Google Cloud Kubernetes 컨텍스트 로그 수집

이 문서에서는 Google Cloud Kubernetes 컨텍스트 로그 필드를 Google Security Operations 통합 데이터 모델(UDM) 필드에 매핑하는 방법을 설명합니다.

수집 라벨은 원시 로그 데이터를 구조화된 UDM 형식으로 정규화하는 파서를 식별합니다. 이 문서의 정보는 GCP_KUBERNETES_CONTEXT 수집 라벨이 있는 파서에 적용됩니다.

Google SecOps에서 지원하는 다른 컨텍스트 파서에 대한 자세한 내용은 Google SecOps 컨텍스트 파서를 참조하세요.

필드 매핑 참조

이 섹션에서는 Google Security Operations 파서가 Google Cloud Kubernetes 컨텍스트 로그 필드를 Google Security Operations UDM 필드에 매핑하는 방법을 설명합니다.

Log field UDM mapping Logic
resource.data.autoscaling.autoprovisioningNodePoolDefaults.serviceAccount entity.email
resource.data.config.serviceAccount entity.email
resource.data.spec.hostname entity.hostname
resource.data.metadata.labels.kubernetes.io/hostname entity.hostname
resource.data.privateClusterConfig.privateEndpoint entity.ip If the assetType log field value is equal to container.googleapis.com/Cluster, then temp_ip field is extracted from the resource.data.privateClusterConfig.privateEndpoint log field using Grok pattern, and the temp_ip field value is mapped to the entity.ip UDM field.
resource.data.spec.loadBalancerIP entity.ip If the assetType log field value is equal to k8s.io/Service, then temp_ip field is extracted from the resource.data.spec.loadBalancerIP log field using Grok pattern, and the temp_ip field value is mapped to the entity.ip UDM field.
resource.data.status.hostIP entity.ip If the assetType log field value is equal to k8s.io/Pod, then temp_ip field is extracted from the resource.data.status.hostIP log field using Grok pattern, and the temp_ip field value is mapped to the entity.ip UDM field.
resource.data.networkConfig.podIpv4CidrBlock entity.ip If the assetType log field value is equal to container.googleapis.com/NodePool, then temp_ip field is extracted from the resource.data.networkConfig.podIpv4CidrBlock log field using Grok pattern, and the temp_ip field value is mapped to the entity.ip UDM field.
resource.data.spec.podCIDRs entity.ip If the assetType log field value is equal to container.googleapis.com/NodePool, then temp_ip field is extracted from the resource.data.spec.podCIDRs log field using Grok pattern, and the temp_ip field value is mapped to the entity.ip UDM field.
resource.data.location entity.location.name
resource.data.metadata.labels.topology.kubernetes.io/region entity.location.name
resource.data.metadata.labels.failure-domain.beta.kubernetes.io/region entity.location.name If the resource.data.metadata.labels.topology.kubernetes.io/region log field value is empty, then the resource.data.metadata.labels.failure-domain.beta.kubernetes.io/region log field is mapped to the entity.location.name UDM field.
resource.location entity.location.name
resource.data.metadata.namespace entity.namespace
resource.data.privateClusterConfig.publicEndpoint entity.nat_ip
resource.data.status.nodeInfo.operatingSystem entity.platform If one of the following conditions is met, then the entity.platform UDM field is set to LINUX:
  • If the resource.data.status.nodeInfo.operatingSystem log field value is not empty and the resource.data.status.nodeInfo.operatingSystem log field value matches the regular expression pattern linux
  • If the resource.data.spec.nodeSelector.beta.kubernetes.io/os log field value is not empty and the resource.data.spec.nodeSelector.beta.kubernetes.io/os log field value matches the regular expression pattern linux
  • If the resource.data.spec.nodeSelector.kubernetes.io/os log field value is not empty and the resource.data.spec.nodeSelector.kubernetes.io/os log field value matches the regular expression pattern linux
  • If the resource.data.metadata.labels.kubernetes.io/os log field value is not empty and the resource.data.metadata.labels.kubernetes.io/os log field value matches the regular expression pattern linux
  • If the resource.data.metadata.labels.beta.kubernetes.io/os log field value is not empty and the resource.data.metadata.labels.beta.kubernetes.io/os log field value matches the regular expression pattern linux
If the entity.platform UDM field is not mapped then the entity.resource.attribute.labels[kubernetes_operatingSystem] UDM fields is mapped to one of the following log field:
  • resource.data.status.nodeInfo.operatingSystem log field if the resource.data.status.nodeInfo.operatingSystem log field value is not empty
  • resource.data.spec.nodeSelector.beta.kubernetes.io/os log field if the resource.data.spec.nodeSelector.beta.kubernetes.io/os log field value is not empty
  • resource.data.spec.nodeSelector.kubernetes.io/os log field if the resource.data.spec.nodeSelector.kubernetes.io/os log field value is not empty
  • resource.data.metadata.labels.kubernetes.io/os log field if the resource.data.metadata.labels.kubernetes.io/os log field value is not empty
  • resource.data.metadata.labels.beta.kubernetes.io/os log field if the resource.data.metadata.labels.beta.kubernetes.io/os log field value is not empty
resource.data.spec.nodeSelector.beta.kubernetes.io/os entity.platform
resource.data.spec.nodeSelector.kubernetes.io/os entity.platform
resource.data.metadata.labels.kubernetes.io/os entity.platform
resource.data.metadata.labels.beta.kubernetes.io/os entity.platform
resource.data.nodePools.locations entity.resource_ancestors.attribute.cloud.availability_zone
resource.data.spec.template.spec.volumes.name entity.resource_ancestors.name
resource.data.spec.volumes.name entity.resource_ancestors.name
resource.data.nodePools.name entity.resource_ancestors.name
resource.data.network entity.resource_ancestors.name
resource.data.nodePools.config.oauthScopes entity.resource_ancestors.attribute.permissions.name
entity.resource_ancestors.resource_type If the resource.data.nodePools.name log field value is not empty, then the entity.resource_ancestors.resource_type UDM field is set to VIRTUAL_MACHINE.

If the resource.data.network log field value is not empty, then the entity.resource_ancestors.resource_type UDM field is set to VPC_NETWORK.
resource.data.metadata.labels.topology.kubernetes.io/zone entity.resource.attribute.cloud.availability_zone
resource.data.metadata.labels.failure-domain.beta.kubernetes.io/zone entity.resource.attribute.cloud.availability_zone If the resource.data.metadata.labels.topology.kubernetes.io/zone log field value is empty, then the resource.data.metadata.labels.failure-domain.beta.kubernetes.io/zone log field is mapped to the entity.resource.attribute.cloud.availability_zone UDM field.
resource.data.locations entity.resource.attribute.cloud.availability_zone If the first value of the resource.data.spec.containers.ports.protocol log field value is equal to TCP or UDP, then the resource.data.spec.containers.ports.protocol log field is mapped to the relations.entity.network.ip_protocol UDM field.

Else, the resource.data.spec.containers.ports.protocol log field is mapped to the relations.entity.resource.attribute.labels[spec_containers_ports_protocol] UDM field.
entity.resource.attribute.cloud.environment The entity.resource.attribute.cloud.environment UDM field is set to GOOGLE_CLOUD_PLATFORM.
resource.data.metadata.creationTimestamp entity.resource.attribute.creation_time
resource.data.roleRef.name entity.resource.attribute.roles.name
name entity.resource.name
resource.data.config.oauthScopes entity.resource.attribute.permissions.name
resource.data.autoscaling.autoprovisioningNodePoolDefaults.oauthScopes entity.resource.attribute.permissions.name
assetType entity.resource.resource_subtype
entity.resource.resource_type If the assetType log field value is equal to container.googleapis.com/Cluster or container.googleapis.com/NodePool, then the entity.resource.resource_type UDM field is set to CLUSTER.

Else, if the assetType log field value is equal to k8s.io/Node, then the entity.resource.resource_type UDM field is set to VIRTUAL_MACHINE.

Else, if the assetType log field value is equal to k8s.io/Pod, then the entity.resource.resource_type UDM field is set to POD.

Else, if the assetType log field value is equal to networking.k8s.io/NetworkPolicy, then the entity.resource.resource_type UDM field is set to ACCESS_POLICY.

Else, if the assetType log field value is equal to rbac.authorization.k8s.io/ClusterRole or rbac.authorization.k8s.io/ClusterRoleBinding or rbac.authorization.k8s.io/Role or rbac.authorization.k8s.io/RoleBinding, then the entity.resource.resource_type UDM field is set to SETTING.

Else, the entity.resource.resource_type UDM field is set to BACKEND_SERVICE.
resource.data.spec.priority entity.security_result.priority_details If the resource.data.spec.priority log field value is not empty and the resource.data.spec.priorityClassName log field value is not empty, then the resource.data.spec.priority - resource.data.spec.priorityClassName log field is mapped to the entity.security_result.priority_details UDM field.

Else, if the resource.data.spec.priority log field value is not empty, then the resource.data.spec.priorityClassName log field is mapped to the entity.security_result.priority_details UDM field.

Else, if the resource.data.spec.priorityClassName log field value is not empty, then the resource.data.spec.priority log field is mapped to the entity.security_result.priority_details UDM field.
resource.data.spec.priorityClassName entity.security_result.priority_details
resource.data.metadata.selfLink entity.url
resource.data.selfLink entity.url
resource.data.spec.serviceAccountName entity.user.userid
resource.data.createTime metadata.creation_timestamp
resource.data.metadata.annotations.kubernetes.io/deprecation metadata.description
metadata.entity_type The metadata.entity_type UDM field is set to RESOURCE.
resource.data.metadata.uid metadata.product_entity_id The resource.data.metadata.uid log field is mapped to the metadata.product_entity_id UDM field.

If the resource.data.metadata.uid log field value is empty, then the resource.data.id log field is mapped to the metadata.product_entity_id UDM field.

If the resource.data.id log field value is empty, then the resource.data.name log field is mapped to the entity.resource.product_object_id UDM field.
resource.data.id metadata.product_entity_id
resource.data.name metadata.product_entity_id
resource.data.spec.providerID entity.resource.product_object_id If the metadata.product_entity_id UDM field value is empty and the entity.resource.product_object_id UDM field value is empty, then the resource.data.spec.providerID log field is mapped to the entity.resource.product_object_id UDM field.

Else, the resource.data.spec.providerID log field is mapped to the entity.resource.attribute.labels.spec_providerID UDM field.
metadata.product_name The metadata.product_name UDM field is set to GCP Kubernetes.
resource.version metadata.product_version
metadata.vendor_name The metadata.vendor_name UDM field is set to Google Cloud Platform.
relations.entity_type The relations.entity_type UDM field is set to RESOURCE if the value of the following log fields are not empty:
  • ancestors
  • resource.data.metadata.clusterName
  • resource.data.spec.containers.name
  • resource.data.spec.template.spec.containers.name
  • resource.data.spec.template.metadata.clusterName
  • resource.data.status.containerStatuses.name
  • resource.data.status.initContainerStatuses.name
  • resource.data.spec.initContainers.name
  • resource.data.spec.template.spec.initContainers.name
  • resource.data.metadata.ownerReferences.name
resource.data.spec.containers.workingDir relations.entity.file.full_path
resource.data.spec.template.spec.containers.workingDir relations.entity.file.full_path
resource.data.spec.initContainers.workingDir relations.entity.file.full_path
resource.data.spec.template.spec.initContainers.workingDir relations.entity.file.full_path
relations.direction The relations.direction UDM field is set to UNIDIRECTIONAL if the value of the following log fields are not empty:
  • ancestors
  • resource.data.metadata.clusterName
  • resource.data.spec.containers.name
  • resource.data.spec.template.spec.containers.name
  • resource.data.spec.template.metadata.clusterName
  • resource.data.status.containerStatuses.name
  • resource.data.status.initContainerStatuses.name
  • resource.data.spec.initContainers.name
  • resource.data.spec.template.spec.initContainers.name
  • resource.data.metadata.ownerReferences.name
resource.data.spec.containers.ports.protocol relations.entity.network.ip_protocol If the index log field value is equal to 0 and the resource.data.spec.containers.ports.protocol log field value is equal to TCP or UDP, then the resource.data.spec.containers.ports.protocol log field is mapped to the relations.entity.network.ip_protocol UDM field.

Else, the resource.data.spec.containers.ports.protocol log field is mapped to the relations.entity.resource.attribute.labels.spec_containers_portsprotocol%index UDM field.
relations.entity.resource_ancestors.attribute.cloud.environment The res_type field is extracted from the ancestors log field using Grok pattern. If the resource.parent log field value does not contain the res_type field value, then the relations.entity.resource_ancestors.attribute.cloud.environment UDM field is set to GOOGLE_CLOUD_PLATFORM.
ancestors relations.entity.resource_ancestors.name The res_type field is extracted from the ancestors log field using Grok pattern. If the resource.parent log field value does not contain the res_type field value, then the ancestors log field is mapped to the relations.entity.resource_ancestors.name UDM field.
relations.entity.resource_ancestors.resource_subtype The res_type field is extracted from the ancestors log field using Grok pattern. If the resource.parent log field value does not contain the res_type field value, then the res_type field is mapped to the relations.entity.resource_ancestors.resource_subtype UDM field.
relations.entity.resource_ancestors.resource_type The res_type field is extracted from the ancestors log field using Grok pattern. If the resource.parent log field value does not contain the res_type field value, then the relations.entity.resource_ancestors.resource_type UDM field is set to CLOUD_PROJECT.
relations.entity.resource.attribute.cloud.environment The res_type field is extracted from the ancestors log field using Grok pattern. If the resource.parent log field value does not contain the res_type field value, then the relations.entity.resource.attribute.cloud.environment UDM field is set to GOOGLE_CLOUD_PLATFORM.
resource.parent relations.entity.resource.name
resource.data.metadata.clusterName relations.entity.resource.name
resource.data.spec.containers.name relations.entity.resource.name
resource.data.spec.template.spec.containers.name relations.entity.resource.name
resource.data.spec.template.metadata.clusterName relations.entity.resource.name
resource.data.status.containerStatuses.name relations.entity.resource.name
resource.data.status.initContainerStatuses.name relations.entity.resource.name
resource.data.spec.initContainers.name relations.entity.resource.name
resource.data.spec.template.spec.initContainers.name relations.entity.resource.name
resource.data.metadata.ownerReferences.name relations.entity.resource.name
resource.data.status.containerStatuses.containerID relations.entity.resource.product_object_id The container_id field is extracted from the Resource.data.status.containerStatuses.containerID log field using Grok pattern. If the container_id field value is not empty, then the container_id field is mapped to the relations.entity.resource.product_object_id UDM field.
resource.data.status.initContainerStatuses.containerID relations.entity.resource.product_object_id The container_id field is extracted from the Resource.data.status.initContainerStatuses.containerID log field using Grok pattern. If the container_id field value is not empty, then the container_id field is mapped to the relations.entity.resource.product_object_id UDM field.
relations.relationship The relations.relationship UDM field is set to MEMBER if the value of the following log fields are not empty:
  • ancestors
  • resource.data.metadata.clusterName
  • resource.data.spec.containers.name
  • resource.data.spec.template.spec.containers.name
  • resource.data.spec.template.metadata.clusterName
  • resource.data.status.containerStatuses.name
  • resource.data.status.initContainerStatuses.name
  • resource.data.spec.initContainers.name
  • resource.data.spec.template.spec.initContainers.name
  • resource.data.metadata.ownerReferences.name
relations.entity.resource.resource_type The res_type field is extracted from the ancestors log field using Grok pattern. If the res_type field value is not empty and the resource.parent log field value contains res_type field value, then the relations.entity.resource.resource_type UDM field is set to CLOUD_PROJECT.
relations.entity.resource.resource_subtype The res_type field is extracted from the ancestors log field using Grok pattern. If the res_type field value is not empty and the resource.parent log field value contains res_type field value, then the res_type field is mapped to the relations.entity.resource.resource_subtype UDM field.
updateTime entity.resource.attribute.last_update_time
resource.data.nodePools.autoscaling.autoprovisioned entity.resource_ancestors.attribute.labels[nodePools_autoscaling_autoprovisioned]
resource.data.nodePools.autoscaling.enabled entity.resource_ancestors.attribute.labels[nodePools_autoscaling_enabled]
resource.data.nodePools.autoscaling.maxNodeCount entity.resource_ancestors.attribute.labels[nodePools_autoscaling_maxNodeCount]
resource.data.nodePools.config.diskSizeGb entity.resource_ancestors.attribute.labels[nodePools_config_diskSizeGb]
resource.data.nodePools.config.diskType entity.resource_ancestors.attribute.labels[nodePools_config_diskType]
resource.data.nodePools.config.imageType entity.resource_ancestors.attribute.labels[nodePools_config_imageType]
resource.data.nodePools.config.machineType entity.resource_ancestors.attribute.labels[nodePools_config_machineType]
resource.data.nodePools.config.metadata.disable-legacy-endpoints entity.resource_ancestors.attribute.labels[nodePools_config_metadata_disable-legacy-endpoints]
resource.data.nodePools.config.reservationAffinity.consumeReservationType entity.resource_ancestors.attribute.labels[nodePools_config_reservationAffinity_consumeReservationType]
resource.data.nodePools.config.serviceAccount entity.resource_ancestors.attribute.labels[nodePools_config_serviceAccount]
resource.data.nodePools.config.shieldedInstanceConfig.enableIntegrityMonitoring entity.resource_ancestors.attribute.labels[nodePools_config_shieldedInstanceConfig_enableIntegrityMonitoring]
resource.data.nodePools.config.shieldedInstanceConfig.enableSecureBoot entity.resource_ancestors.attribute.labels[nodePools_config_shieldedInstanceConfig_enableSecureBoot]
resource.data.nodePools.config.workloadMetadataConfig.mode entity.resource_ancestors.attribute.labels[nodePools_config_workloadMetadataConfig_mode]
resource.data.nodePools.etag entity.resource_ancestors.attribute.labels[nodePools_etag]
resource.data.nodePools.initialNodeCount entity.resource_ancestors.attribute.labels[nodePools_initialNodeCount]
resource.data.nodePools.instanceGroupUrls entity.resource_ancestors.attribute.labels[nodePools_instanceGroupUrls]
resource.data.nodePools.management.autoRepair entity.resource_ancestors.attribute.labels[nodePools_management_autoRepair]
resource.data.nodePools.management.autoUpgrade entity.resource_ancestors.attribute.labels[nodePools_management_autoUpgrade]
resource.data.nodePools.maxPodsConstraint.maxPodsPerNode entity.resource_ancestors.attribute.labels[nodePools_maxPodsConstraint_maxPodsPerNode]
resource.data.nodePools.networkConfig.enablePrivateNodes entity.resource_ancestors.attribute.labels[nodePools_networkConfig_enablePrivateNodes]
resource.data.nodePools.networkConfig.podIpv4CidrBlock entity.resource_ancestors.attribute.labels[nodePools_networkConfig_podIpv4CidrBlock]
resource.data.nodePools.networkConfig.podRange entity.resource_ancestors.attribute.labels[nodePools_networkConfig_podRange]
resource.data.nodePools.podIpv4CidrSize entity.resource_ancestors.attribute.labels[nodePools_podIpv4CidrSize]
resource.data.nodePools.selfLink entity.resource_ancestors.attribute.labels[nodePools_selfLink]
resource.data.nodePools.status entity.resource_ancestors.attribute.labels[nodePools_status]
resource.data.nodePools.upgradeSettings.maxSurge entity.resource_ancestors.attribute.labels[nodePools_upgradeSettings_maxSurge]
resource.data.nodePools.upgradeSettings.strategy entity.resource_ancestors.attribute.labels[nodePools_upgradeSettings_strategy]
resource.data.nodePools.version entity.resource_ancestors.attribute.labels[nodePools_version]
resource.data.spec.volumes.volumeSource.configMap.defaultMode entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_configMap_defaultMode]
resource.data.spec.volumes.volumeSource.configMap.items.key entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_configMap_items_key]
resource.data.spec.volumes.volumeSource.configMap.items.path entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_configMap_items_path]
resource.data.spec.volumes.volumeSource.configMap.localObjectReference.name entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_configMap_localObjRef_name]
resource.data.spec.volumes.volumeSource.configMap.optional entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_configMap_optional]
resource.data.spec.volumes.volumeSource.emptyDir.medium entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_emptyDir_medium]
resource.data.spec.volumes.volumeSource.hostPath.path entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_hostPath_path]
resource.data.spec.volumes.volumeSource.hostPath.type entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_hostPath_type]
resource.data.spec.volumes.volumeSource.persistentVolumeClaim.claimName entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_persistentVolumeClaim_claimName]
resource.data.spec.volumes.volumeSource.persistentVolumeClaim.readOnly entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_persistentVolumeClaim_readOnly]
resource.data.spec.volumes.volumeSource.projected.defaultMode entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_projected_defaultMode]
resource.data.spec.volumes.volumeSource.projected.sources.configMap.items.key entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_projected_sources_configMap_items_key]
resource.data.spec.volumes.volumeSource.projected.sources.configMap.items.path entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_projected_sources_configMap_items_path]
resource.data.spec.volumes.volumeSource.projected.sources.configMap.localObjectReference.name entity.resource_ancestors.attribute.labels[spec_vols_volSource_proj_src_configMap_localObjRef_name]
resource.data.spec.volumes.volumeSource.projected.sources.downwardAPI.items.fieldRef.apiVersion entity.resource_ancestors.attribute.labels[spec_vol_volSource_proj_src_downwardAPI_items_fieldRef_apiVersion]
resource.data.spec.volumes.volumeSource.projected.sources.downwardAPI.items.fieldRef.fieldPath entity.resource_ancestors.attribute.labels[spec_vols_voSource_proj_src_downwardAPI_items_fieldRef_fieldPath]
resource.data.spec.volumes.volumeSource.projected.sources.downwardAPI.items.path entity.resource_ancestors.attribute.labels[spec_vols_volSource_proj_src_downwardAPI_items_path]
resource.data.spec.volumes.volumeSource.projected.sources.serviceAccountToken.audience entity.resource_ancestors.attribute.labels[spec_vols_volSource_proj_src_serviceAccountToken_audience]
resource.data.spec.volumes.volumeSource.projected.sources.serviceAccountToken.expirationSeconds entity.resource_ancestors.attribute.labels[spec_vols_volSource_proj_src_serviceAccountToken_expirationSeconds]
resource.data.spec.volumes.volumeSource.projected.sources.serviceAccountToken.path entity.resource_ancestors.attribute.labels[spec_vols_volSource_proj_sources_serviceAccountToken_path]
resource.data.spec.volumes.volumeSource.secret.defaultMode entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_secret_defaultMode]
resource.data.spec.volumes.volumeSource.secret.optional entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_secret_optional]
resource.data.spec.volumes.volumeSource.secret.secretName entity.resource_ancestors.attribute.labels[spec_volumes_volumeSource_secret_secretName]
resource.data.spec.template.spec.volumes.volumeSource.configMap.defaultMode entity.resource_ancestors.attribute.labels[tsvv_configMap_defaultMode]
resource.data.spec.template.spec.volumes.volumeSource.configMap.localObjectReference.name entity.resource_ancestors.attribute.labels[tsvv_configMap_localObjectReference_name]
resource.data.spec.template.spec.volumes.volumeSource.configMap.optional entity.resource_ancestors.attribute.labels[tsvv_configMap_optional]
resource.data.spec.template.spec.volumes.volumeSource.emptyDir.medium entity.resource_ancestors.attribute.labels[tsvv_emptyDir_medium]
resource.data.spec.template.spec.volumes.volumeSource.hostPath.path entity.resource_ancestors.attribute.labels[tsvv_hostPath_path]
resource.data.spec.template.spec.volumes.volumeSource.hostPath.type entity.resource_ancestors.attribute.labels[tsvv_hostPath_type]
resource.data.spec.template.spec.volumes.volumeSource.projected.defaultMode entity.resource_ancestors.attribute.labels[tsvv_projected_defaultMode]
resource.data.spec.template.spec.volumes.volumeSource.projected.sources.serviceAccountToken.audience entity.resource_ancestors.attribute.labels[tsvv_proj_sources_serviceAccountToken_audience]
resource.data.spec.template.spec.volumes.volumeSource.projected.sources.serviceAccountToken.expirationSeconds entity.resource_ancestors.attribute.labels[tsvv_projected_sources_serviceAccountToken_expirationSeconds]
resource.data.spec.template.spec.volumes.volumeSource.projected.sources.serviceAccountToken.path entity.resource_ancestors.attribute.labels[tsvv_projected_sources_serviceAccountToken_path]
resource.data.spec.template.spec.volumes.volumeSource.secret.defaultMode entity.resource_ancestors.attribute.labels[tsvv_secret_defaultMode]
resource.data.spec.template.spec.volumes.volumeSource.secret.optional entity.resource_ancestors.attribute.labels[tsvv_secret_optional]
resource.data.spec.template.spec.volumes.volumeSource.secret.secretName entity.resource_ancestors.attribute.labels[tsvv_secret_secretName]
resource.data.networkConfig.datapathProvider entity.resource_ancestors.attribute.labels[networkConfig_datapathProvider]
resource.data.networkConfig.enableIntraNodeVisibility entity.resource_ancestors.attribute.labels[networkConfig_enableIntraNodeVisibility]
resource.data.networkConfig.enablePrivateNodes entity.resource_ancestors.attribute.labels[networkConfig_enablePrivateNodes]
resource.data.networkConfig.network entity.resource_ancestors.attribute.labels[networkConfig_network]
resource.data.networkConfig.podRange entity.resource_ancestors.attribute.labels[networkConfig_podRange]
resource.data.networkConfig.subnetwork entity.resource_ancestors.attribute.labels[networkConfig_subnetwork]
resource.data.addonsConfig.dnsCacheConfig.enabled entity.resource.attribute.labels[addonsConfig_dnsCacheConfig_enabled]
resource.data.addonsConfig.gcePersistentDiskCsiDriverConfig.enabled entity.resource.attribute.labels[addonsConfig_gcePersistentDiskCsiDriverConfig_enabled]
resource.data.addonsConfig.gcpFilestoreCsiDriverConfig.enabled entity.resource.attribute.labels[addonsConfig_gcpFilestoreCsiDriverConfig_enabled]
resource.data.addonsConfig.kubernetesDashboard.disabled entity.resource.attribute.labels[addonsConfig_kubernetesDashboard_disabled]
resource.data.addonsConfig.networkPolicyConfig.disabled entity.resource.attribute.labels[addonsConfig_networkPolicyConfig_disabled]
resource.data.aggregationRule.clusterRoleSelectors.matchLabels.rbac.authorization.k8s.io/aggregate-to-admin entity.resource.attribute.labels[clusterRoleSelectors_rbac_authorization_k8s.io_aggregate-to-admin]
resource.data.aggregationRule.clusterRoleSelectors.matchLabels.rbac.authorization.k8s.io/aggregate-to-edit entity.resource.attribute.labels[clusterRoleSelectors_rbac_authorization_k8s.io_aggregate-to-edit]
resource.data.aggregationRule.clusterRoleSelectors.matchLabels.rbac.authorization.k8s.io/aggregate-to-view entity.resource.attribute.labels[clusterRoleSelectors_authorization_k8s.io_aggregate-to-view]
resource.data.spec.template.metadata.annotations.cluster-autoscaler.kubernetes.io/safe-to-evict entity.resource.attribute.labels[annotations_cluster-autoscaler_kubernetes.io_safe-to-evict]
resource.data.metadata.annotations.container.googleapis.com/instance_id entity.resource.attribute.labels[annotations_container_googleapis_com_instance_id]
resource.data.metadata.annotations.csi.volume.kubernetes.io/nodeid entity.resource.attribute.labels[annotations_csi_volume_kubernetes.io_nodeid]
resource.data.metadata.annotations.node.alpha.kubernetes.io/ttl entity.resource.attribute.labels[annotations_node_alpha_kubernetes.io_ttl]
resource.data.metadata.annotations.node.gke.io/last-applied-node-labels entity.resource.attribute.labels[annotations_node_gke.io_last-applied-node-labels]
resource.data.metadata.annotations.node.gke.io/last-applied-node-taints entity.resource.attribute.labels[annotations_node_gke.io_last-applied-node-taints]
resource.data.metadata.annotations.volumes.kubernetes.io/controller-managed-attach-detach entity.resource.attribute.labels[annotations_volumes_k8s.io_controller-managed-attach-detach]
resource.data.autopilot.enabled entity.resource.attribute.labels[autopilot_enabled]
resource.data.autoscaling.autoprovisioned entity.resource.attribute.labels[autoscaling_autoprovisioned]
resource.data.autoscaling.autoprovisioningNodePoolDefaults.imageType entity.resource.attribute.labels[autoscaling_autoprovisioningNodePoolDefaults_imageType]
resource.data.autoscaling.autoprovisioningNodePoolDefaults.management.autoRepair entity.resource.attribute.labels[autoscaling_autoprovisioningNodePoolDefaults_management_autoRepair]
resource.data.autoscaling.autoprovisioningNodePoolDefaults.management.autoUpgrade entity.resource.attribute.labels[autoscaling_autoprovisioningNodePoolDefaults_management_autoUpgrade]
resource.data.autoscaling.autoprovisioningNodePoolDefaults.upgradeSettings.maxSurge entity.resource.attribute.labels[autoscaling_autoprovisioningNodePoolDefaults_upgradeSettings_maxSurge]
resource.data.autoscaling.autoprovisioningNodePoolDefaults.upgradeSettings.strategy entity.resource.attribute.labels[autoscaling_autoprovisioningNodePoolDefaults_upgradeSettings_strategy]
resource.data.autoscaling.autoscalingProfile entity.resource.attribute.labels[autoscaling_autoscalingProfile]
resource.data.autoscaling.enabled entity.resource.attribute.labels[autoscaling_enabled]
resource.data.autoscaling.enableNodeAutoprovisioning entity.resource.attribute.labels[autoscaling_enableNodeAutoprovisioning]
resource.data.autoscaling.maxNodeCount entity.resource.attribute.labels[autoscaling_maxNodeCount]
resource.data.autoscaling.resourceLimits.maximum entity.resource.attribute.labels[autoscaling_resourceLimits_maximum]
resource.data.autoscaling.resourceLimits.resourceType entity.resource.attribute.labels[autoscaling_resourceLimits_resourceType]
resource.data.binaryAuthorization.evaluationMode entity.resource.attribute.labels[binaryAuthorization_evaluationMode]
resource.data.clusterIpv4Cidr entity.resource.attribute.labels[clusterIpv4Cidr]
resource.data.config.diskSizeGb entity.resource.attribute.labels[config_diskSizeGb]
resource.data.config.diskType entity.resource.attribute.labels[config_diskType]
resource.data.config.imageType entity.resource.attribute.labels[config_imageType]
resource.data.config.machineType entity.resource.attribute.labels[config_machineType]
resource.data.config.metadata.disable-legacy-endpoints entity.resource.attribute.labels[config_metadata_disable-legacy-endpoints]
resource.data.config.reservationAffinity.consumeReservationType entity.resource.attribute.labels[config_reservationAffinity_consumeReservationType]
resource.data.config.shieldedInstanceConfig.enableIntegrityMonitoring entity.resource.attribute.labels[config_shieldedInstanceConfig_enableIntegrityMonitoring]
resource.data.config.shieldedInstanceConfig.enableSecureBoot entity.resource.attribute.labels[config_shieldedInstanceConfig_enableSecureBoot]
resource.data.config.workloadMetadataConfig.mode entity.resource.attribute.labels[config_workloadMetadataConfig_mode]
resource.data.currentMasterVersion entity.resource.attribute.labels[currentMasterVersion]
resource.data.currentNodeCount entity.resource.attribute.labels[currentNodeCount]
resource.data.databaseEncryption.state entity.resource.attribute.labels[databaseEncryption_state]
resource.data.defaultMaxPodsConstraint.maxPodsPerNode entity.resource.attribute.labels[defaultMaxPodsConstraint_maxPodsPerNode]
resource.data.maxPodsConstraint.maxPodsPerNode entity.resource.attribute.labels[maxPodsConstraint_maxPodsPerNode]
resource.data.metadata.annotations.deployment.kubernetes.io/desired-replicas entity.resource.attribute.labels[deployment_kubernetes.io_desired-replicas]
resource.data.metadata.annotations.deployment.kubernetes.io/max-replicas entity.resource.attribute.labels[deployment_kubernetes.io_max-replicas]
resource.data.metadata.annotations.deployment.kubernetes.io/revision entity.resource.attribute.labels[deployment_kubernetes.io_revision]
resource.discoveryDocumentUri entity.resource.attribute.labels[discovery_document]
resource.discoveryName entity.resource.attribute.labels[discovery_name]
resource.data.endpoint entity.resource.attribute.labels[endpoint]
resource.data.etag entity.resource.attribute.labels[etag]
resource.data.initialClusterVersion entity.resource.attribute.labels[initialClusterVersion]
resource.data.initialNodeCount entity.resource.attribute.labels[initialNodeCount]
resource.data.ipAllocationPolicy.clusterIpv4CidrBlock entity.resource.attribute.labels[ipAllocationPolicy_clusterIpv4CidrBlock]
resource.data.ipAllocationPolicy.clusterSecondaryRangeName entity.resource.attribute.labels[ipAllocationPolicy_clusterSecondaryRangeName]
resource.data.ipAllocationPolicy.servicesIpv4CidrBlock entity.resource.attribute.labels[ipAllocationPolicy_servicesIpv4CidrBlock]
resource.data.ipAllocationPolicy.servicesSecondaryRangeName entity.resource.attribute.labels[ipAllocationPolicy_servicesSecondaryRangeName]
resource.data.ipAllocationPolicy.stackType entity.resource.attribute.labels[ipAllocationPolicy_stackType]
resource.data.ipAllocationPolicy.useIpAliases entity.resource.attribute.labels[ipAllocationPolicy_useIpAliases]
resource.data.labelFingerprint entity.resource.attribute.labels[labelFingerprint]
resource.data.loggingConfig.componentConfig.enableComponents entity.resource.attribute.labels[loggingConfig_componentConfig_enableComponents]
resource.data.loggingService entity.resource.attribute.labels[loggingService]
resource.data.management.autoRepair entity.resource.attribute.labels[management_autoRepair]
resource.data.management.autoUpgrade entity.resource.attribute.labels[management_autoUpgrade]
resource.data.masterAuth.clusterCaCertificate entity.resource.attribute.labels[masterAuth_clusterCaCertificate]
resource.data.masterAuthorizedNetworksConfig.enabled entity.resource.attribute.labels[masterAuthorizedNetworksConfig_enabled]
resource.data.masterAuthorizedNetworksConfig.gcpPublicCidrsAccessEnabled entity.resource.attribute.labels[masterAuthorizedNetworksConfig_gcpPublicCidrsAccessEnabled]
resource.data.metadata.annotations.batch.kubernetes.io/job-tracking entity.resource.attribute.labels[metadata_annotations_batch_kubernetes.io/job-tracking]
resource.data.metadata.annotations.bundling-component entity.resource.attribute.labels[metadata_annotations_bundling-component]
resource.data.metadata.annotations.cloud.google.com/neg entity.resource.attribute.labels[metadata_annotations_cloud_google_com/neg]
resource.data.metadata.annotations.cluster-autoscaler.kubernetes.io/safe-to-evict entity.resource.attribute.labels[metadata_annotations_cluster-autoscaler_kubernetes.io/safe-to-evict]
resource.data.metadata.annotations.components.gke.io/component-name entity.resource.attribute.labels[metadata_annotations_components_gke.io/component-name]
resource.data.metadata.annotations.components.gke.io/component-version entity.resource.attribute.labels[metadata_annotations_components_gke.io/component-version]
resource.data.metadata.annotations.components.gke.io/layer entity.resource.attribute.labels[metadata_annotations_components_gke.io/layer]
resource.data.metadata.annotations.composer.cloud.google.com/running-task entity.resource.attribute.labels[metadata_annotations_composer_cloud_google_com/running-task]
resource.data.metadata.annotations.composer.cloud.google.com/template-version entity.resource.attribute.labels[metadata_annotations_composer_cloud_google_com/template-version]
resource.data.metadata.annotations.configHash entity.resource.attribute.labels[metadata_annotations_configHash]
resource.data.metadata.annotations.container.seccomp.security.alpha.kubernetes.io/gke-metrics-agent entity.resource.attribute.labels[metadata_annotations_container_seccomp_sec_alpha_gke-metrics-agent]
resource.data.metadata.annotations.container.seccomp.security.alpha.kubernetes.io/metrics-server-nanny entity.resource.attribute.labels[metadata_annotations_container_seccomp_sec_alpha_metrics-server-nanny]
resource.data.metadata.annotations.container.seccomp.security.alpha.kubernetes.io/metrics-server entity.resource.attribute.labels[metadata_annotations_container_seccomp_sec_alpha_metrics-server]
resource.data.metadata.annotations.credential-normal-mode entity.resource.attribute.labels[metadata_annotations_credential-normal-mode]
resource.data.metadata.annotations.EnableNodeJournal entity.resource.attribute.labels[metadata_annotations_EnableNodeJournal]
resource.data.metadata.annotations.kubernetes.io/config.hash entity.resource.attribute.labels[metadata_annotations_kubernetes.io/config_hash]
resource.data.metadata.annotations.kubernetes.io/config.mirror entity.resource.attribute.labels[metadata_annotations_kubernetes.io/config_mirror]
resource.data.metadata.annotations.kubernetes.io/config.seen entity.resource.attribute.labels[metadata_annotations_kubernetes.io/config_seen]
resource.data.metadata.annotations.kubernetes.io/config.source entity.resource.attribute.labels[metadata_annotations_kubernetes.io/config_source]
resource.data.metadata.annotations.monitoring.gke.io/path entity.resource.attribute.labels[metadata_annotations_monitoring_gke.io/path]
resource.data.metadata.annotations.orphanDependents entity.resource.attribute.labels[metadata_annotations_orphanDependents]
resource.data.metadata.annotations.prometheus.io/port entity.resource.attribute.labels[metadata_annotations_prometheus.io/port]
resource.data.metadata.annotations.prometheus.io/scrape entity.resource.attribute.labels[metadata_annotations_prometheus.io/scrape]
resource.data.metadata.annotations.rbac.authorization.kubernetes.io/autoupdate entity.resource.attribute.labels[metadata_annotations_rbac_authorization_kubernetes.io/autoupdate]
resource.data.metadata.annotations.scheduler.alpha.kubernetes.io/critical-pod entity.resource.attribute.labels[metadata_annotations_scheduler_alpha_kubernetes.io/critical-pod]
resource.data.metadata.annotations.seccomp.security.alpha.kubernetes.io/pod entity.resource.attribute.labels[metadata_annotations_seccomp_security_alpha_kubernetes.io/pod]
resource.data.metadata.annotations.SystemOnlyLogging entity.resource.attribute.labels[metadata_annotations_SystemOnlyLogging]
resource.data.metadata.generateName entity.resource.attribute.labels[metadata_generateName]
resource.data.metadata.generation entity.resource.attribute.labels[metadata_generation]
resource.data.metadata.labels.addon.gke.io/node-local-dns-ds-ready entity.resource.attribute.labels[metadata_labels_addon_gke.io/node-local-dns-ds-ready]
resource.data.metadata.labels.addonmanager.kubernetes.io/mode entity.resource.attribute.labels[metadata_labels_addonmanager_kubernetes.io/mode]
resource.data.metadata.labels.app entity.resource.attribute.labels[metadata_labels_app]
resource.data.metadata.labels.beta.kubernetes.io/arch entity.resource.attribute.labels[metadata_labels_beta_kubernetes.io/arch]
resource.data.metadata.labels.beta.kubernetes.io/instance-type entity.resource.attribute.labels[metadata_labels_beta_kubernetes.io/instance-type]
resource.data.metadata.labels.cloud.google.com/gke-boot-disk entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-boot-disk]
resource.data.metadata.labels.cloud.google.com/gke-container-runtime entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-container-runtime]
resource.data.metadata.labels.cloud.google.com/gke-cpu-scaling-level entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-cpu-scaling-level]
resource.data.metadata.labels.cloud.google.com/gke-logging-variant entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-logging-variant]
resource.data.metadata.labels.cloud.google.com/gke-max-pods-per-node entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-max-pods-per-node]
resource.data.metadata.labels.cloud.google.com/gke-netd-ready entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-netd-ready]
resource.data.metadata.labels.cloud.google.com/gke-nodepool entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-nodepool]
resource.data.metadata.labels.cloud.google.com/gke-os-distribution entity.resource.attribute.labels[metadata_labels_cloud_google_com/gke-os-distribution]
resource.data.metadata.labels.cloud.google.com/machine-family entity.resource.attribute.labels[metadata_labels_cloud_google_com/machine-family]
resource.data.metadata.labels.cloud.google.com/private-node entity.resource.attribute.labels[metadata_labels_cloud_google_com/private-node]
resource.data.metadata.labels.component entity.resource.attribute.labels[metadata_labels_component]
resource.data.metadata.labels.composer-component entity.resource.attribute.labels[metadata_labels_composer-component]
resource.data.metadata.labels.composer-system-pod entity.resource.attribute.labels[metadata_labels_composer-system-pod]
resource.data.metadata.labels.control-plane entity.resource.attribute.labels[metadata_labels_control-plane]
resource.data.metadata.labels.controller-revision-hash entity.resource.attribute.labels[metadata_labels_controller-revision-hash]
resource.data.metadata.labels.controller-uid entity.resource.attribute.labels[metadata_labels_controller-uid]
resource.data.metadata.labels.gke-app entity.resource.attribute.labels[metadata_labels_gke-app]
resource.data.metadata.labels.iam.gke.io/gke-metadata-server-enabled entity.resource.attribute.labels[metadata_labels_iam_gke.io/gke-metadata-server-enabled]
resource.data.metadata.labels.job-name entity.resource.attribute.labels[metadata_labels_job-name]
resource.data.metadata.labels.k8s-app entity.resource.attribute.labels[metadata_labels_k8s-app]
resource.data.metadata.labels.kubernetes.io/metadata.name entity.resource.attribute.labels[metadata_labels_k8s.io/metadata_name]
resource.data.metadata.labels.kubernetes.io/arch entity.resource.attribute.labels[metadata_labels_kubernetes.io/arch]
resource.data.metadata.labels.kubernetes.io/bootstrapping entity.resource.attribute.labels[metadata_labels_kubernetes.io/bootstrapping]
resource.data.metadata.labels.kubernetes.io/cluster-service entity.resource.attribute.labels[metadata_labels_kubernetes.io/cluster-service]
resource.data.metadata.labels.kubernetes.io/name entity.resource.attribute.labels[metadata_labels_kubernetes.io/name]
resource.data.metadata.labels.name entity.resource.attribute.labels[metadata_labels_name]
resource.data.metadata.labels.node.kubernetes.io/instance-type entity.resource.attribute.labels[metadata_labels_node_kubernetes.io/instance-type]
resource.data.metadata.labels.node.kubernetes.io/masq-agent-ds-ready entity.resource.attribute.labels[metadata_labels_node_kubernetes.io/masq-agent-ds-ready]
resource.data.metadata.labels.nodeType entity.resource.attribute.labels[metadata_labels_nodeType]
resource.data.metadata.labels.pod-template-generation entity.resource.attribute.labels[metadata_labels_pod-template-generation]
resource.data.metadata.labels.pod-template-hash entity.resource.attribute.labels[metadata_labels_pod-template-hash]
resource.data.metadata.labels.provider entity.resource.attribute.labels[metadata_labels_provider]
resource.data.metadata.labels.run entity.resource.attribute.labels[metadata_labels_run]
resource.data.metadata.labels.statefulset.kubernetes.io/pod-name entity.resource.attribute.labels[metadata_labels_statefulset_kubernetes.io/pod-name]
resource.data.metadata.labels.tier entity.resource.attribute.labels[metadata_labels_tier]
resource.data.metadata.labels.topology.gke.io/zone entity.resource.attribute.labels[metadata_labels_topology_gke.io/zone]
resource.data.metadata.labels.version entity.resource.attribute.labels[metadata_labels_version]
resource.data.metadata.managedFields.apiVersion entity.resource.attribute.labels[metadata_managedFields_apiVersion]
resource.data.metadata.managedFields.fieldsType entity.resource.attribute.labels[metadata_managedFields_fieldsType]
resource.data.metadata.managedFields.fieldsV1.Raw entity.resource.attribute.labels[metadata_managedFields_fieldsV1_Raw]
resource.data.metadata.managedFields.manager entity.resource.attribute.labels[metadata_managedFields_manager]
resource.data.metadata.managedFields.operation entity.resource.attribute.labels[metadata_managedFields_operation]
resource.data.metadata.managedFields.subresource entity.resource.attribute.labels[metadata_managedFields_subresource]
resource.data.metadata.managedFields.time entity.resource.attribute.labels[metadata_managedFields_time]
resource.data.metadata.name entity.resource.attribute.labels[metadata_name]
resource.data.metadata.resourceVersion entity.resource.attribute.labels[metadata_resourceVersion]
resource.data.monitoringConfig.advancedDatapathObservabilityConfig.relayMode entity.resource.attribute.labels[monitoringConfig_advancedDatapathObservabilityConfig_relayMode]
resource.data.monitoringConfig.componentConfig.enableComponents entity.resource.attribute.labels[monitoringConfig_componentConfig_enableComponents]
resource.data.monitoringService entity.resource.attribute.labels[monitoringService]
resource.data.nodePoolDefaults.nodeConfigDefaults.loggingConfig.variantConfig.variant entity.resource.attribute.labels[nodeConfigDefaults_loggingConfig_variantConfig_variant]
resource.data.spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey entity.resource.attribute.labels[template_pdside_podAntiAffinity_topologyKey]
resource.data.spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.values entity.resource.attribute.labels[template_pdside_podAntiAffinity_matchExp_values]
resource.data.spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.key entity.resource.attribute.labels[template_pdside_podAntiAffinity_matchExp_key]
resource.data.spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.operator entity.resource.attribute.labels[template_pdside_podAntiAffinity_matchExp_operator]
resource.data.spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.weight entity.resource.attribute.labels[template_pdside_podAntiAffinity_weight]
resource.data.podIpv4CidrSize entity.resource.attribute.labels[podIpv4CidrSize]
resource.data.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.key entity.resource.attribute.labels[pdside_podAntiAffinity_matchExp_key]
resource.data.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.operator entity.resource.attribute.labels[pdside_podAntiAffinity_matchExp_operator]
resource.data.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.labelSelector.matchExpressions.values entity.resource.attribute.labels[pdside_podAntiAffinity_matchExp_values]
resource.data.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.podAffinityTerm.topologyKey entity.resource.attribute.labels[pdside_podAntiAffinity_topologyKey]
resource.data.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution.weight entity.resource.attribute.labels[pdside_podAntiAffinity_weight]
resource.data.privateClusterConfig.enablePrivateNodes entity.resource.attribute.labels[privateClusterConfig_enablePrivateNodes]
resource.data.privateClusterConfig.masterIpv4CidrBlock entity.resource.attribute.labels[privateClusterConfig_masterIpv4CidrBlock]
resource.data.privateClusterConfig.peeringName entity.resource.attribute.labels[privateClusterConfig_peeringName]
resource.data.metadata.labels.rbac.authorization.k8s.io/aggregate-to-admin entity.resource.attribute.labels[rbac_authorization_k8s.io_aggregate-to-admin]
resource.data.metadata.labels.rbac.authorization.k8s.io/aggregate-to-edit entity.resource.attribute.labels[rbac_authorization_k8s.io_aggregate-to-edit]
resource.data.metadata.labels.rbac.authorization.k8s.io/aggregate-to-view entity.resource.attribute.labels[rbac_authorization_k8s.io_aggregate-to-view]
resource.data.releaseChannel.channel entity.resource.attribute.labels[releaseChannel_channel]
resource.data.spec.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution.labelSelector.matchExpressions.key entity.resource.attribute.labels[rdside_labelSelector_matchExp_key]
resource.data.spec.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution.labelSelector.matchExpressions.operator entity.resource.attribute.labels[rdside_labelSelector_matchExp_operator]
resource.data.spec.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution.labelSelector.matchExpressions.values entity.resource.attribute.labels[rdside_labelSelector_matchExp_values]
resource.data.spec.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields.key entity.resource.attribute.labels[rdside_nodeSelector_matchFields_key]
resource.data.spec.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields.operator entity.resource.attribute.labels[rdside_nodeSelector_matchFields_operator]
resource.data.spec.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms.matchFields.values entity.resource.attribute.labels[rdside_nodeSelector_matchFields_values]
resource.data.spec.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution.topologyKey entity.resource.attribute.labels[rdside_topologykey]
resource.data.name entity.resource.attribute.labels[resource_name]
resource.data.resourceLabels.goog-composer-environment-uuid entity.resource.attribute.labels[resourceLabels_goog-composer-environment-uuid]
resource.data.resourceLabels.goog-composer-environment entity.resource.attribute.labels[resourceLabels_goog-composer-environment]
resource.data.resourceLabels.goog-composer-location entity.resource.attribute.labels[resourceLabels_goog-composer-location]
resource.data.resourceLabels.goog-composer-version entity.resource.attribute.labels[resourceLabels_goog-composer-version]
resource.data.resourceLabels.label entity.resource.attribute.labels[resourceLabels_label]
resource.data.roleRef.apiGroup entity.resource.attribute.labels[roleRef_apiGroup]
resource.data.roleRef.kind entity.resource.attribute.labels[roleRef_kind]
resource.data.spec.selector.matchLabels.pod-template-hash entity.resource.attribute.labels[selector_matchLabels_pod-template-hash]
resource.data.servicesIpv4Cidr entity.resource.attribute.labels[servicesIpv4Cidr]
resource.data.shieldedNodes.enabled entity.resource.attribute.labels[shieldedNodes_enabled]
resource.data.spec.activeDeadlineSeconds entity.resource.attribute.labels[spec_activeDeadlineSeconds]
resource.data.spec.backoffLimit entity.resource.attribute.labels[spec_backoffLimit]
resource.data.spec.clusterIP entity.resource.attribute.labels[spec_clusterIP]
resource.data.spec.completionMode entity.resource.attribute.labels[spec_completionMode]
resource.data.spec.completions entity.resource.attribute.labels[spec_completions]
resource.data.spec.enableServiceLinks entity.resource.attribute.labels[spec_enableServiceLinks]
resource.data.spec.externalID entity.resource.attribute.labels[spec_externalID]
resource.data.spec.externalName entity.resource.attribute.labels[spec_externalName]
resource.data.spec.finalizers entity.resource.attribute.labels[spec_finalizers]
resource.data.spec.healthCheckNodePort entity.resource.attribute.labels[spec_healthCheckNodePort]
resource.data.spec.hostIPC entity.resource.attribute.labels[spec_hostIPC]
resource.data.spec.hostNetwork entity.resource.attribute.labels[spec_hostNetwork]
resource.data.spec.hostPID entity.resource.attribute.labels[spec_hostPID]
resource.data.spec.minReadySeconds entity.resource.attribute.labels[spec_minReadySeconds]
resource.data.spec.nodeName entity.resource.attribute.labels[spec_nodeName]
resource.data.spec.nodeSelector.addon.gke.io/node-local-dns-ds-ready entity.resource.attribute.labels[spec_nodeSelector_addon_gke.io/node-local-dns-ds-ready]
resource.data.spec.nodeSelector.cloud.google.com/gke-netd-ready entity.resource.attribute.labels[spec_nodeSelector_cloud_google_com/gke-netd-ready]
resource.data.spec.nodeSelector.iam.gke.io/gke-metadata-server-enabled entity.resource.attribute.labels[spec_nodeSelector_iam_gke.io/gke-metadata-server-enabled]
resource.data.spec.nodeSelector.node.kubernetes.io/masq-agent-ds-ready entity.resource.attribute.labels[spec_nodeSelector_node_kubernetes.io/masq-agent-ds-ready]
resource.data.spec.parallelism entity.resource.attribute.labels[spec_parallelism]
resource.data.spec.paused entity.resource.attribute.labels[spec_paused]
resource.data.spec.ports.name entity.resource.attribute.labels[spec_ports_name]
resource.data.spec.ports.nodePort entity.resource.attribute.labels[spec_ports_nodePort]
resource.data.spec.ports.port entity.resource.attribute.labels[spec_ports_port]
resource.data.spec.ports.protocol entity.resource.attribute.labels[spec_ports_protocol]
resource.data.spec.ports.targetPort entity.resource.attribute.labels[spec_ports_targetPort]
resource.data.spec.progressDeadlineSeconds entity.resource.attribute.labels[spec_progressDeadlineSeconds]
resource.data.spec.publishNotReadyAddresses entity.resource.attribute.labels[spec_publishNotReadyAddresses]
resource.data.spec.replicas entity.resource.attribute.labels[spec_replicas]
resource.data.spec.revisionHistoryLimit entity.resource.attribute.labels[spec_revisionHistoryLimit]
resource.data.spec.schedulerName entity.resource.attribute.labels[spec_schedulerName]
resource.data.spec.securityContext.fsGroup entity.resource.attribute.labels[spec_securityContext_fsGroup]
resource.data.spec.securityContext.runAsGroup entity.resource.attribute.labels[spec_securityContext_runAsGroup]
resource.data.spec.securityContext.runAsNonRoot entity.resource.attribute.labels[spec_securityContext_runAsNonRoot]
resource.data.spec.securityContext.runAsUser entity.resource.attribute.labels[spec_securityContext_runAsUser]
resource.data.spec.securityContext.supplementalGroups entity.resource.attribute.labels[spec_securityContext_supplementalGroups]
resource.data.spec.selector.app entity.resource.attribute.labels[spec_selector_app]
resource.data.spec.selector.k8s-app entity.resource.attribute.labels[spec_selector_k8s-app]
resource.data.spec.selector.matchLabels.app entity.resource.attribute.labels[spec_selector_matchLabels_app]
resource.data.spec.selector.matchLabels.component entity.resource.attribute.labels[spec_selector_matchLabels_component]
resource.data.spec.selector.matchLabels.control-plane entity.resource.attribute.labels[spec_selector_matchLabels_control-plane]
resource.data.spec.selector.matchLabels.controller-uid entity.resource.attribute.labels[spec_selector_matchLabels_controller-uid]
resource.data.spec.selector.matchLabels.gke-app entity.resource.attribute.labels[spec_selector_matchLabels_gke-app]
resource.data.spec.selector.matchLabels.k8s-app entity.resource.attribute.labels[spec_selector_matchLabels_k8s-app]
resource.data.spec.selector.matchLabels.run entity.resource.attribute.labels[spec_selector_matchLabels_run]
resource.data.spec.selector.matchLabels.version entity.resource.attribute.labels[spec_selector_matchLabels_version]
resource.data.spec.selector.run entity.resource.attribute.labels[spec_selector_run]
resource.data.spec.sessionAffinity entity.resource.attribute.labels[spec_sessionAffinity]
resource.data.spec.strategy.rollingUpdate.maxSurge entity.resource.attribute.labels[spec_strategy_rollingUpdate_maxSurge]
resource.data.spec.strategy.rollingUpdate.maxUnavailable entity.resource.attribute.labels[spec_strategy_rollingUpdate_maxUnavailable]
resource.data.spec.strategy.type entity.resource.attribute.labels[spec_strategy_type]
resource.data.spec.subdomain entity.resource.attribute.labels[spec_subdomain]
resource.data.spec.suspend entity.resource.attribute.labels[spec_suspend]
resource.data.spec.template.metadata.annotations.components.gke.io/component-name entity.resource.attribute.labels[spec_template_metadata_annotations_components_gke.io/component-name]
resource.data.spec.template.metadata.annotations.components.gke.io/component-version entity.resource.attribute.labels[spec_template_metadata_annotations_components_gke.io/component-version]
resource.data.spec.template.metadata.annotations.prometheus.io/port entity.resource.attribute.labels[spec_template_metadata_annotations_prometheus.io/port]
resource.data.spec.template.metadata.annotations.prometheus.io/scrape entity.resource.attribute.labels[spec_template_metadata_annotations_prometheus.io/scrape]
resource.data.spec.template.metadata.annotations.scheduler.alpha.kubernetes.io/critical-pod entity.resource.attribute.labels[spec_template_metadata_annotations_scheduler_alpha_k8s/critical-pod]
resource.data.spec.template.metadata.annotations.seccomp.security.alpha.kubernetes.io/pod entity.resource.attribute.labels[spec_template_metadata_annotations_seccomp_sec_alpha_k8s_pod]
resource.data.spec.template.metadata.creationTimestamp entity.resource.attribute.labels[spec_template_metadata_creationTimestamp]
resource.data.spec.template.metadata.generateName entity.resource.attribute.labels[spec_template_metadata_generateName]
resource.data.spec.template.metadata.generation entity.resource.attribute.labels[spec_template_metadata_generation]
resource.data.spec.template.metadata.labels.app entity.resource.attribute.labels[spec_template_metadata_labels_app]
resource.data.spec.template.metadata.labels.component entity.resource.attribute.labels[spec_template_metadata_labels_component]
resource.data.spec.template.metadata.labels.composer-component entity.resource.attribute.labels[spec_template_metadata_labels_composer-component]
resource.data.spec.template.metadata.labels.composer-system-pod entity.resource.attribute.labels[spec_template_metadata_labels_composer-system-pod]
resource.data.spec.template.metadata.labels.control-plane entity.resource.attribute.labels[spec_template_metadata_labels_control-plane]
resource.data.spec.template.metadata.labels.controller-uid entity.resource.attribute.labels[spec_template_metadata_labels_controller-uid]
resource.data.spec.template.metadata.labels.gke-app entity.resource.attribute.labels[spec_template_metadata_labels_gke-app]
resource.data.spec.template.metadata.labels.job-name entity.resource.attribute.labels[spec_template_metadata_labels_job-name]
resource.data.spec.template.metadata.labels.k8s-app entity.resource.attribute.labels[spec_template_metadata_labels_k8s-app]
resource.data.spec.template.metadata.labels.kubernetes.io/cluster-service entity.resource.attribute.labels[spec_template_metadata_labels_kubernetes.io/cluster-service]
resource.data.spec.template.metadata.labels.name entity.resource.attribute.labels[spec_template_metadata_labels_name]
resource.data.spec.template.metadata.labels.run entity.resource.attribute.labels[spec_template_metadata_labels_run]
resource.data.spec.template.metadata.labels.version entity.resource.attribute.labels[spec_template_metadata_labels_version]
resource.data.spec.template.metadata.name entity.resource.attribute.labels[spec_template_metadata_name]
resource.data.spec.template.metadata.namespace entity.resource.attribute.labels[spec_template_metadata_namespace]
resource.data.spec.template.metadata.resourceVersion entity.resource.attribute.labels[spec_template_metadata_resourceVersion]
resource.data.spec.template.metadata.selfLink entity.resource.attribute.labels[spec_template_metadata_selfLink]
resource.data.spec.template.metadata.uid entity.resource.attribute.labels[spec_template_metadata_uid]
resource.data.spec.template.spec.hostIPC entity.resource.attribute.labels[spec_template_spec_hostIPC]
resource.data.spec.template.spec.hostname entity.resource.attribute.labels[spec_template_spec_hostname]
resource.data.spec.template.spec.hostNetwork entity.resource.attribute.labels[spec_template_spec_hostNetwork]
resource.data.spec.template.spec.hostPID entity.resource.attribute.labels[spec_template_spec_hostPID]
resource.data.spec.template.spec.nodeName entity.resource.attribute.labels[spec_template_spec_nodeName]
resource.data.spec.template.spec.nodeSelector.beta.kubernetes.io/os entity.resource.attribute.labels[spec_template_spec_nodeSelector_beta_kubernetes.io/os]
resource.data.spec.template.spec.nodeSelector.kubernetes.io/os entity.resource.attribute.labels[spec_template_spec_nodeSelector_kubernetes.io/os]
resource.data.spec.template.spec.priorityClassName entity.resource.attribute.labels[spec_template_spec_priorityClassName]
resource.data.spec.template.spec.schedulerName entity.resource.attribute.labels[spec_template_spec_schedulerName]
resource.data.spec.template.spec.securityContext.fsGroup entity.resource.attribute.labels[spec_template_spec_securityContext_fsGroup]
resource.data.spec.template.spec.securityContext.runAsGroup entity.resource.attribute.labels[spec_template_spec_securityContext_runAsGroup]
resource.data.spec.template.spec.securityContext.runAsUser entity.resource.attribute.labels[spec_template_spec_securityContext_runAsUser]
resource.data.spec.template.spec.securityContext.supplementalGroups entity.resource.attribute.labels[spec_template_spec_securityContext_supplementalGroups]
resource.data.spec.template.spec.serviceAccount entity.resource.attribute.labels[spec_template_spec_serviceAccount]
resource.data.spec.template.spec.serviceAccountName entity.resource.attribute.labels[spec_template_spec_serviceAccountName]
resource.data.spec.template.spec.subdomain entity.resource.attribute.labels[spec_template_spec_subdomain]
resource.data.spec.template.spec.terminationGracePeriodSeconds entity.resource.attribute.labels[spec_template_spec_terminationGracePeriodSeconds]
resource.data.spec.template.spec.tolerations.effect entity.resource.attribute.labels[spec_template_spec_tolerations_effect]
resource.data.spec.template.spec.tolerations.key entity.resource.attribute.labels[spec_template_spec_tolerations_key]
resource.data.spec.template.spec.tolerations.operator entity.resource.attribute.labels[spec_template_spec_tolerations_operator]
resource.data.spec.template.spec.tolerations.value entity.resource.attribute.labels[spec_template_spec_tolerations_value]
resource.data.spec.template.spec.topologySpreadConstraints.labelSelector.matchLabels.k8s-app entity.resource.attribute.labels[spec_template_spec_topology_matchLabels_k8s-app]
resource.data.spec.template.spec.topologySpreadConstraints.maxSkew entity.resource.attribute.labels[spec_template_spec_topologySpreadConstraints_maxSkew]
resource.data.spec.template.spec.topologySpreadConstraints.topologyKey entity.resource.attribute.labels[spec_template_spec_topology_topologyKey]
resource.data.spec.template.spec.topologySpreadConstraints.whenUnsatisfiable entity.resource.attribute.labels[spec_template_spec_topologyConst_whenUnsatisfiable]
resource.data.spec.terminationGracePeriodSeconds entity.resource.attribute.labels[spec_terminationGracePeriodSeconds]
resource.data.spec.tolerations.effect entity.resource.attribute.labels[spec_tolerations_effect]
resource.data.spec.tolerations.key entity.resource.attribute.labels[spec_tolerations_key]
resource.data.spec.tolerations.operator entity.resource.attribute.labels[spec_tolerations_operator]
resource.data.spec.tolerations.tolerationSeconds entity.resource.attribute.labels[spec_tolerations_tolerationSeconds]
resource.data.spec.tolerations.value entity.resource.attribute.labels[spec_tolerations_value]
resource.data.spec.topologySpreadConstraints.labelSelector.matchLabels.k8s-app entity.resource.attribute.labels[spec_topologySpreadConstraints_labelSelector_matchLabels_k8s-app]
resource.data.spec.topologySpreadConstraints.maxSkew entity.resource.attribute.labels[spec_topologySpreadConstraints_maxSkew]
resource.data.spec.topologySpreadConstraints.topologyKey entity.resource.attribute.labels[spec_topologySpreadConstraints_topologyKey]
resource.data.spec.topologySpreadConstraints.whenUnsatisfiable entity.resource.attribute.labels[spec_topologySpreadConstraints_whenUnsatisfiable]
resource.data.spec.type entity.resource.attribute.labels[spec_type]
resource.data.spec.unschedulable entity.resource.attribute.labels[spec_unschedulable]
resource.data.status.active entity.resource.attribute.labels[status_active]
resource.data.status.addresses.address entity.resource.attribute.labels[status_addresses_address]
resource.data.status.addresses.type entity.resource.attribute.labels[status_addresses_address]
resource.data.status.allocatable.attachable-volumes-gce-pd entity.resource.attribute.labels[status_allocatable_attachable-volumes-gce-pd]
resource.data.status.allocatable.cpu entity.resource.attribute.labels[status_allocatable_cpu]
resource.data.status.allocatable.ephemeral-storage entity.resource.attribute.labels[status_allocatable_ephemeral-storage]
resource.data.status.allocatable.hugepages-1Gi entity.resource.attribute.labels[status_allocatable_hugepages-1Gi]
resource.data.status.allocatable.hugepages-2Mi entity.resource.attribute.labels[status_allocatable_hugepages-2Mi]
resource.data.status.allocatable.memory entity.resource.attribute.labels[status_allocatable_memory]
resource.data.status.allocatable.pods entity.resource.attribute.labels[status_allocatable_pods]
resource.data.status.availableReplicas entity.resource.attribute.labels[status_availableReplicas]
resource.data.status.capacity.attachable-volumes-gce-pd entity.resource.attribute.labels[status_capacity_attachable-volumes-gce-pd]
resource.data.status.capacity.cpu entity.resource.attribute.labels[status_capacity_cpu]
resource.data.status.capacity.ephemeral-storage entity.resource.attribute.labels[status_capacity_ephemeral-storage]
resource.data.status.capacity.hugepages-1Gi entity.resource.attribute.labels[status_capacity_hugepages-1Gi]
resource.data.status.capacity.hugepages-2Mi entity.resource.attribute.labels[status_capacity_hugepages-2Mi]
resource.data.status.capacity.memory entity.resource.attribute.labels[status_capacity_memory]
resource.data.status.capacity.pods entity.resource.attribute.labels[status_capacity_pods]
resource.data.status.completedIndexes entity.resource.attribute.labels[status_completedIndexes]
resource.data.status.completionTime entity.resource.attribute.labels[status_completionTime]
resource.data.status.conditions.lastProbeTime entity.resource.attribute.labels[status_conditions_lastProbeTime]
resource.data.status.conditions.lastTransitionTime entity.resource.attribute.labels[status_conditions_lastTransitionTime]
resource.data.status.conditions.lastUpdateTime entity.resource.attribute.labels[status_conditions_lastUpdateTime]
resource.data.status.conditions.message entity.resource.attribute.labels[status_conditions_message]
resource.data.status.conditions.reason entity.resource.attribute.labels[status_conditions_reason]
resource.data.status.conditions.status entity.resource.attribute.labels[status_conditions_status]
resource.data.status.conditions.type entity.resource.attribute.labels[status_conditions_type]
resource.data.status.daemonEndpoints.kubeletEndpoint.Port entity.resource.attribute.labels[status_daemonEndpoints_kubeletEndpoint_Port]
resource.data.status.failed entity.resource.attribute.labels[status_failed]
resource.data.status.fullyLabeledReplicas entity.resource.attribute.labels[status_fullyLabeledReplicas]
resource.data.status.images.names entity.resource.attribute.labels[status_images_names]
resource.data.status.images.sizeBytes entity.resource.attribute.labels[status_images_sizeBytes]
resource.data.status.message entity.resource.attribute.labels[status_message]
resource.data.status.nodeInfo.architecture entity.resource.attribute.labels[status_nodeInfo_architecture]
resource.data.status.nodeInfo.bootID entity.resource.attribute.labels[status_nodeInfo_bootID]
resource.data.status.nodeInfo.containerRuntimeVersion entity.resource.attribute.labels[status_nodeInfo_containerRuntimeVersion]
resource.data.status.nodeInfo.kernelVersion entity.resource.attribute.labels[status_nodeInfo_kernelVersion]
resource.data.status.nodeInfo.kubeletVersion entity.resource.attribute.labels[status_nodeInfo_kubeletVersion]
resource.data.status.nodeInfo.kubeProxyVersion entity.resource.attribute.labels[status_nodeInfo_kubeProxyVersion]
resource.data.status.nodeInfo.machineID entity.resource.attribute.labels[status_nodeInfo_machineID]
resource.data.status.nodeInfo.osImage entity.resource.attribute.labels[status_nodeInfo_osImage]
resource.data.status.nominatedNodeName entity.resource.attribute.labels[status_nominatedNodeName]
resource.data.status.observedGeneration entity.resource.attribute.labels[status_observedGeneration]
resource.data.status.phase entity.resource.attribute.labels[status_phase]
resource.data.status.podIP entity.resource.attribute.labels[status_podIP]
resource.data.status.podIPs.ip entity.resource.attribute.labels[status_podIPs_ip]
resource.data.status.qosClass entity.resource.attribute.labels[status_qosClass]
resource.data.status.ready entity.resource.attribute.labels[status_ready]
resource.data.status.readyReplicas entity.resource.attribute.labels[status_readyReplicas]
resource.data.status.reason entity.resource.attribute.labels[status_reason]
resource.data.status.replicas entity.resource.attribute.labels[status_replicas]
resource.data.status.startTime entity.resource.attribute.labels[status_startTime]
resource.data.status.succeeded entity.resource.attribute.labels[status_succeeded]
resource.data.status.unavailableReplicas entity.resource.attribute.labels[status_unavailableReplicas]
resource.data.status.updatedReplicas entity.resource.attribute.labels[status_updatedReplicas]
resource.data.status.volumesAttached.devicePath entity.resource.attribute.labels[status_volumesAttached_devicePath]
resource.data.status.volumesAttached.name entity.resource.attribute.labels[status_volumesAttached_name]
resource.data.status.volumesInUse entity.resource.attribute.labels[status_volumesInUse]
resource.data.status entity.resource.attribute.labels[status]
resource.data.subjects.apiGroup entity.resource.attribute.labels[subjects_apiGroup]
resource.data.subjects.kind entity.resource.attribute.labels[subjects_kind]
resource.data.subjects.name entity.resource.attribute.labels[subjects_name]
resource.data.subjects.namespace entity.resource.attribute.labels[subjects_namespace]
resource.data.subnetwork entity.resource.attribute.labels[subnetwork]
resource.data.spec.template.metadata.labels.pod-template-hash entity.resource.attribute.labels[template_metadata_labels_pod-template-hash]
resource.data.upgradeSettings.maxSurge entity.resource.attribute.labels[upgradeSettings_maxSurge]
resource.data.upgradeSettings.strategy entity.resource.attribute.labels[upgradeSettings_strategy]
resource.data.version entity.resource.attribute.labels[version]
resource.data.verticalPodAutoscaling.enabled entity.resource.attribute.labels[verticalPodAutoscaling_enabled]
resource.data.workloadIdentityConfig.workloadPool entity.resource.attribute.labels[workloadIdentityConfig_workloadPool]
resource.data.rules.apiGroups entity.security_result.rule_labels[apiGroups]
resource.data.autoscaling.locationPolicy entity.security_result.rule_labels[autoscaling_locationPolicy]
resource.data.maintenancePolicy.resourceVersion entity.security_result.rule_labels[maintenancePolicy_resourceVersion]
resource.data.maintenancePolicy.window.recurringWindow.recurrence entity.security_result.rule_labels[maintenancePolicy_window_recurringWindow_recurrence]
resource.data.maintenancePolicy.window.recurringWindow.window.endTime entity.security_result.rule_labels[maintenancePolicy_window_recurringWindow_window_endTime]
resource.data.maintenancePolicy.window.recurringWindow.window.startTime entity.security_result.rule_labels[maintenancePolicy_window_recurringWindow_window_startTime]
resource.data.metadata.annotations.EnablePodSecurityPolicy entity.security_result.rule_labels[metadata_annotations_EnablePodSecurityPolicy]
resource.data.nodePools.autoscaling.locationPolicy entity.security_result.rule_labels[nodePools_autoscaling_locationPolicy]
resource.data.rules.nonResourceURLs entity.security_result.rule_labels[nonResourceURLs]
resource.data.rules.resourceNames entity.security_result.rule_labels[resourceNames]
resource.data.rules.resources entity.security_result.rule_labels[resources]
resource.data.spec.dnsPolicy entity.security_result.rule_labels[spec_dnsPolicy]
resource.data.spec.externalTrafficPolicy entity.security_result.rule_labels[spec_externalTrafficPolicy]
resource.data.spec.preemptionPolicy entity.security_result.rule_labels[spec_preemptionPolicy]
resource.data.spec.restartPolicy entity.security_result.rule_labels[spec_restartPolicy]
resource.data.spec.template.spec.dnsPolicy entity.security_result.rule_labels[spec_template_spec_dnsPolicy]
resource.data.spec.template.spec.restartPolicy entity.security_result.rule_labels[spec_template_spec_restartPolicy]
resource.data.rules.verbs entity.security_result.rule_labels[verbs]
resource.data.spec.serviceAccount entity.user.attribute.labels[spec_serviceAccount]
resource.data.spec.containers.ports.containerPort relations.entity.resource.attribute.labels[spec_containers_ports_containerPort]
resource.data.spec.initContainers.imagePullPolicy relations.entity.security_result.rule_labels[spec_initContainers_imagePullPolicy]
resource.data.metadata.ownerReferences.apiVersion relations.entity.resource.attribute.labels[metadata_ownerReferences_apiVersion]
resource.data.metadata.ownerReferences.blockOwnerDeletion relations.entity.resource.attribute.labels[metadata_ownerReferences_blockOwnerDeletion]
resource.data.metadata.ownerReferences.controller relations.entity.resource.attribute.labels[metadata_ownerReferences_controller]
resource.data.metadata.ownerReferences.kind relations.entity.resource.attribute.labels[metadata_ownerReferences_kind]
resource.data.metadata.ownerReferences.uid relations.entity.resource.attribute.labels[metadata_ownerReferences_uid]
resource.data.spec.containers.args relations.entity.resource.attribute.labels[spec_containers_args]
resource.data.spec.containers.command relations.entity.resource.attribute.labels[spec_containers_command]
resource.data.spec.containers.env.name relations.entity.resource.attribute.labels[spec_containers_env_name]
resource.data.spec.containers.env.value relations.entity.resource.attribute.labels[spec_containers_env_value]
resource.data.spec.containers.env.valueFrom.configMapKeyRef.key relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_configMapKeyRef_key]
resource.data.spec.containers.env.valueFrom.configMapKeyRef.name relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_configMapKeyRef_name]
resource.data.spec.containers.env.valueFrom.fieldRef.apiVersion relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_fieldRef_apiVersion]
resource.data.spec.containers.env.valueFrom.fieldRef.fieldPath relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_fieldRef_fieldPath]
resource.data.spec.containers.env.valueFrom.secretKeyRef.key relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_secretKeyRef_key]
resource.data.spec.containers.env.valueFrom.secretKeyRef.localObjectReference.name relations.entity.resource.attribute.labels[spec_containers_env_valueFrom_secretKeyRef_localObjRef_name]
resource.data.spec.containers.image relations.entity.resource.attribute.labels[spec_containers_image]
resource.data.spec.containers.lifecycle.postStart.exec.command relations.entity.resource.attribute.labels[spec_containers_lifecycle_postStart_exec_command]
resource.data.spec.containers.lifecycle.preStop.exec.command relations.entity.resource.attribute.labels[spec_containers_lifecycle_preStop_exec_command]
resource.data.spec.containers.livenessProbe.failureThreshold relations.entity.resource.attribute.labels[spec_containers_livenessProbe_failureThreshold]
resource.data.spec.containers.livenessProbe.handler.exec.command relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_exec_command]
resource.data.spec.containers.livenessProbe.handler.httpGet.host relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_host]
resource.data.spec.containers.livenessProbe.handler.httpGet.httpHeaders.name relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_httpHeaders_name]
resource.data.spec.containers.livenessProbe.handler.httpGet.httpHeaders.value relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_httpHeaders_value]
resource.data.spec.containers.livenessProbe.handler.httpGet.path relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_path]
resource.data.spec.containers.livenessProbe.handler.httpGet.port relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_port]
resource.data.spec.containers.livenessProbe.handler.httpGet.scheme relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_httpGet_scheme]
resource.data.spec.containers.livenessProbe.handler.tcpSocket.host relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_tcpSocket_host]
resource.data.spec.containers.livenessProbe.handler.tcpSocket.port relations.entity.resource.attribute.labels[spec_containers_livenessProbe_handler_tcpSocket_port]
resource.data.spec.containers.livenessProbe.initialDelaySeconds relations.entity.resource.attribute.labels[spec_containers_livenessProbe_initialDelaySeconds]
resource.data.spec.containers.livenessProbe.periodSeconds relations.entity.resource.attribute.labels[spec_containers_livenessProbe_periodSeconds]
resource.data.spec.containers.livenessProbe.successThreshold relations.entity.resource.attribute.labels[spec_containers_livenessProbe_successThreshold]
resource.data.spec.containers.livenessProbe.timeoutSeconds relations.entity.resource.attribute.labels[spec_containers_livenessProbe_timeoutSeconds]
resource.data.spec.containers.ports.hostIP relations.entity.resource.attribute.labels[spec_containers_ports_hostIP]
resource.data.spec.containers.ports.hostPort relations.entity.resource.attribute.labels[spec_containers_ports_hostPort]
resource.data.spec.containers.ports.name relations.entity.resource.attribute.labels[spec_containers_ports_name]
resource.data.spec.containers.readinessProbe.failureThreshold relations.entity.resource.attribute.labels[spec_containers_readinessProbe_failureThreshold]
resource.data.spec.containers.readinessProbe.handler.httpGet.host relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_host]
resource.data.spec.containers.readinessProbe.handler.httpGet.httpHeaders.name relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_httpHeaders_name]
resource.data.spec.containers.readinessProbe.handler.httpGet.httpHeaders.value relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_httpHeaders_value]
resource.data.spec.containers.readinessProbe.handler.httpGet.path relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_path]
resource.data.spec.containers.readinessProbe.handler.httpGet.port relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_port]
resource.data.spec.containers.readinessProbe.handler.httpGet.scheme relations.entity.resource.attribute.labels[spec_containers_readinessProbe_handler_httpGet_scheme]
resource.data.spec.containers.readinessProbe.initialDelaySeconds relations.entity.resource.attribute.labels[spec_containers_readinessProbe_initialDelaySeconds]
resource.data.spec.containers.readinessProbe.periodSeconds relations.entity.resource.attribute.labels[spec_containers_readinessProbe_periodSeconds]
resource.data.spec.containers.readinessProbe.successThreshold relations.entity.resource.attribute.labels[spec_containers_readinessProbe_successThreshold]
resource.data.spec.containers.readinessProbe.timeoutSeconds relations.entity.resource.attribute.labels[spec_containers_readinessProbe_timeoutSeconds]
resource.data.spec.containers.resources.limits.cpu relations.entity.resource.attribute.labels[spec_containers_resources_limits_cpu]
resource.data.spec.containers.resources.limits.ephemeral-storage relations.entity.resource.attribute.labels[spec_containers_resources_limits_ephemeral-storage]
resource.data.spec.containers.resources.limits.memory relations.entity.resource.attribute.labels[spec_containers_resources_limits_memory]
resource.data.spec.containers.resources.requests.cpu relations.entity.resource.attribute.labels[spec_containers_resources_requests_cpu]
resource.data.spec.containers.resources.requests.ephemeral-storage relations.entity.resource.attribute.labels[spec_containers_resources_requests_ephemeral-storage]
resource.data.spec.containers.resources.requests.memory relations.entity.resource.attribute.labels[spec_containers_resources_requests_memory]
resource.data.spec.containers.securityContext.allowPrivilegeEscalation relations.entity.resource.attribute.labels[spec_containers_securityContext_allowPrivilegeEscalation]
resource.data.spec.containers.securityContext.capabilities.add relations.entity.resource.attribute.labels[spec_containers_securityContext_capabilities_add]
resource.data.spec.containers.securityContext.capabilities.drop relations.entity.resource.attribute.labels[spec_containers_securityContext_capabilities_drop]
resource.data.spec.containers.securityContext.privileged relations.entity.resource.attribute.labels[spec_containers_securityContext_privileged]
resource.data.spec.containers.securityContext.readOnlyRootFilesystem relations.entity.resource.attribute.labels[spec_containers_securityContext_readOnlyRootFilesystem]
resource.data.spec.containers.securityContext.runAsGroup relations.entity.resource.attribute.labels[spec_containers_securityContext_runAsGroup]
resource.data.spec.containers.securityContext.runAsNonRoot relations.entity.resource.attribute.labels[spec_containers_securityContext_runAsNonRoot]
resource.data.spec.containers.securityContext.runAsUser relations.entity.resource.attribute.labels[spec_containers_securityContext_runAsUser]
resource.data.spec.containers.startupProbe.failureThreshold relations.entity.resource.attribute.labels[spec_containers_startupProbe_failureThreshold]
resource.data.spec.containers.startupProbe.handler.exec.command relations.entity.resource.attribute.labels[spec_containers_startupProbe_handler_exec_command]
resource.data.spec.containers.startupProbe.initialDelaySeconds relations.entity.resource.attribute.labels[spec_containers_startupProbe_initialDelaySeconds]
resource.data.spec.containers.startupProbe.periodSeconds relations.entity.resource.attribute.labels[spec_containers_startupProbe_periodSeconds]
resource.data.spec.containers.startupProbe.successThreshold relations.entity.resource.attribute.labels[spec_containers_startupProbe_successThreshold]
resource.data.spec.containers.startupProbe.timeoutSeconds relations.entity.resource.attribute.labels[spec_containers_startupProbe_timeoutSeconds]
resource.data.spec.containers.stdin relations.entity.resource.attribute.labels[spec_containers_stdin]
resource.data.spec.containers.stdinOnce relations.entity.resource.attribute.labels[spec_containers_stdinOnce]
resource.data.spec.containers.terminationMessagePath relations.entity.resource.attribute.labels[spec_containers_terminationMessagePath]
resource.data.spec.containers.tty relations.entity.resource.attribute.labels[spec_containers_tty]
resource.data.spec.containers.volumeMounts.mountPath relations.entity.resource.attribute.labels[spec_containers_volumeMounts_mountPath]
resource.data.spec.containers.volumeMounts.mountPropagation relations.entity.resource.attribute.labels[spec_containers_volumeMounts_mountPropagation]
resource.data.spec.containers.volumeMounts.name relations.entity.resource.attribute.labels[spec_containers_volumeMounts_name]
resource.data.spec.containers.volumeMounts.readOnly relations.entity.resource.attribute.labels[spec_containers_volumeMounts_readOnly]
resource.data.spec.containers.volumeMounts.subPath relations.entity.resource.attribute.labels[spec_containers_volumeMounts_subPath]
resource.data.spec.containers.volumeMounts.subPathExpr relations.entity.resource.attribute.labels[spec_containers_volumeMounts_subPathExpr]
resource.data.spec.initContainers.command relations.entity.resource.attribute.labels[spec_initContainers_command]
resource.data.spec.initContainers.env.name relations.entity.resource.attribute.labels[spec_initContainers_env_name]
resource.data.spec.initContainers.env.value relations.entity.resource.attribute.labels[spec_initContainers_env_value]
resource.data.spec.initContainers.env.valueFrom.configMapKeyRef.key relations.entity.resource.attribute.labels[spec_initContainers_env_valueFrom_configMapKeyRef_key]
resource.data.spec.initContainers.env.valueFrom.configMapKeyRef.name relations.entity.resource.attribute.labels[spec_initContainers_env_valueFrom_configMapKeyRef_name]
resource.data.spec.initContainers.image relations.entity.resource.attribute.labels[spec_initContainers_image]
resource.data.spec.initContainers.resources.requests.cpu relations.entity.resource.attribute.labels[spec_initContainers_resources_requests_cpu]
resource.data.spec.initContainers.resources.requests.memory relations.entity.resource.attribute.labels[spec_initContainers_resources_requests_memory]
resource.data.spec.initContainers.securityContext.capabilities.add relations.entity.resource.attribute.labels[spec_initContainers_securityContext_capabilities_add]
resource.data.spec.initContainers.securityContext.privileged relations.entity.resource.attribute.labels[spec_initContainers_securityContext_privileged]
resource.data.spec.initContainers.stdin relations.entity.resource.attribute.labels[spec_initContainers_stdin]
resource.data.spec.initContainers.stdinOnce relations.entity.resource.attribute.labels[spec_initContainers_stdinOnce]
resource.data.spec.initContainers.terminationMessagePath relations.entity.resource.attribute.labels[spec_initContainers_terminationMessagePath]
resource.data.spec.initContainers.tty relations.entity.resource.attribute.labels[spec_initContainers_tty]
resource.data.spec.initContainers.volumeMounts.mountPath relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_mountPath]
resource.data.spec.initContainers.volumeMounts.mountPropagation relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_mountPropagation]
resource.data.spec.initContainers.volumeMounts.name relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_name]
resource.data.spec.initContainers.volumeMounts.readOnly relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_readOnly]
resource.data.spec.initContainers.volumeMounts.subPath relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_subPath]
resource.data.spec.initContainers.volumeMounts.subPathExpr relations.entity.resource.attribute.labels[spec_initContainers_volumeMounts_subPathExpr]
resource.data.spec.podCIDR entity.resource.attribute.labels[spec_podCIDR]
resource.data.spec.template.spec.containers.args relations.entity.resource.attribute.labels[sts_containers_args]
resource.data.spec.template.spec.containers.command relations.entity.resource.attribute.labels[sts_containers_command]
resource.data.spec.template.spec.containers.env.name relations.entity.resource.attribute.labels[sts_containers_env_name]
resource.data.spec.template.spec.containers.env.value relations.entity.resource.attribute.labels[sts_containers_env_value]
resource.data.spec.template.spec.containers.env.valueFrom.fieldRef.apiVersion relations.entity.resource.attribute.labels[sts_containers_env_valueFrom_fieldRef_apiVersion]
resource.data.spec.template.spec.containers.env.valueFrom.fieldRef.fieldPath relations.entity.resource.attribute.labels[sts_containers_env_valueFrom_fieldRef_fieldPath]
resource.data.spec.template.spec.containers.env.valueFrom.secretKeyRef.key relations.entity.resource.attribute.labels[sts_containers_env_valueFrom_secretKeyRef_key]
resource.data.spec.template.spec.containers.env.valueFrom.secretKeyRef.localObjectReference.name relations.entity.resource.attribute.labels[sts_containers_env_valueFrom_secretKeyRef_localObjRef_name]
resource.data.spec.template.spec.containers.image relations.entity.resource.attribute.labels[sts_containers_image]
resource.data.spec.template.spec.containers.lifecycle.preStop.exec.command relations.entity.resource.attribute.labels[sts_containers_lifecycle_preStop_exec_command]
resource.data.spec.template.spec.containers.livenessProbe.failureThreshold relations.entity.resource.attribute.labels[sts_containers_livenessProbe_failureThreshold]
resource.data.spec.template.spec.containers.livenessProbe.handler.exec.command relations.entity.resource.attribute.labels[sts_containers_livenessProbe_handler_exec_command]
resource.data.spec.template.spec.containers.livenessProbe.handler.httpGet.host relations.entity.resource.attribute.labels[sts_containers_livenessProbe_handler_httpGet_host]
resource.data.spec.template.spec.containers.livenessProbe.handler.httpGet.path relations.entity.resource.attribute.labels[sts_containers_livenessProbe_handler_httpGet_path]
resource.data.spec.template.spec.containers.livenessProbe.handler.httpGet.port relations.entity.resource.attribute.labels[sts_containers_livenessProbe_handler_httpGet_port]
resource.data.spec.template.spec.containers.livenessProbe.handler.httpGet.scheme relations.entity.resource.attribute.labels[sts_containers_livenessProbe_handler_httpGet_scheme]
resource.data.spec.template.spec.containers.livenessProbe.initialDelaySeconds relations.entity.resource.attribute.labels[sts_containers_livenessProbe_initialDelaySeconds]
resource.data.spec.template.spec.containers.livenessProbe.periodSeconds relations.entity.resource.attribute.labels[sts_containers_livenessProbe_periodSeconds]
resource.data.spec.template.spec.containers.livenessProbe.successThreshold relations.entity.resource.attribute.labels[sts_containers_livenessProbe_successThreshold]
resource.data.spec.template.spec.containers.livenessProbe.timeoutSeconds relations.entity.resource.attribute.labels[sts_containers_livenessProbe_timeoutSeconds]
resource.data.spec.template.spec.containers.ports.containerPort relations.entity.resource.attribute.labels[sts_containers_ports_containerPort]
resource.data.spec.template.spec.containers.ports.hostIP relations.entity.resource.attribute.labels[sts_containers_ports_hostIP]
resource.data.spec.template.spec.containers.ports.hostPort relations.entity.resource.attribute.labels[sts_containers_ports_hostPort]
resource.data.spec.template.spec.containers.ports.name relations.entity.resource.attribute.labels[sts_containers_ports_name]
resource.data.spec.template.spec.containers.ports.protocol relations.entity.resource.attribute.labels[sts_containers_ports_protocol]
resource.data.spec.template.spec.containers.readinessProbe.failureThreshold relations.entity.resource.attribute.labels[sts_containers_readinessProbe_failureThreshold]
resource.data.spec.template.spec.containers.readinessProbe.handler.httpGet.host relations.entity.resource.attribute.labels[sts_containers_readinessProbe_handler_httpGet_host]
resource.data.spec.template.spec.containers.readinessProbe.handler.httpGet.path relations.entity.resource.attribute.labels[sts_containers_readinessProbe_handler_httpGet_path]
resource.data.spec.template.spec.containers.readinessProbe.handler.httpGet.port relations.entity.resource.attribute.labels[sts_containers_readinessProbe_handler_httpGet_port]
resource.data.spec.template.spec.containers.readinessProbe.handler.httpGet.scheme relations.entity.resource.attribute.labels[sts_containers_readinessProbe_handler_httpGet_scheme]
resource.data.spec.template.spec.containers.readinessProbe.initialDelaySeconds relations.entity.resource.attribute.labels[sts_containers_readinessProbe_initialDelaySeconds]
resource.data.spec.template.spec.containers.readinessProbe.periodSeconds relations.entity.resource.attribute.labels[sts_containers_readinessProbe_periodSeconds]
resource.data.spec.template.spec.containers.readinessProbe.successThreshold relations.entity.resource.attribute.labels[sts_containers_readinessProbe_successThreshold]
resource.data.spec.template.spec.containers.readinessProbe.timeoutSeconds relations.entity.resource.attribute.labels[sts_containers_readinessProbe_timeoutSeconds]
resource.data.spec.template.spec.containers.resources.limits.cpu relations.entity.resource.attribute.labels[sts_containers_resources_limits_cpu]
resource.data.spec.template.spec.containers.resources.limits.ephemeral-storage relations.entity.resource.attribute.labels[sts_containers_resources_limits_ephemeral-storage]
resource.data.spec.template.spec.containers.resources.limits.memory relations.entity.resource.attribute.labels[sts_containers_resources_limits_memory]
resource.data.spec.template.spec.containers.resources.requests.cpu relations.entity.resource.attribute.labels[sts_containers_resources_requests_cpu]
resource.data.spec.template.spec.containers.resources.requests.ephemeral-storage relations.entity.resource.attribute.labels[sts_containers_resources_requests_ephemeral-storage]
resource.data.spec.template.spec.containers.resources.requests.memory relations.entity.resource.attribute.labels[sts_containers_resources_requests_memory]
resource.data.spec.template.spec.containers.securityContext.allowPrivilegeEscalation relations.entity.resource.attribute.labels[sts_containers_securityContext_allowPrivilegeEscalation]
resource.data.spec.template.spec.containers.securityContext.capabilities.add relations.entity.resource.attribute.labels[sts_containers_securityContext_capabilities_add]
resource.data.spec.template.spec.containers.securityContext.capabilities.drop relations.entity.resource.attribute.labels[sts_containers_securityContext_capabilities_drop]
resource.data.spec.template.spec.containers.securityContext.readOnlyRootFilesystem relations.entity.resource.attribute.labels[sts_containers_securityContext_readOnlyRootFilesystem]
resource.data.spec.template.spec.containers.securityContext.runAsGroup relations.entity.resource.attribute.labels[sts_containers_securityContext_runAsGroup]
resource.data.spec.template.spec.containers.securityContext.runAsUser relations.entity.resource.attribute.labels[sts_containers_securityContext_runAsUser]
resource.data.spec.template.spec.containers.startupProbe.failureThreshold relations.entity.resource.attribute.labels[sts_containers_startupProbe_failureThreshold]
resource.data.spec.template.spec.containers.startupProbe.handler.exec.command relations.entity.resource.attribute.labels[sts_containers_startupProbe_handler_exec_command]
resource.data.spec.template.spec.containers.startupProbe.initialDelaySeconds relations.entity.resource.attribute.labels[sts_containers_startupProbe_initialDelaySeconds]
resource.data.spec.template.spec.containers.startupProbe.periodSeconds relations.entity.resource.attribute.labels[sts_containers_startupProbe_periodSeconds]
resource.data.spec.template.spec.containers.startupProbe.successThreshold relations.entity.resource.attribute.labels[sts_containers_startupProbe_successThreshold]
resource.data.spec.template.spec.containers.startupProbe.timeoutSeconds relations.entity.resource.attribute.labels[sts_containers_startupProbe_timeoutSeconds]
resource.data.spec.template.spec.containers.stdin relations.entity.resource.attribute.labels[sts_containers_stdin]
resource.data.spec.template.spec.containers.stdinOnce relations.entity.resource.attribute.labels[sts_containers_stdinOnce]
resource.data.spec.template.spec.containers.terminationMessagePath relations.entity.resource.attribute.labels[sts_containers_terminationMessagePath]
resource.data.spec.template.spec.containers.tty relations.entity.resource.attribute.labels[sts_containers_tty]
resource.data.spec.template.spec.containers.volumeMounts.mountPath relations.entity.resource.attribute.labels[sts_containers_volumeMounts_mountPath]
resource.data.spec.template.spec.containers.volumeMounts.mountPropagation relations.entity.resource.attribute.labels[sts_containers_volumeMounts_mountPropagation]
resource.data.spec.template.spec.containers.volumeMounts.name relations.entity.resource.attribute.labels[sts_containers_volumeMounts_name]
resource.data.spec.template.spec.containers.volumeMounts.readOnly relations.entity.resource.attribute.labels[sts_containers_volumeMounts_readOnly]
resource.data.spec.template.spec.containers.volumeMounts.subPath relations.entity.resource.attribute.labels[sts_containers_volumeMounts_subPath]
resource.data.spec.template.spec.containers.volumeMounts.subPathExpr relations.entity.resource.attribute.labels[sts_containers_volumeMounts_subPathExpr]
resource.data.spec.template.spec.initContainers.args relations.entity.resource.attribute.labels[sts_initContainers_args]
resource.data.spec.template.spec.initContainers.command relations.entity.resource.attribute.labels[sts_initContainers_command]
resource.data.spec.template.spec.initContainers.image relations.entity.resource.attribute.labels[sts_initContainers_image]
resource.data.spec.template.spec.initContainers.stdin relations.entity.resource.attribute.labels[sts_initContainers_stdin]
resource.data.spec.template.spec.initContainers.stdinOnce relations.entity.resource.attribute.labels[sts_initContainers_stdinOnce]
resource.data.spec.template.spec.initContainers.terminationMessagePath relations.entity.resource.attribute.labels[sts_initContainers_terminationMessagePath]
resource.data.spec.template.spec.initContainers.tty relations.entity.resource.attribute.labels[sts_initContainers_tty]
resource.data.spec.template.spec.initContainers.volumeMounts.mountPath relations.entity.resource.attribute.labels[sts_initContainers_volumeMounts_mountPath]
resource.data.spec.template.spec.initContainers.volumeMounts.name relations.entity.resource.attribute.labels[sts_initContainers_volumeMounts_name]
resource.data.spec.template.spec.initContainers.volumeMounts.readOnly relations.entity.resource.attribute.labels[sts_initContainers_volumeMounts_readOnly]
resource.data.spec.template.spec.initContainers.volumeMounts.subPath relations.entity.resource.attribute.labels[sts_initContainers_volumeMounts_subPath]
resource.data.spec.template.spec.initContainers.volumeMounts.subPathExpr relations.entity.resource.attribute.labels[sts_initContainers_volumeMounts_subPathExpr]
resource.data.status.containerStatuses.image relations.entity.resource.attribute.labels[status_containerStatuses_image]
resource.data.status.containerStatuses.imageID relations.entity.resource.attribute.labels[status_containerStatuses_imageID]
resource.data.status.containerStatuses.lastState.terminated.containerID relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_containerID]
resource.data.status.containerStatuses.lastState.terminated.exitCode relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_exitCode]
resource.data.status.containerStatuses.lastState.terminated.finishedAt relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_finishedAt]
resource.data.status.containerStatuses.lastState.terminated.message relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_message]
resource.data.status.containerStatuses.lastState.terminated.reason relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_reason]
resource.data.status.containerStatuses.lastState.terminated.signal relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_signal]
resource.data.status.containerStatuses.lastState.terminated.startedAt relations.entity.resource.attribute.labels[status_containerStatuses_lastState_terminated_startedAt]
resource.data.status.containerStatuses.ready relations.entity.resource.attribute.labels[status_containerStatuses_ready]
resource.data.status.containerStatuses.restartCount relations.entity.resource.attribute.labels[status_containerStatuses_restartCount]
resource.data.status.containerStatuses.started relations.entity.resource.attribute.labels[status_containerStatuses_started]
resource.data.status.containerStatuses.state.running.startedAt relations.entity.resource.attribute.labels[status_containerStatuses_state_running_startedAt]
resource.data.status.containerStatuses.state.terminated.containerID relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_containerID]
resource.data.status.containerStatuses.state.terminated.exitCode relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_exitCode]
resource.data.status.containerStatuses.state.terminated.finishedAt relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_finishedAt]
resource.data.status.containerStatuses.state.terminated.message relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_message]
resource.data.status.containerStatuses.state.terminated.reason relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_reason]
resource.data.status.containerStatuses.state.terminated.signal relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_signal]
resource.data.status.containerStatuses.state.terminated.startedAt relations.entity.resource.attribute.labels[status_containerStatuses_state_terminated_startedAt]
resource.data.status.initContainerStatuses.image relations.entity.resource.attribute.labels[status_initContainerStatuses_image]
resource.data.status.initContainerStatuses.imageID relations.entity.resource.attribute.labels[status_initContainerStatuses_imageID]
resource.data.status.initContainerStatuses.ready relations.entity.resource.attribute.labels[status_initContainerStatuses_ready]
resource.data.status.initContainerStatuses.restartCount relations.entity.resource.attribute.labels[status_initContainerStatuses_restartCount]
resource.data.status.initContainerStatuses.state.terminated.containerID relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_containerID]
resource.data.status.initContainerStatuses.state.terminated.exitCode relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_exitCode]
resource.data.status.initContainerStatuses.state.terminated.finishedAt relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_finishedAt]
resource.data.status.initContainerStatuses.state.terminated.message relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_message]
resource.data.status.initContainerStatuses.state.terminated.reason relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_reason]
resource.data.status.initContainerStatuses.state.terminated.signal relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_signal]
resource.data.status.initContainerStatuses.state.terminated.startedAt relations.entity.resource.attribute.labels[status_initContainerStatuses_state_terminated_startedAt]
resource.data.spec.containers.imagePullPolicy relations.entity.security_result.rule_labels[spec_containers_imagePullPolicy]
resource.data.spec.containers.terminationMessagePolicy relations.entity.security_result.rule_labels[spec_containers_terminationMessagePolicy]
resource.data.spec.initContainers.terminationMessagePolicy relations.entity.security_result.rule_labels[spec_initContainers_terminationMessagePolicy]
resource.data.spec.template.spec.containers.imagePullPolicy relations.entity.security_result.rule_labels[sts_containers_imagePullPolicy]
resource.data.spec.template.spec.containers.terminationMessagePolicy relations.entity.security_result.rule_labels[sts_containers_terminationMessagePolicy]
resource.data.spec.template.spec.initContainers.imagePullPolicy relations.entity.security_result.rule_labels[sts_initContainers_imagePullPolicy]
resource.data.spec.template.spec.initContainers.terminationMessagePolicy relations.entity.security_result.rule_labels[sts_initContainers_terminationMessagePolicy]