Smartscape - Kubernetes

• Reference
• Published Apr 09, 2026

This section documents the set of preconfigured Kubernetes entities. In addition to that, Dynatrace Extensions and other sources may add additional Entities based on Kubernetes objects, which are not described here.

In general each entity represents a single resource in the Kubernetes API. There are two exceptions of this rule: K8S_CLUSTER (which has no representation) and CONTAINER (which is modeled as part of a Pod within the Kubernetes API).

All Kubernetes entity types are prefixed with K8S_*. You can get an overview of all K8S entities with the following DQL query:

smartscapeNodes "K8S_*"

Kubernetes entity fields

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields

Fields that are provided by all Kubernetes workloads.

ID giving fields

The Smartscape ID for K8s entities will be calculated based on the resource uid.

The k8s.object field

The JSON payload of a Kubernetes resource is stored as string in the k8s.object field. The parse command can be used to efficiently filter for details within the JSON payload. As a best practice, to improve the query performance, you can exclude the field from your queries using the fieldsRemove command, if it is not needed.

Note: Some details will be filtered out in order to reduce the size of the field.

K8s labels and annotations

K8s labels and annotations for a given resource will be exposed via the tags:k8s.labels and tags:k8s.annotations fields and can be accessed via tags[__key__]. E.g. to access the my_label label you can use tags[my_label], the example.com/annotation annotation can be accessed via tags[``example.com/annotation``].

Permission fields

All K8S entities support the following fields to set up permissions:

Migration

Smartscape entities will contain classic_id field pointing to corresponding entities in the classic entity storage.

Kubernetes DynaKube

Smartscape node type: K8S_DYNAKUBE

This entity represents a Kubernetes DynaKube object.

Query

Fetch all Smartscape nodes from the smartscape.node table and filter for the entity type "K8S_DYNAKUBE".

smartscapeNodes "K8S_DYNAKUBE"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes DynaKube fields (i.dt.smartscape.k8s_dynakube.fields)

Kubernetes DynaKube relationship fields

Kubernetes EdgeConnect

Smartscape node type: K8S_EDGECONNECT

This entity represents a Kubernetes EdgeConnect object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_EDGECONNECT".

smartscapeNodes "K8S_EDGECONNECT"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes EdgeConnect fields (i.dt.smartscape.k8s_edgeconnect.fields)

Kubernetes EdgeConnect relationship fields

Kubernetes cluster

Smartscape node name: k8s.cluster.name

Smartscape node type: K8S_CLUSTER

This entity represents a Kubernetes cluster object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CLUSTER".

smartscapeNodes "K8S_CLUSTER"

Fetch all Kubernetes Smartscape nodes and count them per cluster name and type

// query all entities where type starts with K8S_
// this gives you a list of your different Kubernetes objects represented in Dynatrace
smartscapeNodes "K8S_*"
// count entities per cluster and type
| summarize count(), by: {k8s.cluster.name, type}

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes configuration fields (i.k8s_configuration)

Kubernetes cluster fields (i.dt.smartscape.k8s_cluster.fields)

Kubernetes cluster relationship fields

Kubernetes config map

Smartscape node type: K8S_CONFIGMAP

This entity represents a Kubernetes config map object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CONFIGMAP".

smartscapeNodes "K8S_CONFIGMAP"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes config map fields (i.dt.smartscape.k8s_configmap.fields)

Kubernetes config map relationship fields

Kubernetes cron job

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_CRONJOB

This entity represents a Kubernetes cron job object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CRONJOB".

smartscapeNodes "K8S_CRONJOB"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes cron job fields (i.dt.smartscape.k8s_cronjob.fields)

Kubernetes cron job relationship fields

Kubernetes custom resource definition

Smartscape node type: K8S_CUSTOMRESOURCEDEFINITION

This entity represents a Kubernetes custom resource definition object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_CUSTOMRESOURCEDEFINITION".

smartscapeNodes "K8S_CUSTOMRESOURCEDEFINITION"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes custom resource definition fields (i.dt.smartscape.k8s_customresourcedefinition.fields)

Kubernetes custom resource definition relationship fields

Kubernetes daemon set

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DAEMONSET

This entity represents a Kubernetes daemon set object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DAEMONSET".

smartscapeNodes "K8S_DAEMONSET"

Find all workloads that are missing liveness/readiness probes.

// query all workloads across all Kubernetes clusters
smartscapeNodes K8S_DEPLOYMENT, K8S_DAEMONSET, K8S_STATEFULSET, K8S_REPLICASET, K8S_REPLICATION_CONTROLLER, K8S_JOB, K8S_DEPLOYMENTCONFIG
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand containers into separate rows
| expand container = k8s.object[spec][template][spec][containers]
// create separate field for containername
| fieldsAdd containername = container[name]
// create separate field for livenessProbe
| fieldsAdd liveness = container[livenessProbe]
// create separate field for readinessProbe
| fieldsAdd readiness = container[readinessProbe]
// filter for all workloads having not set liveness or not set readiness probe.
| filter isNull(liveness) or isNull(readiness)
// reduce output to only most important fields
| fields id, k8s.cluster.name, k8s.namespace.name, k8s.workload.name, liveness, readiness
// only show 10 results
| limit 10

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes daemon set fields (i.dt.smartscape.k8s_daemonset.fields)

Kubernetes daemon set relationship fields

Kubernetes deployment

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DEPLOYMENT

This entity represents a Kubernetes deployment object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DEPLOYMENT".

smartscapeNodes "K8S_DEPLOYMENT"

Query and parse the YAML of a Kubernetes deployment object.

// query Kubernetes workloads of type deployment
smartscapeNodes "K8S_DEPLOYMENT"
// parse the yaml (json)
| parse k8s.object, "JSON:k8s.object"
// only show configuration of first deployment
| limit 1

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes deployment fields (i.dt.smartscape.k8s_deployment.fields)

Kubernetes deployment relationship fields

Kubernetes deployment config

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_DEPLOYMENTCONFIG

This entity represents a Kubernetes (OpenShift) deployment config object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_DEPLOYMENTCONFIG".

smartscapeNodes "K8S_DEPLOYMENTCONFIG"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes deployment config fields (i.dt.smartscape.k8s_deploymentconfig.fields)

Kubernetes deployment config relationship fields

Kubernetes horizontal pod autoscaler

Smartscape node type: K8S_HORIZONTALPODAUTOSCALER

This entity represents a Kubernetes horizontal pod autoscaler object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_HORIZONTALPODAUTOSCALER".

smartscapeNodes "K8S_HORIZONTALPODAUTOSCALER"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes horizontal pod autoscaler fields (i.dt.smartscape.k8s_horizontalpodautoscaler.fields)

Kubernetes horizontal pod autoscaler relationship fields

Kubernetes ingress

Smartscape node type: K8S_INGRESS

This entity represents a Kubernetes ingress object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_INGRESS".

smartscapeNodes "K8S_INGRESS"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes ingress fields (i.dt.smartscape.k8s_ingress.fields)

Kubernetes ingress relationship fields

Kubernetes job

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_JOB

This entity represents a Kubernetes job object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_JOB".

smartscapeNodes "K8S_JOB"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes job fields (i.dt.smartscape.k8s_job.fields)

Kubernetes job relationship fields

Kubernetes namespace

Smartscape node name: k8s.namespace.name

Smartscape node type: K8S_NAMESPACE

This entity represents a Kubernetes namespace object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NAMESPACE".

smartscapeNodes "K8S_NAMESPACE"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes namespace relationship fields

Kubernetes network policy

Smartscape node type: K8S_NETWORKPOLICY

This entity represents a Kubernetes network policy object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NETWORKPOLICY".

smartscapeNodes "K8S_NETWORKPOLICY"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes network policy fields (i.dt.smartscape.k8s_networkpolicy.fields)

Kubernetes network policy relationship fields

Kubernetes node

Smartscape node name: k8s.node.name

Smartscape node type: K8S_NODE

This entity represents a Kubernetes node object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_NODE.

smartscapeNodes "K8S_NODE"

Query all unschedulable Kubernetes nodes across all Kubernetes clusters.

// query all k8s nodes
smartscapeNodes K8S_NODE
// parse the yaml (json)
| parse k8s.object, "JSON:object"
// drop unused fields
| fieldsKeep k8s.node.name, object
// extract the json-path object.spec.taints into a separate column
| fieldsAdd taints = object[spec][taints]
// expand into separate entry (row) per taint; (3 taints on one node, results in 3 rows)
| expand taints
// filter for unschedulable nodes
| filter taints[key] == "node.kubernetes.io/unschedulable"
// cleanup output
| fieldsRemove object

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes node fields (i.dt.smartscape.k8s_node.fields)

Kubernetes node relationship fields

Kubernetes persistent volume

Smartscape node type: K8S_PERSISTENTVOLUME

This entity represents a Kubernetes persistent volume object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_PERSISTENTVOLUME".

smartscapeNodes "K8S_PERSISTENTVOLUME"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes persistent volume fields (i.dt.smartscape.k8s_persistentvolume.fields)

Kubernetes persistent volume relationship fields

Kubernetes persistent volume claim

Smartscape node name: k8s.persistentvolumeclaim.name

Smartscape node type: K8S_PERSISTENTVOLUMECLAIM

This entity represents a Kubernetes persistent volume claim object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_PERSISTENTVOLUMECLAIM".

smartscapeNodes "K8S_PERSISTENTVOLUMECLAIM"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes persistent volume claim fields (i.dt.smartscape.k8s_persistentvolumeclaim.fields)

Kubernetes persistent volume claim relationship fields

Kubernetes pod

Smartscape node name: k8s.pod.name

Smartscape node type: K8S_POD

This entity represents a Kubernetes pod object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_POD".

smartscapeNodes K8S_POD

Find container image versions that violate best practices. Display any application container image that does not pin the SHA digest of a specific container image version.

// query all Kubernetes pods
smartscapeNodes K8S_POD
// filter out certain namespaces
| filterOut in(k8s.namespace.name, {"kube-system", "dynatrace", "dynatrace-fluent-bit", "kyverno"})
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand into separate row per container; (1 pod with 3 containers, results in 3 rows; one per container)
| expand images = k8s.object[spec][containers]
// flatten images and add prefix
| fieldsFlatten images, prefix: "container."
// only keep required fields
| fieldsKeep container.image, k8s.pod.name, k8s.namespace.name, k8s.cluster.name
// filter out all containers that have a pinned SHA digest
| filterOut matchesPhrase(container.image, "@sha256:")
// count pods violating this best practices per namespace and container image
| summarize podCount = count(), by: { container.image, k8s.namespace.name, k8s.cluster.name}
// sort images with many containers running first
| sort podCount desc

Find namespaces running outdated or "latest" container images. Display namespaces that run Alpine image <= v3 or MySQL <= 5.7, or use the :latest image-tag.

// query all Kubernetes pods
smartscapeNodes K8S_POD
// filter out certain namespaces
| filterOut in(k8s.namespace.name, {"kube-system", "dynatrace", "dynatrace-fluent-bit", "kyverno"})
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand into separate row per container; (1 pod with 3 containers, results in 3 rows; one per container)
| expand images = k8s.object[spec][containers]
// flatten images and add prefix
| fieldsFlatten images, prefix: "container."
// only keep required fields
| fieldsKeep container.image, k8s.pod.name, k8s.namespace.name, k8s.cluster.name
// parse container image into image and version
| parse container.image, "LD:image ':' LD:versionstring"
// drop "v" in version string
| fieldsAdd versionstring = replaceString(versionstring, "v", "")
// pares version further into major and minor version
| parse versionstring, "INT:version_major '.' INT:version_minor"
// filter all
| filter
// alpine images running version lower than 3
(image == "alpine"  and version_major <= 3)
// mysql versions running lower than 5.7
or (image == "mysql"  and (version_major < 5 or (version_major == 5 and version_minor <= 7)))
// images running latest tag
or versionstring == "latest"
// group output by namespace and collect all violating images
| summarize {violated_images=collectDistinct(container.image)}, by: {k8s.cluster.name, k8s.namespace.name}
// sort by namespaces with the top number of violating images
| sort arraySize(violated_images) desc

Find all configured Prometheus configs.

// query all entities
smartscapeNodes "*"
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// expand annotations in separate rows
| expand annotations = k8s.object[metadata][annotations]
// flatten annotations
| fieldsFlatten annotations
// filter for all entities that have set the "metrics.dynatrace.com/scrape" annotation; we keep also those that have set it to false
| filterOut isFalseOrNull(`annotations.metrics.dynatrace.com/scrape`)
// reduce output to most important fields only
| fields name, k8s.cluster.name, k8s.namespace.name, type, `annotations.metrics.dynatrace.com/scrape`,
`annotations.metrics.dynatrace.com/port`, `annotations.metrics.dynatrace.com/path`,
`annotations.metrics.dynatrace.com/secure`, `annotations.metrics.dynatrace.com/filter`,
`annotations.metrics.dynatrace.com/tls.ca.crt`, `annotations.metrics.dynatrace.com/tls.crt`, `annotations.metrics.dynatrace.com/tls.key`,
`annotations.metrics.dynatrace.com/http.auth.basic.username`, `annotations.metrics.dynatrace.com/http.auth.basic.password`

Summarize Pod Quality of Service classes per cluster

// query all Kubernetes pods
smartscapeNodes K8S_POD
| filter isNotNull(k8s.object)
// parse json definition
| parse k8s.object, "JSON:k8s.object"
// extract Quality of Service class
| fieldsAdd qosClass = k8s.object[status][qosClass]
// summarize by cluster name and Pod Quality of Service class
| summarize by:{k8s.cluster.name, qosClass}, count()
// sort by cluster name and Quality of Service
| sort k8s.cluster.name, qosClass

Search first 100 Pods that do not follow Quality of Service best practices

// query all Kubernetes pods
smartscapeNodes K8S_POD
| filter isNotNull(k8s.object)
// parse json definition
| parse k8s.object, "JSON:k8s.object"
// extract Quality of Service class
| fieldsAdd qosClass = k8s.object[status][qosClass]
// find all Pods that have a Quality of Service class other than "Guaranteed", meaning they will get evicted earlier in case of resource pressure
| filter qosClass != "Guaranteed"
// only show important fields
| fields k8s.cluster.name, k8s.namespace.name, k8s.pod.name, qosClass
// sort by names
| sort k8s.cluster.name, k8s.namespace.name, k8s.pod.name, qosClass
// limit number of results
| limit 100

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes pod fields (i.dt.smartscape.k8s_pod.fields)

Kubernetes pod relationship fields

Kubernetes replica set

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_REPLICASET

This entity represents a Kubernetes replica set object.

Query

Fetch all Smartscape nodes from the smartscape.nodessmartscape.nodes table and filter for the entity type "K8S_REPLICASET".

smartscapeNodes "K8S_REPLICASET"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes replica set fields (i.dt.smartscape.k8s_replicaset.fields)

Kubernetes replica set relationship fields

Kubernetes replication controller

Smartscape node name: k8s.workload.name

Smartscape node type: K8S_REPLICATIONCONTROLLER

This entity represents a Kubernetes replication controller object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_REPLICATIONCONTROLLER".

smartscapeNodes "K8S_REPLICATIONCONTROLLER"

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes workload fields (i.k8s_workload)

Fields that are provided by all Kubernetes workloads.

Kubernetes replication controller fields (i.dt.smartscape.k8s_replicationcontroller.fields)

Kubernetes replication controller relationship fields

Kubernetes secret

Smartscape node type: K8S_SECRET

This entity represents a Kubernetes secret object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_SECRET".

smartscapeNodes "K8S_SECRET"

Query all Kubernetes secret objects of type TLS.

// query all Secrets
smartscapeNodes "K8S_SECRET"
// parse the configuration as json
| parse k8s.object, "JSON:k8s.object"
// extract secret type
| fieldsAdd secretType = k8s.object[type]
// filter for tls secrets
| filter secretType == "kubernetes.io/tls"
// keep only relevant fields
| fields id, name, k8s.namespace.name, k8s.cluster.name, secretType

Base entity fields (i.base_entity)

The following base fields are used for all entities.

Kubernetes entity fields (i.k8s_entity)

Fields that are provided by all Kubernetes entities.

Kubernetes namespaced entity fields (i.k8s_namespaced_entity)

Fields that are provided by all non-workload Kubernetes entities that exist in a Kubernetes namespace.

Kubernetes secret fields (i.dt.smartscape.k8s_secret.fields)

Kubernetes secret relationship fields

Kubernetes service

Smartscape node name: k8s.service.name

Smartscape node type: K8S_SERVICE

This entity represents a Kubernetes service object.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "K8S_SERVICE".

smartscapeNodes "K8S_SERVICE"

Base entity fields (i.base_entity)

The following base fields are used for all entities.