> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/kubernetes-security/kubernetes-clusters.md).

# Kubernetes clusters

The Kubernetes Clusters page provides a macro view of the entire cluster environment discovered by Cortex Cloud. The inventory view displays details about each cluster, including the cluster name, Kubernetes platform, Kubernetes version, cloud account, the scan method used to collect its data (Agentless or Connector), and its connectivity status. You can access the Kubernetes Clusters page by navigating to Modules > Kubernetes Security > Kubernetes Assets Inventory or from Inventory > Assets > All Assets > Compute.

The Kubernetes Clusters page provides a high-level overview of the containerized infrastructure through three primary data widgets:

* Kubernetes Clusters Distribution: Displays the total count of managed clusters segmented by their respective hosting platforms (e.g., EKS, GKE, OpenShift, AKS).
* Kubernetes Version Distribution: Provides a breakdown of the specific Kubernetes software versions currently running across the active environment.
* Protection Coverage: Offers a security status view that highlights the proportion of clusters where the security connector is either deployed or remains undeployed, indicating overall security visibility.
* Scan Method Distribution: Shows how clusters are distributed across collection methods (Agentless, Connector, or not collected). This widget is available from the widget dropdown above the clusters table and is not displayed by default.

The Kubernetes Clusters table serves as the central location for granular cluster management. It offers a comprehensive, detailed view of each cluster, enabling administrators to assess the specific status and metadata of individual assets within the environment.

You can access the Kubernetes Connectivity Management page from the Kubernetes Clusters page to view cluster connectors and all related information.

Key functional aspects include:

* **Asset visibility**: Provides a centralized list of all clusters, including hosting platforms, versions, account identifiers, and custom tagging for easy categorization.
* **Operational status**: Allows you to track Last Seen and Last Scan timestamps to ensure real-time visibility and audit readiness across the environment.
* **Scan method and connectivity**: Each cluster shows the method used to collect its data, Agentless or Connector, and its connectivity status (Healthy, Error, or Warning). When a cluster is not Healthy, open the cluster's side panel to view the connectivity status reason.
* **Connectivity & Remediation**: Displays the current deployment state of security connectors. Click the Deploy button at the top of the page to launch the Kubernetes Connector and manage the deployment of security connectors for your clusters.
* **Customization & Filtering**: Supports flexible data manipulation through filter controls and configurable display settings to tailor the view based on specific investigation or reporting needs.

Data for the Resource Explorer and Vulnerabilities tabs are populated with data once the posture management solution is deployed.

Selecting a cluster in the table opens its detailed asset card. The tabs displayed depend on the cluster's connection status and may include:

* **Overview**: Summarizes the high-level identifying details and security posture of the cluster. Cluster details, including asset ID, provider, cloud region, and asset groups. The Overview tab also shows the cluster's scan method and connectivity status, and it displays connector details for Connector-managed clusters. A clickable relationship graph allows you to visualize and understand the full context and dependencies of the cluster.
* **Resource Explorer**: Provides granular visibility into the specific assets deployed within the cluster. It includes a detailed list of discovered resources, including the namespace (when applicable), asset name, asset type, and category type.
* **Identity**: Displays the list of identities that can access this Kubernetes cluster.
* **Configurations**: Lists security configuration issues detected within the Kubernetes cluster. For each issue, you can view the severity, name, category, and creation date. You can also view the asset configuration JSON.
* **Vulnerabilities**: Details all discovered vulnerabilities found within the container images running in the cluster, as well as for the host operating systems of your Kubernetes nodes.

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/kubernetes-security/kubernetes-clusters.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.