Smartscape - Kubernetes

• Reference
• Published Feb 23, 2026

This section documents the set of preconfigured Kubernetes entities. In addition to that, Dynatrace Extensions and other sources may add additional Entities based on Kubernetes objects, which are not described here.

In general each entity represents a single resource in the Kubernetes API. There are two exceptions of this rule: K8S_CLUSTER (which has no representation) and CONTAINER (which is modeled as part of a Pod within the Kubernetes API).

All Kubernetes entity types are prefixed with K8S_*. You can get an overview of all K8S entities with the following DQL query:

smartscapeNodes "K8S_*"

All K8S entities provide the following fields:

All entities living inside a K8S namespace also have the following fields:

All entities representing a workload additionally have the following fields:

ID giving fields

The Smartscape ID for K8s entities will be calculated based on the resource uid.

The k8s.object field

The JSON payload of a Kubernetes resource is stored as string in the k8s.object field. The parse command can be used to efficiently filter for details within the JSON payload. As a best practice, to improve the query performance, you can exclude the field from your queries using the fieldsRemove command, if it is not needed.

Note: Some details will be filtered out in order to reduce the size of the field.

K8s labels and annotations

K8s labels and annotations for a given resource will be exposed via the tags:k8s.labels and tags:k8s.annotations fields and can be accessed via tags[__key__]. E.g. to access the my_label label you can use tags[my_label], the example.com/annotation annotation can be accessed via tags[``example.com/annotation``].

Permission fields

All K8S entities support the following fields to set up permissions:

Migration

Smartscape entities will contain classic_id field pointing to corresponding entities in the classic entity storage.

Kubernetes DynaKube

Smartscape node type: K8S_DYNAKUBE

This entity represents a Kubernetes DynaKube object.

Query

Fetch all Smartscape nodes from the smartscape.node table and filter for the entity type "K8S_DYNAKUBE".

smartscapeNodes "K8S_DYNAKUBE"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes DynaKube entity

Relationships

Kubernetes EdgeConnect

Smartscape node type: K8S_EDGECONNECT

This entity represents a Kubernetes EdgeConnect object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_EDGECONNECT".

smartscapeNodes "K8S_EDGECONNECT"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes EdgeConnect entity

Relationships

Kubernetes cluster

Smartscape node name: k8s.cluster.name

Smartscape node type: K8S_CLUSTER

This entity represents a Kubernetes cluster object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CLUSTER".

smartscapeNodes "K8S_CLUSTER"

Fetch all Kubernetes Smartscape nodes and count them per cluster name and type

// query all entities where type starts with K8S_
// this gives you a list of your different Kubernetes objects represented in Dynatrace
smartscapeNodes "K8S_*"
// count entities per cluster and type
| summarize count(), by: {k8s.cluster.name, type}

Fields

The following base fields are used for all entities.

Fields specific for a Kubernetes cluster entity.

Relationships

Kubernetes config map

Smartscape node type: K8S_CONFIGMAP

This entity represents a Kubernetes config map object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CONFIGMAP".

smartscapeNodes "K8S_CONFIGMAP"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes config map entity

Relationships

Kubernetes cron job

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_CRONJOB

This entity represents a Kubernetes cron job object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CRONJOB".

smartscapeNodes "K8S_CRONJOB"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes cron job entity

Relationships

Kubernetes custom resource definition

Smartscape node type: K8S_CUSTOMRESOURCEDEFINITION

This entity represents a Kubernetes custom resource definition object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CUSTOMRESOURCEDEFINITION".

smartscapeNodes "K8S_CUSTOMRESOURCEDEFINITION"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields specific for a Kubernetes custom resource definition entity

Relationships

Kubernetes daemon set

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DAEMONSET

This entity represents a Kubernetes daemon set object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DAEMONSET".

smartscapeNodes "K8S_DAEMONSET"

Find all workloads that are missing liveness/readiness probes.

// query all workloads across all Kubernetes clusters
smartscapeNodes K8S_DEPLOYMENT, K8S_DAEMONSET, K8S_STATEFULSET, K8S_REPLICASET, K8S_REPLICATION_CONTROLLER, K8S_JOB, K8S_DEPLOYMENTCONFIG
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand containers into separate rows
| expand container = k8s.object[spec][template][spec][containers]
// create separate field for containername
| fieldsAdd containername = container[name]
// create separate field for livenessProbe
| fieldsAdd liveness = container[livenessProbe]
// create separate field for readinessProbe
| fieldsAdd readiness = container[readinessProbe]
// filter for all workloads having not set liveness or not set readiness probe.
| filter isNull(liveness) or isNull(readiness)
// reduce output to only most important fields
| fields id, k8s.cluster.name, k8s.namespace.name, k8s.workload.name, liveness, readiness
// only show 10 results
| limit 10

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes daemon set entity

Relationships

Kubernetes deployment

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DEPLOYMENT

This entity represents a Kubernetes deployment object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DEPLOYMENT".

smartscapeNodes "K8S_DEPLOYMENT"

Query and parse the YAML of a Kubernetes deployment object.

// query Kubernetes workloads of type deployment
smartscapeNodes "K8S_DEPLOYMENT"
// parse the yaml (json)
| parse k8s.object, "JSON:k8s.object"
// only show configuration of first deployment
| limit 1

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes deployment entity

Relationships

Kubernetes deployment config

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DEPLOYMENTCONFIG

This entity represents a Kubernetes (OpenShift) deployment config object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DEPLOYMENTCONFIG".

smartscapeNodes "K8S_DEPLOYMENTCONFIG"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes deployment config entity

Relationships

Kubernetes ingress

Smartscape node type: K8S_INGRESS

This entity represents a Kubernetes ingress object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_INGRESS".

smartscapeNodes "K8S_INGRESS"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes ingress entity

Relationships

Kubernetes job

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_JOB

This entity represents a Kubernetes job object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_JOB".

smartscapeNodes "K8S_JOB"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes job entity

Relationships

Kubernetes namespace

Smartscape node name: k8s.namespace.name

Smartscape node type: K8S_NAMESPACE

This entity represents a Kubernetes namespace object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NAMESPACE".

smartscapeNodes "K8S_NAMESPACE"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Relationships

Kubernetes network policy

Smartscape node type: K8S_NETWORKPOLICY

This entity represents a Kubernetes network policy object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NETWORKPOLICY".

smartscapeNodes "K8S_NETWORKPOLICY"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes network policy entity

Relationships

Kubernetes node

Smartscape node name: k8s.node.name

Smartscape node type: K8S_NODE

This entity represents a Kubernetes node object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NODE.

smartscapeNodes "K8S_NODE"

Query all unschedulable Kubernetes nodes across all Kubernetes clusters.

// query all k8s nodes
smartscapeNodes K8S_NODE
// parse the yaml (json)
| parse k8s.object, "JSON:object"
// drop unused fields
| fieldsKeep k8s.node.name, object
// extract the json-path object.spec.taints into a separate column
| fieldsAdd taints = object[spec][taints]
// expand into separate entry (row) per taint; (3 taints on one node, results in 3 rows)
| expand taints
// filter for unschedulable nodes
| filter taints[key] == "node.kubernetes.io/unschedulable"
// cleanup output
| fieldsRemove object

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields specific for a Kubernetes node entity

Relationships

Kubernetes persistent volume

Smartscape node type: K8S_PERSISTENTVOLUME

This entity represents a Kubernetes persistent volume object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_PERSISTENTVOLUME".

smartscapeNodes "K8S_PERSISTENTVOLUME"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields specific for a Kubernetes persistent volume entity

Relationships

Kubernetes persistent volume claim

Smartscape node name: k8s.persistentvolumeclaim.name

Smartscape node type: K8S_PERSISTENTVOLUMECLAIM

This entity represents a Kubernetes persistent volume claim object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_PERSISTENTVOLUMECLAIM".

smartscapeNodes "K8S_PERSISTENTVOLUMECLAIM"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes persistent volume claim entity

Relationships

Kubernetes pod

Smartscape node name: k8s.pod.name

Smartscape node type: K8S_POD

This entity represents a Kubernetes pod object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_POD".

smartscapeNodes K8S_POD

Find container image versions that violate best practices. Display any application container image that does not pin the SHA digest of a specific container image version.

// query all Kubernetes pods
smartscapeNodes K8S_POD
// filter out certain namespaces
| filterOut in(k8s.namespace.name, {"kube-system", "dynatrace", "dynatrace-fluent-bit", "kyverno"})
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand into separate row per container; (1 pod with 3 containers, results in 3 rows; one per container)
| expand images = k8s.object[spec][containers]
// flatten images and add prefix
| fieldsFlatten images, prefix: "container."
// only keep required fields
| fieldsKeep container.image, k8s.pod.name, k8s.namespace.name, k8s.cluster.name
// filter out all containers that have a pinned SHA digest
| filterOut matchesPhrase(container.image, "@sha256:")
// count pods violating this best practices per namespace and container image
| summarize podCount = count(), by: { container.image, k8s.namespace.name, k8s.cluster.name}
// sort images with many containers running first
| sort podCount desc

Find namespaces running outdated or "latest" container images. Display namespaces that run Alpine image <= v3 or MySQL <= 5.7, or use the :latest image-tag.

// query all Kubernetes pods
smartscapeNodes K8S_POD
// filter out certain namespaces
| filterOut in(k8s.namespace.name, {"kube-system", "dynatrace", "dynatrace-fluent-bit", "kyverno"})
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand into separate row per container; (1 pod with 3 containers, results in 3 rows; one per container)
| expand images = k8s.object[spec][containers]
// flatten images and add prefix
| fieldsFlatten images, prefix: "container."
// only keep required fields
| fieldsKeep container.image, k8s.pod.name, k8s.namespace.name, k8s.cluster.name
// parse container image into image and version
| parse container.image, "LD:image ':' LD:versionstring"
// drop "v" in version string
| fieldsAdd versionstring = replaceString(versionstring, "v", "")
// pares version further into major and minor version
| parse versionstring, "INT:version_major '.' INT:version_minor"
// filter all
| filter
// alpine images running version lower than 3
(image == "alpine"  and version_major <= 3)
// mysql versions running lower than 5.7
or (image == "mysql"  and (version_major < 5 or (version_major == 5 and version_minor <= 7)))
// images running latest tag
or versionstring == "latest"
// group output by namespace and collect all violating images
| summarize {violated_images=collectDistinct(container.image)}, by: {k8s.cluster.name, k8s.namespace.name}
// sort by namespaces with the top number of violating images
| sort arraySize(violated_images) desc

Find all configured Prometheus configs.

// query all entities
smartscapeNodes "*"
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand annotations in separate rows
| expand annotations = k8s.object[metadata][annotations]
// flatten annotations
| fieldsFlatten annotations
// filter for all entities that have set the "metrics.dynatrace.com/scrape" annotation; we keep also those that have set it to false
| filterOut isFalseOrNull(`annotations.metrics.dynatrace.com/scrape`)
// reduce output to most important fields only
| fields name, k8s.cluster.name, k8s.namespace.name, type, `annotations.metrics.dynatrace.com/scrape`,
`annotations.metrics.dynatrace.com/port`, `annotations.metrics.dynatrace.com/path`,
`annotations.metrics.dynatrace.com/secure`, `annotations.metrics.dynatrace.com/filter`,
`annotations.metrics.dynatrace.com/tls.ca.crt`, `annotations.metrics.dynatrace.com/tls.crt`, `annotations.metrics.dynatrace.com/tls.key`,
`annotations.metrics.dynatrace.com/http.auth.basic.username`, `annotations.metrics.dynatrace.com/http.auth.basic.password`

Summarize Pod Quality of Service classes per cluster

// query all Kubernetes pods
smartscapeNodes K8S_POD
| filter isNotNull(k8s.object)
// parse json definition
| parse k8s.object, "JSON:k8s.object"
// extract Quality of Service class
| fieldsAdd qosClass = k8s.object[status][qosClass]
// summarize by cluster name and Pod Quality of Service class
| summarize by:{k8s.cluster.name, qosClass}, count()
// sort by cluster name and Quality of Service
| sort k8s.cluster.name, qosClass

Search first 100 Pods that do not follow Quality of Service best practices

// query all Kubernetes pods
smartscapeNodes K8S_POD
| filter isNotNull(k8s.object)
// parse json definition
| parse k8s.object, "JSON:k8s.object"
// extract Quality of Service class
| fieldsAdd qosClass = k8s.object[status][qosClass]
// find all Pods that have a Quality of Service class other than "Guaranteed", meaning they will get evicted earlier in case of resource pressure
| filter qosClass != "Guaranteed"
// only show important fields
| fields k8s.cluster.name, k8s.namespace.name, k8s.pod.name, qosClass
// sort by names
| sort k8s.cluster.name, k8s.namespace.name, k8s.pod.name, qosClass
// limit number of results
| limit 100

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes pod entity

Relationships

Kubernetes replica set

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_REPLICASET

This entity represents a Kubernetes replica set object.

Query

Fetch all Smartscape nodes from the smartscape.nodessmartscape.nodes table and filter for the entity type "K8S_REPLICASET".

smartscapeNodes "K8S_REPLICASET"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes replica set entity

Relationships

Kubernetes replication controller

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_REPLICATIONCONTROLLER

This entity represents a Kubernetes replication controller object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_REPLICATIONCONTROLLER".

smartscapeNodes "K8S_REPLICATIONCONTROLLER"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes replication controller entity

Relationships

Kubernetes secret

Smartscape node type: K8S_SECRET

This entity represents a Kubernetes secret object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_SECRET".

smartscapeNodes "K8S_SECRET"

Query all Kubernetes secret objects of type TLS.

// query all Secrets
smartscapeNodes "K8S_SECRET"
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// extract secret type
| fieldsAdd secretType = k8s.object[type]
// filter for tls secrets
| filter secretType == "kubernetes.io/tls"
// keep only relevant fields
| fields id, name, k8s.namespace.name, k8s.cluster.name, secretType

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes secret entity

Relationships

Kubernetes service

Smartscape node name: k8s.service.name

Smartscape node type: K8S_SERVICE

This entity represents a Kubernetes service object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_SERVICE".

smartscapeNodes "K8S_SERVICE"

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields specific for a Kubernetes service entity

Relationships

Kubernetes stateful set

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_STATEFULSET

This entity represents a Kubernetes stateful set object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_STATEFULSET".

smartscapeNodes "K8S_STATEFULSET"

Find all deployments and statefulsets that do not have a certain annotation set.

// query all entities
smartscapeNodes "*"
// filter for only Kubernetes statefulsets and deployments
| filter in(type, {"K8S_STATEFULSET", "K8S_DEPLOYMENT"})
// parse configuration into json
| parse k8s.object, "JSON:k8s.object"
// expand into separate entries (rows) per annotation. (1 deployment with 10 annotations, results in 10 rows)
| expand annotations = k8s.object[metadata][annotations]
// flatten the annotations
| fieldsFlatten annotations
// filter for all where dt.owner is not set or empty
| filter isNull(annotations.dt.owner) or annotations.dt.owner == ""
// group by namespace, collect all violating workloads, and count them
| summarize {workloads=collectDistinct(name), num_workloads=count()}, by:{k8s.cluster.name, k8s.namespace.name}
// sort namespaces by top number of violating workloads
| sort num_workloads desc
// only show top 10
| limit 10

Fields

The following base fields are used for all entities.

Fields that are provided by all Kubernetes entities.

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Fields that are provided by all Kubernetes workloads.

Fields specific for a Kubernetes stateful set entity

Relationships