Supported asset types

This document lists the supported asset types in Cloud Asset Inventory. See the overview topic for all Cloud Asset API services.

Supported resource types

Cloud Asset Inventory supports and returns the following resource types. You can use this list to identify which types the service supports, but be sure to use the full resource name format when working with Cloud Asset Inventory. Learn more about Cloud API resource naming.

Unless otherwise specified, all asset types are available in the export, list, monitor, search and analysis APIs. Effective tags are supported only in the search API.

Service Asset type
Access Policy (Access Context Manager)

To retrieve all access policies in the export, list, and monitor APIs:

  • REST: Set the contentType to ACCESS_POLICY.
  • gcloud CLI: Set the --content-type flag to access-policy.
AlloyDB for PostgreSQL

API reference

API Gateway

API reference

API keys

The location field might not be populated for API keys assets.

API reference

Apigee

API reference

App Engine

The location field might not be populated for App Engine assets.

API reference

Application Integration

API reference

Artifact Registry

API reference

Assured Workloads

API reference

Backup for GKE

API reference

BeyondCorp Enterprise

API reference

BigQuery

API reference

BigQuery Data Transfer Service

API reference

BigQuery Migration Service

API reference

Blockchain Node Engine

API reference

Certificate Authority Service

IAM policies might be missing for privateca.googleapis.com/CertificateRevocationList.

API reference

Bigtable

API reference

Cloud Billing

API reference

Cloud Build

API reference

Cloud Composer

Cloud Composer v1beta1 is supported. The resources in v1beta1 are a superset of those in v1.

API reference

Cloud Config Manager API

API reference

Cloud Data Fusion

API reference

Cloud Deploy

API reference

Cloud DNS

API reference

Cloud Domains

API reference

Cloud Functions

This only includes 1st gen Cloud Functions.

API reference

Cloud Functions

This includes both 1st and 2nd gen Cloud Functions. Cloud Functions asset change history can be incomplete; data can be delayed by approximately 12 hours.

API reference

Cloud Healthcare API

Cloud Healthcare API asset change history can be incomplete, data freshness can be stale for 7+ hours.

API reference

Cloud Intrusion Detection System

API reference

Cloud Key Management Service

API reference

Cloud Logging

Cloud Logging asset change history might be incomplete. Data freshness can be stale for 12+ hours.

API reference

Cloud Monitoring

API reference

Cloud OS Config

Cloud OS Config asset change history can be incomplete. Data freshness can be stale for 7+ hours.

API reference

Cloud Run

API reference

Spanner

API reference

Cloud SQL

Cloud SQL asset change history can be incomplete. Data freshness can be stale for 2+ hours.

API reference

Cloud Storage

API reference

Cloud Tasks

API reference

Cloud TPU

API reference

Cloud Workstations

API reference

Compute Engine

API reference

Contact Center AI Insights

API reference

Container Registry

Container Registry implements Docker HTTP API V2 and does not provide a public API.

  • containerregistry.googleapis.com/Image

    Not supported for effective tags.

    Not available in the analysis APIs.

Database Migration Service

API reference

Dataflow

Dataflow asset change history can be incomplete. Data freshness can be stale for 7+ hours.

API reference

Dataform

API reference

Dataplex

API reference

Dataproc

API reference

Dataproc Metastore

API reference

Datastream

API reference

Dialogflow CX

API reference

Dialogflow ES

API reference

Discovery Engine

API reference

  • discoveryengine.googleapis.com/Collection
  • discoveryengine.googleapis.com/DataStore

Document AI

API reference

Eventarc

API reference

Filestore

API reference

Financial Services

API reference

  • financialservices.googleapis.com/BacktestResult

    Not available in the analysis APIs.

  • financialservices.googleapis.com/Dataset

    Not available in the analysis APIs.

  • financialservices.googleapis.com/EngineConfig

    Not available in the analysis APIs.

  • financialservices.googleapis.com/Instance
  • financialservices.googleapis.com/Model

    Not available in the analysis APIs.

  • financialservices.googleapis.com/PredictionResult

    Not available in the analysis APIs.

Firestore

API reference

Google Cloud NetApp Volumes

API reference

Google Cloud VMware Engine

API reference

Google Kubernetes Engine

API reference

  • container.googleapis.com/Cluster

    Searchable attributes:

    • endpoint
  • container.googleapis.com/NodePool

    Searchable attributes:

    • locations
  • extensions.k8s.io/Ingress

    In beta for the export, list, and monitor APIs. Not available in the analysis APIs.

  • networking.k8s.io/Ingress

    In beta for the export, list, and monitor APIs. Not available in the analysis APIs.

API reference

GKE Multi-Cloud

API reference

GKE on Google Distributed Cloud

GKE on Google Distributed Cloud metadata is from Confluence, which has no public API.

Hub

API reference

Identity and Access Management

API reference

V2 API reference

Identity Platform

API reference

Integration Connectors

API reference

KRM API Hosting
  • krmapihosting.googleapis.com/KrmApiHost

    Not available in analysis APIs.

Live Stream API

API reference

Looker

API reference

Managed Service for Microsoft Active Directory

API reference

Memorystore for Memcached

API reference

Memorystore for Redis

API reference

Network Connectivity

Network Connectivity Hub.routing_vpcs data freshness can be delayed by several hours.

API reference

Network Management API

API reference

Network Services API

API reference

Organization Policy Service

API reference

  • orgpolicy.googleapis.com/Policy

    Not available in the search and analysis APIs.

Organization Policy Service v2

Pub/Sub

API reference

Resource Manager

API reference

Secret Manager

The location field in the Secret Manager asset does not reflect the replication policy of the secret. Instead, use the replication field to get that information.

API reference

Sensitive Data Protection

API reference

Serverless VPC Access

API reference

Service Directory

API reference

Service Management

Service Management asset change history can be incomplete. Data freshness can be stale for 7+ hours.

API reference

Service Usage

Service Usage asset change history might be incomplete. The config field in the metadata is not supported yet.

API reference

Speech-to-Text

API reference

Speaker ID

API reference

Transcoder API

API reference

Vertex AI

The deployedModels field in Model and Endpoint is not populated. Vertex AI asset change history can be incomplete. Data freshness can be stale for 7+ hours. Some datasets' metadata (e.g. TABLE data type) could be stale due to an ongoing data issue.

API reference

Workflows

API reference

Supported policy types

The Cloud Asset API supports the following policy types in Google Cloud:

Policy Support details
Access Policy (VPC Service Controls Policy)

API reference

Supported policy parent

Supported policy scope

IAM

Data can be delayed by approximately 36 hours.

API reference

Supported resource types that IAM policies can be attached to:

  • All asset types in supported resource types.
  • All policy types in this table except for IAM policy itself.
  • The following IAP resource types:

    • iap.googleapis.com/Tunnel

      Not available in the search and analysis APIs.

    • iap.googleapis.com/TunnelZone

      Not available in the search and analysis APIs.

    • iap.googleapis.com/TunnelInstance

      Not available in the search and analysis APIs.

    • iap.googleapis.com/Web

      Not available in the search and analysis APIs.

    • iap.googleapis.com/WebService

      Not available in the search and analysis APIs.

    • iap.googleapis.com/WebServiceVersion

      Not available in the search and analysis APIs.

    • iap.googleapis.com/WebType

      Not available in the search and analysis APIs.

Organization Policy

API reference

Supported resource types that organization policies can be attached to:

Supported runtime information types

The Cloud Asset API supports the following runtime information types in Google Cloud:

Runtime information Supported resource

OS inventory

Provides information on the operating system, installed packages, and available package updates for an instance. Learn more about OS inventory management.

Supported relationship types

These relationship types are supported in the export, list, search and monitor services. The analysis service does not support relationship types.

Supported asset type Relationship types

ANTHOS_CONNECTED_CLUSTER_TO_GKEHUB_MEMBERSHIPS

Represents a relationship from an GKE Enterprise connected cluster to a GKE Hub membership which provides information about the GKE Enterprise connected cluster that a GKE Hub membership owns.

Not available in Search and Analysis APIs.

APP_ENGINE_SERVICE_TO_VERSION

Represents a relationship from an App Engine service to an App Engine version which provides information that an App Engine service is deployed with a version.

Not available in Search and Analysis APIs.

SERVICE_TO_APPLICATION

Represents a relationship from an App Engine service to an App Engine application which provides information that an App Engine service hosts an application.

APP_ENGINE_APPLICATION_TO_SERVICE

Represents a relationship from an App Engine application to an App Engine service which provides information about an App Engine application is running on a service.

Not available in Search and Analysis APIs.

APP_ENGINE_APPLICATION_TO_VERSION

Represents a relationship from an App Engine application to an App Engine version which provides information about an App Engine application is deployed with a version.

Not available in Search and Analysis APIs.

VERSION_TO_APPLICATION

Represents a relationship from an App Engine version to an App Engine application which provides information about the App Engine application that a version is in.

VERSION_TO_SERVICE

Represents a relationship from an App Engine version to an App Engine service which provides information about the App Engine service that a version is in.

BIGTABLE_APP_PROFILE_TO_INSTANCE

Represents a relationship from a Bigtable app profile to a Bigtable instance which provides information about the Bigtable app profile that an instance hosts.

Not available in Search and Analysis APIs.

BIGTABLE_CLUSTER_TO_INSTANCE

Represents a relationship from a Bigtable cluster to a Bigtable instance which provides information about the Bigtable cluster that an instance belongs to.

Not available in Search and Analysis APIs.

BIGTABLE_INSTANCE_TO_APP_PROFILE

Represents a relationship from a Bigtable instance to a Bigtable app profile which provides information that a Bigtable instance uses an app profile.

Not available in Search and Analysis APIs.

BIGTABLE_INSTANCE_TO_CLUSTER

Represents a relationship from a Bigtable instance to a Bigtable cluster which provides information that a Bigtable instance is in a cluster.

Not available in Search and Analysis APIs.

BIGTABLE_INSTANCE_TO_TABLE

Represents a relationship from a Bigtable instance to a Bigtable table which provides information that a Bigtable instance is in a table.

Not available in Search and Analysis APIs.

BIGTABLE_TABLE_TO_INSTANCE

Represents a relationship from a Bigtable table to a Bigtable instance which provides information that a Bigtable table an instance is in.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_BUCKET_TO_STORAGE_BUCKET

Represents a relationship from a Compute Engine backend bucket to a Cloud Storage bucket which provides information about the mapping from Compute Engine backend bucket to Cloud Storage bucket.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_BUCKET_TO_URLMAP

Represents a relationship from a Compute Engine backend bucket to a Compute Engine urlMap which provides information about the mapping from Compute Engine backend bucket to Compute Engine urlMap.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_INSTANCE_GROUP

Represents a relationship from a Compute Engine backend service to a Compute Engine instance group which provides information about the Compute Engine backend service supports a Compute Engine instance group.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine backend service to a Compute Engine forwarding rule which provides information about the Compute Engine backend service uses a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_NETWORK_ENDPOINT_GROUP

Represents a relationship from a Compute Engine backend service to a Compute Engine network endpoint group which provides information about the Compute Engine backend service uses a Compute Engine network endpoint group.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_TARGET_SSL_PROXY

Represents a relationship from a Compute Engine backend service to a Compute Engine target SSL proxy which provides information about the Compute Engine backend service uses a Compute Engine target SSL proxy.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_TARGET_TCP_PROXY

Represents a relationship from a Compute Engine backend service to a Compute Engine target TCP proxy which provides information about the Compute Engine backend service uses a Compute Engine target TCP proxy.

Not available in Search and Analysis APIs.

COMPUTE_BACKEND_SERVICE_TO_URLMAP

Represents a relationship from a Compute Engine backend service to a Compute Engine urlMap which provides information about the Compute Engine backend service owns a Compute Engine urlMap.

Not available in Search and Analysis APIs.

COMPUTE_DISK_BOOTED_FROM_IMAGE

Represents a relationship from a Compute Engine disk to a Compute Engine image which provides information about the Compute Engine disk is booted from the Compute Engine image.

Not available in Search and Analysis APIs.

COMPUTE_DISK_BOOTED_FROM_SNAPSHOT

Represents a relationship from a Compute Engine disk to a Compute Engine snapshot which provides information about the Compute Engine disk is created from the Compute Engine snapshot.

Not available in Search and Analysis APIs.

COMPUTE_DISK_USED_BY_INSTANCE

Represents a relationship from a Compute Engine disk to a Compute Engine instance which provides information about the Compute Engine disk is attached to the Compute Engine instance.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine backend service which provides information about the Compute Engine forwarding rule is used by a Compute Engine backend service.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_HTTP_PROXY

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target HTTP proxy which provides information about the Compute Engine forwarding rule that a Compute Engine target HTTP proxy belongs to.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_HTTPS_PROXY

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target HTTPS proxy which provides information about the Compute Engine forwarding rule that a Compute Engine target HTTPS proxy belongs to.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_INSTANCE

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target instance which provides information about the Compute Engine forwarding rule is used by a Compute Engine target instance.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_POOL

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target pool which provides information about the Compute Engine forwarding rule is used by a Compute Engine target pool.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_SSL_PROXY

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target SSL proxy which provides information about the Compute Engine forwarding rule that a Compute Engine target SSL proxy belongs to.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_TCP_PROXY

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target TCP proxy which provides information about the Compute Engine forwarding rule that a Compute Engine target TCP proxy belongs to.

Not available in Search and Analysis APIs.

COMPUTE_FORWARDING_RULE_TO_TARGET_VPN_GATEWAY

Represents a relationship from a Compute Engine forwarding rule to a Compute Engine target VPN gateway which provides information about the Compute Engine forwarding rule that a Compute Engine target VPN gateway belongs to.

Not available in Search and Analysis APIs.

COMPUTE_IMAGE_BOOT_DISK

Represents a relationship from a Compute Engine image to a Compute Engine disk which provides information about the image boots a disk.

Not available in Search and Analysis APIs.

INSTANCE_TO_INSTANCEGROUP

Represents a relationship from a Compute Engine instance to a Compute Engine instance group(s) which provides information about the instance group(s) that an instance is in.

INSTANCE_TO_INSTANCEGROUPMANAGER

Represents a relationship from a Compute Engine instance to a Compute Engine instance group manager(s) which provides information about the instance group manager(s) that an instance is managed by.

COMPUTE_INSTANCE_IS_IN_TARGET_POOL

Represents a relationship from a Compute Engine instance to a Compute Engine target pool which provides information about the target pool(s) an instance belongs to.

COMPUTE_INSTANCE_TO_K8S_NODE

Represents a relationship from a Compute Engine instance to a k8s.io/Node which provides information about the instance is a provider for a Kubernetes node.

Not available in Search and Analysis APIs.

COMPUTE_INSTANCE_TO_TARGET_INSTANCE

Represents a relationship from a Compute Engine instance to a Compute Engine target instance which provides information about the target instance(s) an instance owns.

Not available in Search and Analysis APIs.

COMPUTE_INSTANCE_USE_DISK

Represents a relationship from a Compute Engine instance to a Compute Engine disk which provides information about the instance uses a disk.

Not available in Search and Analysis APIs.

INSTANCEGROUP_TO_INSTANCEGROUPMANAGER

Represents a relationship from a Compute Engine instance-group to a Compute Engine instance group manager which provides information about the instance group manager that an instance group is managed by.

COMPUTE_INSTANCE_GROUP_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine instance-group to a Compute Engine backend service which provides information about the backend service(s) that an instance group owns.

Not available in Search and Analysis APIs.

COMPUTE_INSTANCE_GROUP_TO_INSTANCE

Represents a relationship from a Compute Engine instance-group to a Compute Engine instance which provides information about the instance group that an instance belong to.

Not available in Search and Analysis APIs.

COMPUTE_INSTANCE_GROUP_MANAGER_TO_INSTANCE

Represents a relationship from a Compute Engine instance group manager to a Compute Engine instance which provides information about the instance group manager manages an instance.

Not available in Search and Analysis APIs.

COMPUTE_INSTANCE_GROUP_MANAGER_TO_INSTANCE_GROUP

Represents a relationship from a Compute Engine instance group manager to a Compute Engine instance group which provides information about the instance group manager manages an instance group.

Not available in Search and Analysis APIs.

COMPUTE_NETWORK_ENDPOINT_GROUP_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine network endpoint group to a Compute Engine backend service which provides information about the Compute Engine network endpoint group that a Compute Engine backend service belongs to.

Not available in Search and Analysis APIs.

COMPUTE_SNAPSHOT_BOOT_DISK

Represents a relationship from a Compute Engine snapshot to a Compute Engine disk which provides information about the Compute Engine snapshot boots a Compute Engine disk.

Not available in Search and Analysis APIs.

COMPUTE_SSL_CERTIFICATE_TO_TARGET_HTTPS_PROXY

Represents a relationship from a Compute Engine SSL certificate to a Compute Engine target HTTPS proxy which provides information about the Compute Engine SSL certificate that a Compute Engine target HTTPS proxy owns.

Not available in Search and Analysis APIs.

COMPUTE_SSL_CERTIFICATE_TO_TARGET_SSL_PROXY

Represents a relationship from a Compute Engine SSL certificate to a Compute Engine target SSL proxy which provides information about the Compute Engine SSL certificate that a Compute Engine target SSL proxy owns.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_HTTP_PROXY_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target HTTP proxy to a Compute Engine forwarding rule which provides information about the Compute Engine target HTTP proxy that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_HTTP_PROXY_TO_URLMAP

Represents a relationship from a Compute Engine target HTTP proxy to a Compute Engine urlMap which provides information about the Compute Engine target HTTP proxy that is used by a Compute Engine urlMap.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_HTTPS_PROXY_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target HTTPS proxy to a Compute Engine forwarding rule which provides information about the Compute Engine target HTTPS proxy that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_HTTPS_PROXY_TO_SSL_CERTIFICATE

Represents a relationship from a Compute Engine target HTTPS proxy to a Compute Engine SSL certificate which provides information about the Compute Engine target HTTPS proxy that is used by a Compute Engine SSL certificate.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_HTTPS_PROXY_TO_URLMAP

Represents a relationship from a Compute Engine target HTTPS proxy to a Compute Engine urlMap which provides information about the Compute Engine target HTTPS proxy that is used by a Compute Engine urlMap.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_INSTANCE_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target instance to a Compute Engine forwarding rule which provides information about the Compute Engine target instance that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_INSTANCE_TO_INSTANCE

Represents a relationship from a Compute Engine target instance to a Compute Engine instance which provides information about the Compute Engine target instance that is used by a Compute Engine instance.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_POOL_BACKUP_TARGET_POOL

Represents a relationship from a Compute Engine target pool to a Compute Engine target pool which provides information about the Compute Engine target pool backs up another Compute Engine target pool.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_POOL_BACKUP_BY_TARGET_POOL

Represents a relationship from a Compute Engine target pool to a Compute Engine target pool which provides information about the Compute Engine target pool has another Compute Engine target pool as backup.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_POOL_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target pool to a Compute Engine forwarding rule which provides information about the Compute Engine target pool that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_POOL_USE_INSTANCE

Represents a relationship from a Compute Engine target pool to a Compute Engine instance which provides information about the Compute Engine target pool uses a Compute Engine instance.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_SSL_PROXY_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine target SSL proxy to a Compute Engine backend service which provides information about the Compute Engine target SSL proxy belongs to a Compute Engine backend service.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_SSL_PROXY_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target SSL proxy to a Compute Engine forwarding rule which provides information about the Compute Engine target SSL proxy that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_SSL_PROXY_TO_SSL_CERTIFICATE

Represents a relationship from a Compute Engine target SSL proxy to a Compute Engine SSL certificate which provides information about the Compute Engine target SSL proxy that is used by a Compute Engine SSL certificate.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_TCP_PROXY_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine target TCP proxy to a Compute Engine backend service which provides information about the Compute Engine target TCP proxy belongs to a Compute Engine backend service.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_TCP_PROXY_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target TCP proxy to a Compute Engine forwarding rule which provides information about the Compute Engine target TCP proxy that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_VPN_GATEWAY_TO_FORWARDING_RULE

Represents a relationship from a Compute Engine target VPN gateway to a Compute Engine forwarding rule which provides information about the Compute Engine target VPN gateway that is used by a Compute Engine forwarding rule.

Not available in Search and Analysis APIs.

COMPUTE_TARGET_VPN_GATEWAY_TO_VPN_TUNNEL

Represents a relationship from a Compute Engine target VPN gateway to a Compute Engine VPN tunnel which provides information about the Compute Engine target VPN gateway that is used by a Compute Engine VPN tunnel.

Not available in Search and Analysis APIs.

COMPUTE_VPN_TUNNEL_TO_TARGET_VPN_GATEWAY

Represents a relationship from a Compute Engine VPN tunnel to a Compute Engine target VPN gateway which provides information about the Compute Engine VPN tunnel belongs to a Compute Engine target VPN gateway.

Not available in Search and Analysis APIs.

COMPUTE_URLMAP_TO_BACKEND_BUCKET

Represents a relationship from a Compute Engine urlMap to a Compute Engine backend bucket which provides information about the Compute Engine urlMap is used by a Compute Engine backend bucket.

Not available in Search and Analysis APIs.

COMPUTE_URLMAP_TO_BACKEND_SERVICE

Represents a relationship from a Compute Engine urlMap to a Compute Engine backend service which provides information about the Compute Engine urlMap is used by a Compute Engine backend service.

Not available in Search and Analysis APIs.

COMPUTE_URLMAP_TO_TARGET_HTTP_PROXY

Represents a relationship from a Compute Engine urlMap to a Compute Engine target HTTP proxy which provides information about the Compute Engine urlMap is used by a Compute Engine target HTTP proxy.

Not available in Search and Analysis APIs.

COMPUTE_URLMAP_TO_TARGET_HTTPS_PROXY

Represents a relationship from a Compute Engine urlMap to a Compute Engine target HTTPS proxy which provides information about the Compute Engine urlMap is used by a Compute Engine target HTTPS proxy.

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_K8S_AUTHORIZATION_RBAC_CLUSTER_ROLE

Represents a relationship from a Google Kubernetes Engine cluster to a rbac.authorization.k8s.io/ClusterRole which provides information about the Google Kubernetes Engine cluster uses an rbac.authorization.k8s.io/ClusterRole

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_K8S_AUTHORIZATION_RBAC_CLUSTER_ROLE_BINDING

Represents a relationship from a Google Kubernetes Engine cluster to a rbac.authorization.k8s.io/ClusterRoleBinding which provides information about the Google Kubernetes Engine cluster uses a rbac.authorization.k8s.io/ClusterRoleBinding

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_K8S_NAMESPACE

Represents a relationship from a Google Kubernetes Engine cluster to a k8s.io/Namespace which provides information about the Google Kubernetes Engine cluster is in a namespace.

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_K8S_NODE

Represents a relationship from a Google Kubernetes Engine cluster to a k8s.io/Node which provides information about the Google Kubernetes Engine cluster that a node is in.

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_NODE_POOL

Represents a relationship from a Google Kubernetes Engine cluster to a Google Kubernetes Engine nodePool which provides information about the Google Kubernetes Engine nodePool is used by a cluster

Not available in Search and Analysis APIs.

GKE_CLUSTER_TO_GKEHUB_MEMBERSHIPS

Represents a relationship from a Google Kubernetes Engine cluster to a GKE Hub membership which provides information about the Google Kubernetes Engine cluster that a GKE Hub membership owns.

Not available in Search and Analysis APIs.

GKE_NODE_POOL_TO_CLUSTER

Represents a relationship from a Google Kubernetes Engine node pool to a Google Kubernetes Engine cluster which provides information about the full name of the Google Kubernetes Engine node pool points to the Google Kubernetes Engine cluster.

Not available in Search and Analysis APIs.

  • extensions.k8s.io/Ingress

K8S_EXTENSIONS_INGRESS_TO_NAMESPACE

Represents a relationship from a extensions.k8s.io/Ingress to a k8s.io/Namespace which provides information about an extensions.k8s.io/Ingress that a Kubernetes namespace owns.

Not available in Search and Analysis APIs.

GKEHUB_MEMBERSHIPS_TO_ANTHOS_CONNECTED_CLUSTER

Represents a relationship from a gkehub.googleapis.com/Membership to an anthos.googleapis.com/ConnectedCluster which provides information about a GKE Hub membership describes an GKE Enterprise on-prem cluster.

Not available in Search and Analysis APIs.

GKEHUB_MEMBERSHIPS_TO_GKE_CLUSTER

Represents a relationship from a gkehub.googleapis.com/Membership to a Google Kubernetes Engine(GKE) cluster which provides information about the GKE Hub membership describes a Google Kubernetes Engine cluster.

Not available in Search and Analysis APIs.

NAMESPACE_TO_CLUSTER

Represents a relationship from a Kubernetes namespace to a Google Kubernetes Engine(GKE) cluster which provides information about the GKE cluster that a Kubernetes namespace is in.

K8S_NAMESPACE_TO_AUTHORIZATION_RBAC_ROLE

Represents a relationship from a Kubernetes namespace to a rbac.authorization.k8s.io/Role which provides information about the GKE namespace uses a rbac.authorization.k8s.io/Role.

Not available in Search and Analysis APIs.

K8S_NAMESPACE_TO_AUTHORIZATION_RBAC_ROLE_BINDING

Represents a relationship from a Kubernetes namespace to a rbac.authorization.k8s.io/RoleBinding which provides information about the GKE namespace uses a rbac.authorization.k8s.io/RoleBinding.

Not available in Search and Analysis APIs.

K8S_NAMESPACE_TO_EXTENSIONS_INGRESS

Represents a relationship from a Kubernetes namespace to a Kubernetes extension ingress which provides information about the GKE namespace that a Kubernetes extension ingress is in.

Not available in Search and Analysis APIs.

K8S_NAMESPACE_TO_SERVICE

Represents a relationship from a Kubernetes namespace to a Kubernetes service which provides information about the GKE namespace that a Kubernetes service is in.

Not available in Search and Analysis APIs.

NODE_TO_CLUSTER

Represents a relationship from a Kubernetes node to a GKE cluster which provides information about the GKE cluster that a Kubernetes node is in.

NODE_TO_COMPUTE_INSTANCE

Represents a relationship from a Kubernetes node to a Compute Engine instance which provides information about the compute instance that a Kubernetes node is in.

K8S_SERVICE_TO_NAMESPACE

Represents a relationship from a Kubernetes service to a Kubernetes namespace which provides information about that a Kubernetes service belongs to a Kubernetes service.

Not available in Search and Analysis APIs.

PUBSUB_SUBSCRIPTION_TO_TOPIC

Represents a relationship from a Pub/Sub subscription to a Pub/Sub topic which provides information about a pubsub subscription that subscribes a pubsub topic.

Not available in Search and Analysis APIs.

PUBSUB_TOPIC_TO_SUBSCRIPTION

Represents a relationship from a Pub/Sub topic to a Pub/Sub subscription which provides information about a pubsub topic is subscribed by a subscription.

Not available in Search and Analysis APIs.

K8S_AUTHORIZATION_RBAC_CLUSTER_ROLE_TO_GKE_CLUSTER

Represents a relationship from a rbac.authorization.k8s.io/ClusterRole to a Google Kubernetes Engine cluster which provides information about a rbac.authorization.k8s.io/ClusterRole that a Google Kubernetes Engine cluster owns.

Not available in Search and Analysis APIs.

K8S_AUTHORIZATION_RBAC_CLUSTER_ROLE_BINDING_TO_GKE_CLUSTER

Represents a relationship from a rbac.authorization.k8s.io/ClusterRoleBinding to a Google Kubernetes Engine cluster which provides information about a rbac.authorization.k8s.io/ClusterRoleBinding that a Google Kubernetes Engine cluster owns.

Not available in Search and Analysis APIs.

K8S_AUTHORIZATION_RBAC_ROLE_TO_NAMESPACE

Represents a relationship from a rbac.authorization.k8s.io/Role to a Kubernetes namespace which provides information about a rbac.authorization.k8s.io/Role that a Kubernetes namespace owns.

Not available in Search and Analysis APIs.

K8S_AUTHORIZATION_RBAC_ROLE_BINDING_TO_NAMESPACE

Represents a relationship from a rbac.authorization.k8s.io/RoleBinding to a Kubernetes namespace which provides information about a rbac.authorization.k8s.io/RoleBinding that a Kubernetes namespace owns.

Not available in Search and Analysis APIs.

STORAGE_BUCKET_TO_COMPUTE_BACKEND_BUCKET

Represents a relationship from a Cloud Storage bucket to a Compute Engine backend bucket which provides information about a Cloud Storage bucket points to a Compute Engine backend bucket.

Not available in Search and Analysis APIs.