{"resources":{"kustomize":{"id":"kustomize","name":"kustomize","fields":{"generator":{"name":"generator","type":"\u001bkustomize.generator","title":"Kustomize ConfigMap or Secret generator","desc":"Examine a generator declared in a kustomization: its type (configmap or secret), the literal key=value pairs, included files, env-file sources, merge behavior (create / replace / merge), and namespace — useful for surfacing inline secrets or ConfigMap drift.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"image":{"name":"image","type":"\u001bkustomize.image","title":"Kustomize image override","desc":"Examine an `images:` entry: the original image name, the optional replacement name, and either a new tag or new digest — used to detect non-pinned tags or unintended image swaps during overlay rendering.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"kustomization":{"name":"kustomization","type":"\u001bkustomize.kustomization","title":"kustomization.yaml configuration","desc":"Examine a single kustomization: directory path, apiVersion / kind, the namespace / namePrefix / nameSuffix / commonLabels / commonAnnotations transformers, the raw resource and component references, declared patches, ConfigMap and Secret generators, image overrides, replacements, and the final rendered Kubernetes resources after running `kustomize build`.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"kustomizations":{"name":"kustomizations","type":"\u0019\u001bkustomize.kustomization","title":"List of all parsed kustomizations","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"patch":{"name":"patch","type":"\u001bkustomize.patch","title":"Kustomize patch (strategic merge or JSON patch)","desc":"Examine a patch's content (inline YAML or file path), its target selector (group, version, kind, name, namespace, label selector, annotation selector) — the unit Kustomize uses to mutate base resources during rendering.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"replacement":{"name":"replacement","type":"\u001bkustomize.replacement","title":"Kustomize replacement","desc":"Examine a `replacements:` entry that copies one field's value to multiple target fields without using Kustomize vars. Queryable fields include the source resource selector (`sourceKind`, `sourceName`), the `sourcePath` field-path expression that identifies the value to read, and the list of `targets` that receive the substituted value.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"replacementTarget":{"name":"replacementTarget","type":"\u001bkustomize.replacementTarget","title":"Kustomize replacement target","desc":"Examine one target within a `replacements:` entry. Each target specifies the `fieldPath` expression where the substituted value is written and the optional `kind` and `name` selectors that narrow which rendered resources are affected.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true},"resource":{"name":"resource","type":"\u001bkustomize.resource","title":"Rendered Kubernetes resource from `kustomize build`","desc":"Examine a Kubernetes manifest produced by running Kustomize over the overlay tree: apiVersion, kind, name, namespace, labels, annotations (all post-transformation), and the full manifest dict. Use this to enforce policy on the final manifest a cluster will see.","provider":"go.mondoo.com/mql/v13/providers/kustomize","is_implicit_resource":true}},"title":"Kustomize overlay","desc":"Top-level entry point for analyzing one or more `kustomization.yaml` trees. Exposes every parsed kustomization with its transformer configuration, generators, patches, image overrides, replacements, and the rendered Kubernetes resources — used to enforce policy on Kustomize-driven manifests before they reach a cluster.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.generator":{"id":"kustomize.generator","name":"kustomize.generator","fields":{"behavior":{"name":"behavior","type":"\u0007","is_mandatory":true,"title":"Behavior: \"create\", \"replace\", or \"merge\"","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"envs":{"name":"envs","type":"\u0019\u0007","is_mandatory":true,"title":"Env file sources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"files":{"name":"files","type":"\u0019\u0007","is_mandatory":true,"title":"Files to include","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"literals":{"name":"literals","type":"\u0019\u0007","is_mandatory":true,"title":"Literal key=value pairs","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Generator name","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Namespace","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type: \"configmap\" or \"secret\"","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Kustomize ConfigMap or Secret generator","desc":"Examine a generator declared in a kustomization: its type (configmap or secret), the literal key=value pairs, included files, env-file sources, merge behavior (create / replace / merge), and namespace — useful for surfacing inline secrets or ConfigMap drift.","min_provider_version":"13.0.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.image":{"id":"kustomize.image","name":"kustomize.image","fields":{"digest":{"name":"digest","type":"\u0007","is_mandatory":true,"title":"New digest (mutually exclusive with newTag)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Original image name","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"newName":{"name":"newName","type":"\u0007","is_mandatory":true,"title":"New image name (empty if unchanged)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"newTag":{"name":"newTag","type":"\u0007","is_mandatory":true,"title":"New tag","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Kustomize image override","desc":"Examine an `images:` entry: the original image name, the optional replacement name, and either a new tag or new digest — used to detect non-pinned tags or unintended image swaps during overlay rendering.","min_provider_version":"13.0.0","defaults":"name newTag","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.kustomization":{"id":"kustomize.kustomization","name":"kustomize.kustomization","fields":{"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"API version","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"commonAnnotations":{"name":"commonAnnotations","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Common annotations added to all resources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"commonLabels":{"name":"commonLabels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Common labels added to all resources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"componentRefs":{"name":"componentRefs","type":"\u0019\u0007","is_mandatory":true,"title":"Component references","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"configMapGenerators":{"name":"configMapGenerators","type":"\u0019\u001bkustomize.generator","title":"ConfigMap generators","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"images":{"name":"images","type":"\u0019\u001bkustomize.image","title":"Image overrides","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Kind (Kustomization or Component)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"namePrefix":{"name":"namePrefix","type":"\u0007","is_mandatory":true,"title":"Name prefix applied to all resources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"nameSuffix":{"name":"nameSuffix","type":"\u0007","is_mandatory":true,"title":"Name suffix applied to all resources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Namespace override applied to all resources","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"patches":{"name":"patches","type":"\u0019\u001bkustomize.patch","title":"Patches (strategic merge and JSON)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the kustomization directory","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"replacements":{"name":"replacements","type":"\u0019\u001bkustomize.replacement","title":"Replacements (var-free field substitution)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"resourceRefs":{"name":"resourceRefs","type":"\u0019\u0007","is_mandatory":true,"title":"Raw resource file references","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"resources":{"name":"resources","type":"\u0019\u001bkustomize.resource","title":"Rendered Kubernetes resources (kustomize build output)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"secretGenerators":{"name":"secretGenerators","type":"\u0019\u001bkustomize.generator","title":"Secret generators","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"kustomization.yaml configuration","desc":"Examine a single kustomization: directory path, apiVersion / kind, the namespace / namePrefix / nameSuffix / commonLabels / commonAnnotations transformers, the raw resource and component references, declared patches, ConfigMap and Secret generators, image overrides, replacements, and the final rendered Kubernetes resources after running `kustomize build`.","min_provider_version":"13.0.0","defaults":"path","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.patch":{"id":"kustomize.patch","name":"kustomize.patch","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Patch content (inline YAML or file content)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Patch file path (empty if inline)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetAnnotationSelector":{"name":"targetAnnotationSelector","type":"\u0007","is_mandatory":true,"title":"Target annotation selector","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetGroup":{"name":"targetGroup","type":"\u0007","is_mandatory":true,"title":"Target group","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetKind":{"name":"targetKind","type":"\u0007","is_mandatory":true,"title":"Target kind","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetLabelSelector":{"name":"targetLabelSelector","type":"\u0007","is_mandatory":true,"title":"Target label selector","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetName":{"name":"targetName","type":"\u0007","is_mandatory":true,"title":"Target name","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetNamespace":{"name":"targetNamespace","type":"\u0007","is_mandatory":true,"title":"Target namespace","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targetVersion":{"name":"targetVersion","type":"\u0007","is_mandatory":true,"title":"Target version","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Kustomize patch (strategic merge or JSON patch)","desc":"Examine a patch's content (inline YAML or file path), its target selector (group, version, kind, name, namespace, label selector, annotation selector) — the unit Kustomize uses to mutate base resources during rendering.","min_provider_version":"13.0.0","defaults":"path","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.replacement":{"id":"kustomize.replacement","name":"kustomize.replacement","fields":{"sourceKind":{"name":"sourceKind","type":"\u0007","is_mandatory":true,"title":"Source resource kind","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"sourceName":{"name":"sourceName","type":"\u0007","is_mandatory":true,"title":"Source resource name","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"sourcePath":{"name":"sourcePath","type":"\u0007","is_mandatory":true,"title":"Source field path (e.g., \".metadata.name\")","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"targets":{"name":"targets","type":"\u0019\u001bkustomize.replacementTarget","title":"Target field paths","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Kustomize replacement","desc":"Examine a `replacements:` entry that copies one field's value to multiple target fields without using Kustomize vars. Queryable fields include the source resource selector (`sourceKind`, `sourceName`), the `sourcePath` field-path expression that identifies the value to read, and the list of `targets` that receive the substituted value.","min_provider_version":"13.0.0","defaults":"sourcePath","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.replacementTarget":{"id":"kustomize.replacementTarget","name":"kustomize.replacementTarget","fields":{"fieldPath":{"name":"fieldPath","type":"\u0007","is_mandatory":true,"title":"Target field path to replace","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Target resource kind selector","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Target resource name selector","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Kustomize replacement target","desc":"Examine one target within a `replacements:` entry. Each target specifies the `fieldPath` expression where the substituted value is written and the optional `kind` and `name` selectors that narrow which rendered resources are affected.","min_provider_version":"13.0.0","defaults":"fieldPath","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kustomize.resource":{"id":"kustomize.resource","name":"kustomize.resource","fields":{"annotations":{"name":"annotations","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Annotations (after transformations)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"Kubernetes API version","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Labels (after transformations)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"manifest":{"name":"manifest","type":"\n","is_mandatory":true,"title":"Full resource manifest as dict","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name (after transformations)","provider":"go.mondoo.com/mql/v13/providers/kustomize"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Resource namespace (after transformations)","provider":"go.mondoo.com/mql/v13/providers/kustomize"}},"title":"Rendered Kubernetes resource from `kustomize build`","desc":"Examine a Kubernetes manifest produced by running Kustomize over the overlay tree: apiVersion, kind, name, namespace, labels, annotations (all post-transformation), and the full manifest dict. Use this to enforce policy on the final manifest a cluster will see.","min_provider_version":"13.0.0","defaults":"kind name","provider":"go.mondoo.com/mql/v13/providers/kustomize"}}}