Docs Connect your cloud
Connect your cloud · Kubernetes
Kubernetes coverage catalog
Every resource type Kumo.io reads from Kubernetes — 29 types across 9 API groups — rendered from the machine-readable catalog our CI enforces against the crawlers themselves. If it says stable here, a crawler ships behind it.
What "coverage" means here
This catalog is rendered from Kumo.io's declarative provider definition — the same document our conformance tests hold the crawlers to, in both directions: a crawler emitting an undeclared type fails our build, and a stable row with no crawler behind it fails it too. experimental rows are declared ahead of implementation: their scopes report as skipped rather than silently missing.
Resource types by service
core · 12 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cluster | core.cluster | compute.cluster | stable |
| ConfigMap | core.config_map | config.config_map | stable |
| Endpoints | core.endpoints | network.service | stable |
| Limit Range | core.limit_range | config.config_map | stable |
| Namespace | core.namespace | container.namespace | stable |
| Node | core.node | compute.node | stable |
| PersistentVolume | core.persistent_volume | storage.persistent_volume | stable |
| PersistentVolumeClaim | core.persistent_volume_claim | storage.persistent_volume_claim | stable |
| Pod | core.pod | workload.pod | stable |
| Secret | core.secret | security.secret | stable |
| Service | core.service | network.service | stable |
| ServiceAccount | core.service_account | identity.service_account | stable |
apps · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| DaemonSet | apps.daemon_set | workload.daemon_set | stable |
| Deployment | apps.deployment | workload.deployment | stable |
| ReplicaSet | apps.replica_set | workload.replica_set | stable |
| StatefulSet | apps.stateful_set | workload.stateful_set | stable |
rbac · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| ClusterRole | rbac.cluster_role | identity.cluster_role | stable |
| ClusterRoleBinding | rbac.cluster_role_binding | identity.cluster_role_binding | stable |
| Role | rbac.role | identity.role | stable |
| RoleBinding | rbac.role_binding | identity.role_binding | stable |
networking · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Ingress | networking.ingress | network.ingress | stable |
| IngressClass | networking.ingress_class | network.ingress_class | experimental |
| NetworkPolicy | networking.network_policy | network.network_policy | stable |
batch · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| CronJob | batch.cron_job | workload.cron_job | stable |
| Job | batch.job | workload.job | stable |
autoscaling · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| HorizontalPodAutoscaler | autoscaling.horizontal_pod_autoscaler | compute.autoscaler | stable |
discovery · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| EndpointSlice | discovery.endpoint_slice | network.target_group | experimental |
policy · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| PodDisruptionBudget | policy.pod_disruption_budget | policy.disruption_budget | experimental |
storage · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| StorageClass | storage.storage_class | storage.storage_class | experimental |
Connections between resources
Topology is more than inventory: 22 declared connection types link resources into the graph — attachment, containment, traffic paths, dependency — with 33 declarative edge-derivation rules computing relationships from crawled attributes.
| Connection family | Types |
|---|---|
| dependency | 5 |
| structural | 4 |
| identity | 4 |
| network | 3 |
| security | 3 |
| management | 2 |
| data_flow | 1 |
Sensitive fields, classified at the source
The definition also carries the base sensitivity table: attribute rows and pattern
fallbacks that classify sensitive configuration at ingestion, before anything is stored.
Tenant policy can tighten these classifications — never relax the
secret/credential classes. See
Redaction and sensitive fields
for the full data-handling model.