Integration profile

Discovery provider · Kubernetes

Discover clusters, namespaces, workloads, services, nodes, and ingress resources.

Demo baseline · November 13, 2026

Download PDF

Prerequisites

Kubernetes API access from a collector or workload identity
Least-privilege ClusterRole and binding
Trusted cluster CA certificate

Configuration steps

Choose the authentication method
Bind the read-only ClusterRole
Select namespaces and resource kinds
Validate the API and preview discovery

Provider fields

Field	Type	Requirement and options
Kubernetes API server `apiServerUrl`	url	Required
Authentication mode `authMode`	select	Required `workload_identity`, `service_account_token`, `kubeconfig`, `client_certificate`
Kubeconfig / token secret alias `kubeconfigSecretAlias`	text	Optional
Cluster names `clusterNames`	tag_list	Required
Included namespaces `namespaces`	tag_list	Optional
Excluded namespaces `excludedNamespaces`	tag_list	Optional
Resource kinds `resourceKinds`	tag_list	Optional
Collector / MID server `collector`	text	Optional
Validate cluster certificate `validateTls`	boolean	Optional

Verify and troubleshoot

Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.