you can use has, and, not, or completely independently of each other:
query { queryk8sNamespace( filter: { has: pods and: { has: services } or: { not: { has: jobs } } } ) { id # Other fields and connections here... } }
You may also filter using a regex when filtering on a string field like, context if you want to look for a value that matches say, some-value (case insensitive):
query { queryk8sNamespace( filter: { context: { regexp: "/.*some-value*./i" } } ) { id # Other fields and connections here... } }
You can order the results you get back either asc or desc depending on your preference:
query { queryk8sNamespace(order: { desc: apiVersion }) { apiVersion # Other fields and connections here... } } # Note that in addition to "apiVersion" you can filter # Using "asc" or "desc" based on any of the following attributes: # id # kind # context
Only select and return the first two Namespaces that are found:
query { queryk8sNamespace(first: 2, order: { desc: apiVersion }) { apiVersion # Other fields and connections here... } }
Only select and return the first two Namespaces that are found, but offset by one so Namespaces two & three are returned:
query { queryk8sNamespace(first: 2, order: { desc: apiVersion }, offset: 1) { apiVersion # Other fields and connections here... } }
Count the number of Namespaces across all scanned K8s contexts:
query { aggregatek8sNamespace { count # Other fields and connections here... } } # Note that in addition to "count" you can request the # Following min and max values based on attributes of your Namespaces: # idMin # idMax # contextMin # contextMax # kindMin # kindMax # apiVersionMin # apiVersionMax
Count the number of Namespaces in a single context. Note that you can apply all of the same filters that are listed above to aggregate queries:
query { aggregatek8sNamespace(filter: { context: { eq: "my-context-name" } }) { count # Other fields and connections here... } }
Putting it all together; get all data for all Namespaces across all k8s contexts in a single query. For the purposes of this example we will only get direct children of the Namespace but if you want to it's easy to go from say, namespace -> pods -> namespace ...etc:
query { queryk8sNamespace { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { finalizers } status { phase conditions { id lastHeartbeatTime lastTransitionTime message reason status type } } networkPolicies { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { egress { id ports { id endPort port protocol } to { id ipBlock { cidr except } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } podSelector { matchExpressions { id key operator values } matchLabels { id key value } } } } ingress { id ports { id endPort port protocol } from { id ipBlock { cidr except } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } podSelector { matchExpressions { id key operator values } matchLabels { id key value } } } } podSelector { matchExpressions { id key operator values } matchLabels { id key value } } policyTypes } } nodes { id context apiVersion kind hostName externalIp internalIp metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { providerID unschedulable configSource { configMap { id kubeletConfigKey name namespace resourceVersion } } taints { id effect key timeAdded value } externalID podCIDR podCIDRs } status { addresses { id address type } daemonEndpoints { kubeletEndpoint { port } } conditions { id lastHeartbeatTime lastTransitionTime message reason status type } config { active { configMap { id kubeletConfigKey name namespace resourceVersion } } error assigned { configMap { id kubeletConfigKey name namespace resourceVersion } } lastKnownGood { configMap { id kubeletConfigKey name namespace resourceVersion } } } images { id names sizeBytes } nodeInfo { architecture bootID containerRuntimeVersion kernelVersion kubeProxyVersion kubeletVersion machineID operatingSystem osImage systemUUID } phase volumesAttached { id devicePath name } volumesInUse } } pods { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { activeDeadlineSeconds affinity { nodeAffinity { requiredDuringSchedulingIgnoredDuringExecution { nodeSelectorTerms { id matchExpressions { id key operator values } matchFields { id key operator values } } } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAntiAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } } automountServiceAccountToken dnsPolicy enableServiceLinks hostIpc hostNetwork hostPid hostname nodeName preemptionPolicy priority priorityClassName restartPolicy runtimeClassName schedulerName serviceAccount serviceAccountName setHostnameAsFqdn shareProcessNamespace subdomain terminationGracePeriodSeconds containers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } ephemeralContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } initContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } imagePullSecrets { id name } nodeSelector { id key value } overhead { id key value } readinessGates { id conditionType } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } dnsConfig { nameservers searches options { id name value } } hostAliases { id ip hostNames } tolerations { id effect key operator tolerationSeconds value } topologySpreadConstraints { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } maxSkew topologyKey whenUnsatisfiable } volumes { id name awsElasticBlockStore { fsType partition readOnly volumeId } azureDisk { cachingMode diskName diskUri fsType kind readOnly } azureFile { readOnly secretName shareName } cephfs { monitors path readOnly secretFile user secretRef { name } } cinder { fsType readOnly secretRef { name } volumeId } configMap { defaultMode items { id key mode path } name optional } csi { driver fsType readOnly volumeHandle controllerExpandSecretRef { name } controllerPublishSecretRef { name } volumeAttributes { id key value } } downwardApi { defaultMode items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } emptyDir { medium sizeLimit } ephemeral { volumeClaimTemplate { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { accessModes dataSource { apiGroup kind name } dataSourceRef { apiGroup kind name } resources { limits { id key value } requests { id key value } } selector { matchExpressions { id key operator values } matchLabels { id key value } } storageClassName volumeMode volumeName } } } flexVolume { driver readOnly fsType secretRef { name } options { id key value } } flocker { datasetName datasetUuid } fc { fsType lun readOnly targetWWNs wwids } gcePersistentDisk { fsType partition pdName readOnly } gitRepo { directory repository revision } glusterfs { endpoints path readOnly } hostPath { path type } iscsi { chapAuthDiscovery chapAuthSession fsType initiatorName iqn iscsiInterface lun portals readOnly secretRef { name } targetPortal } nfs { path readOnly server } persistentVolumeClaim { claimName readOnly } photonPersistentDisk { fsType pdId } portworxVolume { fsType readOnly volumeId } projected { defaultMode sources { configMap { defaultMode items { id key mode path } name optional } downwardApi { items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } secret { defaultMode items { id key mode path } name optional } serviceAccountToken { audience expirationSeconds path } } } quobyte { group readOnly registry tenant user volume } rbd { fsType image keyring monitors pool readOnly secretRef { name } user } scaleIo { fsType gateway protectionDomain readOnly secretRef { name } sslEnabled storageMode storagePool system volumeName } secret { defaultMode optional secretName items { id key mode path } } storageos { fsType readOnly secretRef { name } volumeName volumeNamespace } vsphereVolume { fsType storagePolicyId storagePolicyName volumePath } } } status { conditions { id lastProbeTime lastTransitionTime message reason status type } containerStatuses { id containerId imageId name ready restartCount started state { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } lastState { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } } ephemeralContainerStatuses { id containerId imageId name ready restartCount started state { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } lastState { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } } initContainerStatuses { id containerId imageId name ready restartCount started state { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } lastState { waiting { message reason } running { startedAt } terminated { containerId exitCode finishedAt message reason signal startedAt } } } phase message hostIp podIp podIps { id ip } nominatedNodeName qosClass reason startTime } } deployments { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { minReadySeconds paused progressDeadlineSeconds replicas revisionHistoryLimit strategy { type rollingUpdate { maxSurge maxUnavailable } } selector { matchExpressions { id key operator values } matchLabels { id key value } } template { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { activeDeadlineSeconds affinity { nodeAffinity { requiredDuringSchedulingIgnoredDuringExecution { nodeSelectorTerms { id matchExpressions { id key operator values } matchFields { id key operator values } } } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAntiAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } } automountServiceAccountToken dnsPolicy enableServiceLinks hostIpc hostNetwork hostPid hostname nodeName preemptionPolicy priority priorityClassName restartPolicy runtimeClassName schedulerName serviceAccount serviceAccountName setHostnameAsFqdn shareProcessNamespace subdomain terminationGracePeriodSeconds containers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } ephemeralContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } initContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } imagePullSecrets { id name } nodeSelector { id key value } overhead { id key value } readinessGates { id conditionType } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } dnsConfig { nameservers searches options { id name value } } hostAliases { id ip hostNames } tolerations { id effect key operator tolerationSeconds value } topologySpreadConstraints { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } maxSkew topologyKey whenUnsatisfiable } volumes { id name awsElasticBlockStore { fsType partition readOnly volumeId } azureDisk { cachingMode diskName diskUri fsType kind readOnly } azureFile { readOnly secretName shareName } cephfs { monitors path readOnly secretFile user secretRef { name } } cinder { fsType readOnly secretRef { name } volumeId } configMap { defaultMode items { id key mode path } name optional } csi { driver fsType readOnly volumeHandle controllerExpandSecretRef { name } controllerPublishSecretRef { name } volumeAttributes { id key value } } downwardApi { defaultMode items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } emptyDir { medium sizeLimit } ephemeral { volumeClaimTemplate { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { accessModes dataSource { apiGroup kind name } dataSourceRef { apiGroup kind name } resources { limits { id key value } requests { id key value } } selector { matchExpressions { id key operator values } matchLabels { id key value } } storageClassName volumeMode volumeName } } } flexVolume { driver readOnly fsType secretRef { name } options { id key value } } flocker { datasetName datasetUuid } fc { fsType lun readOnly targetWWNs wwids } gcePersistentDisk { fsType partition pdName readOnly } gitRepo { directory repository revision } glusterfs { endpoints path readOnly } hostPath { path type } iscsi { chapAuthDiscovery chapAuthSession fsType initiatorName iqn iscsiInterface lun portals readOnly secretRef { name } targetPortal } nfs { path readOnly server } persistentVolumeClaim { claimName readOnly } photonPersistentDisk { fsType pdId } portworxVolume { fsType readOnly volumeId } projected { defaultMode sources { configMap { defaultMode items { id key mode path } name optional } downwardApi { items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } secret { defaultMode items { id key mode path } name optional } serviceAccountToken { audience expirationSeconds path } } } quobyte { group readOnly registry tenant user volume } rbd { fsType image keyring monitors pool readOnly secretRef { name } user } scaleIo { fsType gateway protectionDomain readOnly secretRef { name } sslEnabled storageMode storagePool system volumeName } secret { defaultMode optional secretName items { id key mode path } } storageos { fsType readOnly secretRef { name } volumeName volumeNamespace } vsphereVolume { fsType storagePolicyId storagePolicyName volumePath } } } } } status { availableReplicas collisionCount conditions { id lastTransitionTime lastUpdateTime message reason status type } observedGeneration readyReplicas replicas unavailableReplicas updatedReplicas } } ingresses { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { defaultBackend { resource { apiGroup kind name } service { name port { name number } } } ingressClassName rules { id host http { paths { id path pathType backend { resource { apiGroup kind name } service { name port { name number } } } } } } tls { id hosts secretName } } status { loadBalancer { ingress { id hostname ip ports { id error port protocol } } } } } secrets { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } data { id key value } immutable stringData { id key value } type } services { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { allocateLoadBalancerNodePorts clusterIp clusterIps externalIps externalName externalTrafficPolicy healthCheckNodePort internalTrafficPolicy ipFamilies ipFamilyPolicy loadBalancerClass loadBalancerIp loadBalancerSourceRanges ports { id appProtocol name nodePort port protocol targetPort } publishNotReadyAddresses selector { id key value } sessionAffinity sessionAffinityConfig { clientIp { timeoutSeconds } } type } status { conditions { id lastTransitionTime observedGeneration message reason status type } loadBalancer { ingress { id hostname ip ports { id error port protocol } } } } } serviceAccounts { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } automountServiceAccountToken imagePullSecrets { id name } secrets { id apiVersion fieldPath name kind namespace resourceVersion } } storageClasses { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } allowVolumeExpansion allowedTopologies { id matchLabelExpressions { id key values } } mountOptions provisioner parameters { id key value } reclaimPolicy volumeBindingMode } persistentVolumes { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { accessModes awsElasticBlockStore { fsType partition readOnly volumeId } azureDisk { cachingMode diskName diskUri fsType kind readOnly } azureFile { readOnly secretName shareName } capacity { id key value } cephfs { monitors path readOnly secretFile user secretRef { name } } cinder { fsType readOnly secretRef { name } volumeId } claimRef { id apiVersion fieldPath kind name namespace resourceVersion } csi { driver fsType readOnly volumeHandle controllerExpandSecretRef { name } controllerPublishSecretRef { name } volumeAttributes { id key value } } flexVolume { driver readOnly fsType secretRef { name } options { id key value } } flocker { datasetName datasetUuid } fc { fsType lun readOnly targetWWNs wwids } gcePersistentDisk { fsType partition pdName readOnly } glusterfs { endpoints path readOnly } hostPath { path type } iscsi { chapAuthDiscovery chapAuthSession fsType initiatorName iqn iscsiInterface lun portals readOnly secretRef { name } targetPortal } local { fsType path } nfs { path readOnly server } mountOptions nodeAffinity { required { nodeSelectorTerms { id matchExpressions { id key operator values } matchFields { id key operator values } } } } persistentVolumeReclaimPolicy photonPersistentDisk { fsType pdId } portworxVolume { fsType readOnly volumeId } quobyte { group readOnly registry tenant user volume } rbd { fsType image keyring monitors pool readOnly secretRef { name } user } scaleIo { fsType gateway protectionDomain readOnly secretRef { name } sslEnabled storageMode storagePool system volumeName } storageClassName storageos { fsType readOnly secretRef { name } volumeName volumeNamespace } volumeMode vsphereVolume { fsType storagePolicyId storagePolicyName volumePath } } status { phase reason message } } persistentVolumeClaims { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { accessModes dataSource { apiGroup kind name } dataSourceRef { apiGroup kind name } resources { limits { id key value } requests { id key value } } selector { matchExpressions { id key operator values } matchLabels { id key value } } storageClassName volumeMode volumeName } status { accessModes capacity { id key value } conditions { id lastTransitionTime lastProbeTime message reason status type } phase } } roles { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } rules { id apiGroups nonResourceUrls resources resourceNames verbs } } jobs { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { activeDeadlineSeconds backoffLimit completionMode completions manualSelector parallelism selector { matchExpressions { id key operator values } matchLabels { id key value } } suspend template { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { activeDeadlineSeconds affinity { nodeAffinity { requiredDuringSchedulingIgnoredDuringExecution { nodeSelectorTerms { id matchExpressions { id key operator values } matchFields { id key operator values } } } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } podAntiAffinity { requiredDuringSchedulingIgnoredDuringExecution { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } preferredDuringSchedulingIgnoredDuringExecution { id weight preference { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } podAffinityTerm { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaceSelector { matchExpressions { id key operator values } matchLabels { id key value } } namespaces topologyKey } } } } automountServiceAccountToken dnsPolicy enableServiceLinks hostIpc hostNetwork hostPid hostname nodeName preemptionPolicy priority priorityClassName restartPolicy runtimeClassName schedulerName serviceAccount serviceAccountName setHostnameAsFqdn shareProcessNamespace subdomain terminationGracePeriodSeconds containers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } ephemeralContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } initContainers { id args command env { id name value valueFrom { configMapKeyRef { key name optional } fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } secretKeyRef { key name optional } } } envFrom { id prefix configMapRef { key name optional } secretRef { key name optional } } image imagePullPolicy lifecycle { postStart { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } preStop { httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } } livenessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } name ports { id containerPort hostIp hostPort name protocol } readinessProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } resources { limits { id key value } requests { id key value } } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } startupProbe { failureThreshold initialDelaySeconds periodSeconds successThreshold terminationGracePeriodSeconds timeoutSeconds httpGet { httpHeaders { id name value } host path scheme port } exec { command } tcpSocket { host port } } stdin stdinOnce terminationMessagePath terminationMessagePolicy tty volumeDevices { id name devicePath } volumeMounts { id mountPath mountPropagation name readOnly subPath subPathExpr } workingDir } imagePullSecrets { id name } nodeSelector { id key value } overhead { id key value } readinessGates { id conditionType } securityContext { allowPrivilegeEscalation capabilities { add drop } privileged procMount sysctls { id name value } fsGroup fsGroupChangePolicy readOnlyRootFilesystem runAsGroup runAsNonRoot runAsUser supplementalGroups seLinuxOptions { level role type user } seccompProfile { localhostProfile type } windowsOptions { gmsaCredentialSpec gmsaCredentialSpecName hostProcess runAsUserName } } dnsConfig { nameservers searches options { id name value } } hostAliases { id ip hostNames } tolerations { id effect key operator tolerationSeconds value } topologySpreadConstraints { id labelSelector { matchExpressions { id key operator values } matchLabels { id key value } } maxSkew topologyKey whenUnsatisfiable } volumes { id name awsElasticBlockStore { fsType partition readOnly volumeId } azureDisk { cachingMode diskName diskUri fsType kind readOnly } azureFile { readOnly secretName shareName } cephfs { monitors path readOnly secretFile user secretRef { name } } cinder { fsType readOnly secretRef { name } volumeId } configMap { defaultMode items { id key mode path } name optional } csi { driver fsType readOnly volumeHandle controllerExpandSecretRef { name } controllerPublishSecretRef { name } volumeAttributes { id key value } } downwardApi { defaultMode items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } emptyDir { medium sizeLimit } ephemeral { volumeClaimTemplate { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { accessModes dataSource { apiGroup kind name } dataSourceRef { apiGroup kind name } resources { limits { id key value } requests { id key value } } selector { matchExpressions { id key operator values } matchLabels { id key value } } storageClassName volumeMode volumeName } } } flexVolume { driver readOnly fsType secretRef { name } options { id key value } } flocker { datasetName datasetUuid } fc { fsType lun readOnly targetWWNs wwids } gcePersistentDisk { fsType partition pdName readOnly } gitRepo { directory repository revision } glusterfs { endpoints path readOnly } hostPath { path type } iscsi { chapAuthDiscovery chapAuthSession fsType initiatorName iqn iscsiInterface lun portals readOnly secretRef { name } targetPortal } nfs { path readOnly server } persistentVolumeClaim { claimName readOnly } photonPersistentDisk { fsType pdId } portworxVolume { fsType readOnly volumeId } projected { defaultMode sources { configMap { defaultMode items { id key mode path } name optional } downwardApi { items { id mode path fieldRef { apiVersion fieldPath } resourceFieldRef { containerName divisor resource } } } secret { defaultMode items { id key mode path } name optional } serviceAccountToken { audience expirationSeconds path } } } quobyte { group readOnly registry tenant user volume } rbd { fsType image keyring monitors pool readOnly secretRef { name } user } scaleIo { fsType gateway protectionDomain readOnly secretRef { name } sslEnabled storageMode storagePool system volumeName } secret { defaultMode optional secretName items { id key mode path } } storageos { fsType readOnly secretRef { name } volumeName volumeNamespace } vsphereVolume { fsType storagePolicyId storagePolicyName volumePath } } } } ttlSecondsAfterFinished } status { active completedIndexes completionTime conditions { id lastTransitionTime lastProbeTime message reason status type } failed startTime succeeded uncountedTerminatedPods { failed succeeded } } } cronJobs { id context apiVersion kind metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { concurrencyPolicy failedJobsHistoryLimit jobTemplate { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } spec { activeDeadlineSeconds backoffLimit completionMode completions manualSelector parallelism selector { matchExpressions { id key operator values } matchLabels { id key value } } suspend template { metadata { id annotations { id key value } clusterName creationTimestamp deletionGracePeriodSeconds deletionTimestamp finalizers generateName generation labels { id key value } ownerReferences { id apiVersion blockOwnerDeletion controller kind name } name namespace resourceVersion selfLink } } ttlSecondsAfterFinished } } schedule startingDeadlineSeconds successfulJobsHistoryLimit suspend } status { active { id apiVersion fieldPath kind name namespace resourceVersion } lastScheduleTime lastSuccessfulTime } } } }