Kubernetes cluster | Mondoo Docs

k8s MQL resource for querying Kubernetes infrastructure with cnquery and cnspec.

Kubernetes

Kubernetes cluster

Use MQL in cnspec shell or policy:

k8s

Min version: 5.15.0

Relationships

Kubernetes

39 resources · 86 relationships·Click to select, expand fields to see properties.

Fields (57)

Field	Type	Description
`admission`private	k8s.admission	-
`admissionrequest`private	k8s.admissionrequest	Kubernetes AdmissionRequest
`admissionreview`	k8s.admissionreview	Kubernetes AdmissionReview
`apiresource`private	k8s.apiresource	Kubernetes API resources
`apiResources`	[]k8s.apiresource	Available resource types
`app`private	k8s.app	Kubernetes Application
`apps`	[]k8s.app	Kubernetes applications
`clusterrolebindings`	[]k8s.rbac.clusterrolebinding	Kubernetes RBAC ClusterRoleBindings
`clusterroles`	[]k8s.rbac.clusterrole	Kubernetes RBAC ClusterRoles
`configmap`private	k8s.configmap	Kubernetes ConfigMap
`configmaps`	[]k8s.configmap	ConfigMaps
`container`private	k8s.container	Kubernetes workload container
`containerStatus`private	k8s.containerStatus	Kubernetes container status
`cronjob`private	k8s.cronjob	Kubernetes CronJob
`cronjobs`	[]k8s.cronjob	Cluster CronJobs
`customresource`private	k8s.customresource	Kubernetes CustomResource
`customresources`	[]k8s.customresource	Kubernetes custom resources
`daemonset`private	k8s.daemonset	Kubernetes DaemonSet
`daemonsets`	[]k8s.daemonset	Cluster DaemonSets
`deployment`private	k8s.deployment	Kubernetes Deployment
`deployments`	[]k8s.deployment	Cluster deployments
`ephemeralContainer`private	k8s.ephemeralContainer	Kubernetes ephemeral container
`ingress`private	k8s.ingress	Kubernetes Ingress
`ingressbackend`private	k8s.ingressbackend	Kubernetes Ingress backend
`ingresses`	[]k8s.ingress	Kubernetes Ingresses
`ingresshttprulepath`private	k8s.ingresshttprulepath	Kubernetes Ingress HTTP rule
`ingressresourceref`private	k8s.ingressresourceref	Kubernetes Ingress resource backend
`ingressrule`private	k8s.ingressrule	Kubernetes Ingress rule
`ingressservicebackend`private	k8s.ingressservicebackend	Kubernetes Ingress service backend
`ingresstls`private	k8s.ingresstls	Kubernetes Ingress TLS
`initContainer`private	k8s.initContainer	Kubernetes init container
`job`private	k8s.job	Kubernetes Job
`jobs`	[]k8s.job	Cluster Jobs
`namespace`private	k8s.namespace	Kubernetes namespace
`namespaces`	[]k8s.namespace	Cluster namespaces
`networkPolicies`	[]k8s.networkpolicy	Kubernetes network policies
`networkpolicy`private	k8s.networkpolicy	Kubernetes Network Policy
`node`private	k8s.node	Kubernetes node
`nodes`	[]k8s.node	Cluster nodes
`pod`private	k8s.pod	Kubernetes Pod
`pods`	[]k8s.pod	Cluster Pods
`rbac`private	k8s.rbac	-
`replicaset`private	k8s.replicaset	Kubernetes ReplicaSet
`replicasets`	[]k8s.replicaset	Cluster ReplicaSets
`rolebindings`	[]k8s.rbac.rolebinding	Kubernetes RBAC RoleBindings
`roles`	[]k8s.rbac.role	Kubernetes RBAC roles
`secret`private	k8s.secret	Kubernetes Secret
`secrets`	[]k8s.secret	Cluster Secrets
`serverVersion`	dict	Cluster version
`service`private	k8s.service	Kubernetes Service
`serviceaccount`private	k8s.serviceaccount	Kubernetes service account
`serviceaccounts`	[]k8s.serviceaccount	Kubernetes service accounts
`services`	[]k8s.service	Kubernetes Services
`statefulset`private	k8s.statefulset	Kubernetes StatefulSet
`statefulsets`	[]k8s.statefulset	Cluster StatefulSets
`userinfo`private	k8s.userinfo	Kubernetes UserInfo
`validatingWebhookConfigurations`	[]k8s.admission.validatingwebhookconfiguration	Kubernetes admission webhook configurations