A principal identity recognizable by users and peripheral systems, composed of a set of secrets for authentication and authorization.

A cluster-level logical grouping of PolicyRules, accessible as a unit by RoleBinding or ClusterRoleBinding.

A namespaced logical grouping of PolicyRules, accessible as a unit by RoleBinding.

Links to a ClusterRole without containing it. It references a ClusterRole in the global namespace and adds information through Subject.

References a Role without containing it. It can link to a Role in the same namespace or a ClusterRole in the global namespace, adding 'who' information via Subjects and specifying the namespace of existence.

Holds configuration data for pods to utilize.

Contains secret data of a certain type. A Service is a named software service abstraction (e.g., MySQL), comprising a local port and a selector to determine which pods respond to requests.

A collection of rules enabling inbound connections to reach backend-defined endpoints. It can configure services for external URLs, load balance traffic, terminate SSL, and more.

A storage resource provisioned by an administrator.

A user's request for and claim to a Persistent Volume.

A collection of containers that can operate on a host.

Facilitates declarative updates for Pods and ReplicaSets.

Ensures a specified number of pod replicas are running at any given time.

Represents the configuration of a daemon set.

Represents a set of pods with consistent identities, defined by network and storage attributes.

Represents the configuration of a single job.

Represents the configuration of a single cron job.