Surface registry inventory

This inventory comes from the shared source registry for shipped components. Canonical names, aliases, component consumers, operator locks and recorded lifecycle dates are generated together with the configuration references. Missing dates do not establish qualification. A source reader alone does not establish a supported application override; use the component guide.

Environment inputs

Input	Canonical	Consumers	Operator lock	Since / until
ADMIN_TOKEN_SINGLE_USE	ADMIN_TOKEN_SINGLE_USE	port	no	unrecorded / unrecorded
ADMIN_TOKEN_TTL	ADMIN_TOKEN_TTL	port	no	unrecorded / unrecorded
ADMIN_WIPE_TOKEN	ADMIN_WIPE_TOKEN	port	no	unrecorded / unrecorded
ADMIN_WIPE_TOKEN_FILE	ADMIN_WIPE_TOKEN_FILE	port	no	unrecorded / unrecorded
ADMISSION_NAMESPACE	ADMISSION_NAMESPACE	operator	no	unrecorded / unrecorded
ADMISSION_SA	ADMISSION_SA	operator	no	unrecorded / unrecorded
AGENT_POD_UID	AGENT_POD_UID	ebpf	no	unrecorded / unrecorded
ALLOW_DEBUGGER	ALLOW_DEBUGGER	ebpf, operator, wrapper	no	unrecorded / unrecorded
ALLOW_DISABLED_ENFORCEMENT	ALLOW_DISABLED_ENFORCEMENT	ebpf, operator, wrapper	no	unrecorded / unrecorded
ALLOW_ERROR_INJECTION	ALLOW_ERROR_INJECTION	ebpf	no	unrecorded / unrecorded
ALLOW_INSECURE_AUDIT	ALLOW_INSECURE_AUDIT	ebpf, operator, wrapper	no	unrecorded / unrecorded
AUDIT_BATCH_SIZE	AUDIT_BATCH_SIZE	ebpf	no	unrecorded / unrecorded
AUDIT_CONTROL	AUDIT_CONTROL	operator	no	unrecorded / unrecorded
AUDIT_FLUSH_INTERVAL	AUDIT_FLUSH_INTERVAL	ebpf	no	unrecorded / unrecorded
AUDIT_READ	AUDIT_READ	operator	no	unrecorded / unrecorded
AUDIT_WRITE	AUDIT_WRITE	operator	no	unrecorded / unrecorded
AUTHORITY_INSTANCE	AUTHORITY_INSTANCE	port	no	unrecorded / unrecorded
AUTHZ_ADMIN_PROVISION_REQUIRED	AUTHZ_ADMIN_PROVISION_REQUIRED	operator, port, wrapper	no	unrecorded / unrecorded
AUTHZ_COMPATIBILITY_REQUIRED	AUTHZ_COMPATIBILITY_REQUIRED	wrapper	no	unrecorded / unrecorded
AUTHZ_CONSUMER_UNSUPPORTED	AUTHZ_CONSUMER_UNSUPPORTED	operator, port	no	unrecorded / unrecorded
AUTHZ_CONTRACT_MISMATCH	AUTHZ_CONTRACT_MISMATCH	operator, port, wrapper	no	unrecorded / unrecorded
AUTHZ_SOURCE_UNAVAILABLE	AUTHZ_SOURCE_UNAVAILABLE	port	no	unrecorded / unrecorded
AUTHZ_SUBSET_REQUEST_REQUIRED	AUTHZ_SUBSET_REQUEST_REQUIRED	port	no	2026-11-03 / unrecorded
AUTH_KEY	AUTH_KEY	cli	no	unrecorded / unrecorded
AUTH_MODE	AUTH_MODE	port	no	unrecorded / unrecorded
AUTO_CONNECT	AUTO_CONNECT	port	no	unrecorded / unrecorded
AUTO_REGISTER	AUTO_REGISTER	port	no	unrecorded / unrecorded
AUTO_REGISTER_MAX_CLUSTERS	AUTO_REGISTER_MAX_CLUSTERS	port	no	unrecorded / unrecorded
AUTO_REGISTER_RATE_LIMIT_PER_MINUTE	AUTO_REGISTER_RATE_LIMIT_PER_MINUTE	port	no	unrecorded / unrecorded
AWS_ACCESS_KEY_ID	AWS_ACCESS_KEY_ID	operator	no	unrecorded / unrecorded
AWS_CONFIG_FILE	AWS_CONFIG_FILE	operator	no	unrecorded / unrecorded
AWS_CONTAINER_AUTHORIZATION_TOKEN	AWS_CONTAINER_AUTHORIZATION_TOKEN	operator	no	unrecorded / unrecorded
AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE	AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE	operator	no	unrecorded / unrecorded
AWS_CONTAINER_CREDENTIALS_FULL_URI	AWS_CONTAINER_CREDENTIALS_FULL_URI	operator	no	unrecorded / unrecorded
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI	AWS_CONTAINER_CREDENTIALS_RELATIVE_URI	operator	no	unrecorded / unrecorded
AWS_DEFAULT_REGION	AWS_DEFAULT_REGION	operator	no	unrecorded / unrecorded
AWS_EC2_METADATA_DISABLED	AWS_EC2_METADATA_DISABLED	operator	no	unrecorded / unrecorded
AWS_ENDPOINT_URL	AWS_ENDPOINT_URL	operator	no	unrecorded / unrecorded
AWS_PROFILE	AWS_PROFILE	operator	no	unrecorded / unrecorded
AWS_REGION	AWS_REGION	operator	no	unrecorded / unrecorded
AWS_ROLE_ARN	AWS_ROLE_ARN	operator	no	unrecorded / unrecorded
AWS_ROLE_SESSION_NAME	AWS_ROLE_SESSION_NAME	operator	no	unrecorded / unrecorded
AWS_SDK_LOAD_CONFIG	AWS_SDK_LOAD_CONFIG	operator	no	unrecorded / unrecorded
AWS_SECRET_ACCESS_KEY	AWS_SECRET_ACCESS_KEY	operator	no	unrecorded / unrecorded
AWS_SECURITY_TOKEN	AWS_SECURITY_TOKEN	operator	no	unrecorded / unrecorded
AWS_SESSION_TOKEN	AWS_SESSION_TOKEN	operator	no	unrecorded / unrecorded
AWS_SHARED_CREDENTIALS_FILE	AWS_SHARED_CREDENTIALS_FILE	operator	no	unrecorded / unrecorded
AWS_WEB_IDENTITY_TOKEN_FILE	AWS_WEB_IDENTITY_TOKEN_FILE	operator	no	unrecorded / unrecorded
BAO_ADDR	BAO_ADDR	cli	no	unrecorded / unrecorded
BAO_LOCAL_CONFIG	BAO_LOCAL_CONFIG	cli	no	unrecorded / unrecorded
BAO_TOKEN	BAO_TOKEN	cli	no	unrecorded / unrecorded
BEACON_ADDRESS	BEACON_ADDRESS	port	no	unrecorded / unrecorded
BEACON_AUTH_KEY	BEACON_AUTH_KEY	port	no	unrecorded / unrecorded
BEACON_AUTH_KEY_FILE	BEACON_AUTH_KEY_FILE	port	no	unrecorded / unrecorded
BEACON_AUTH_KEY_OVERLAP_UNTIL	BEACON_AUTH_KEY_OVERLAP_UNTIL	port	no	unrecorded / unrecorded
BEACON_CA	BEACON_CA	port	no	unrecorded / unrecorded
BEACON_INFO_HASH	BEACON_INFO_HASH	port	no	unrecorded / unrecorded
BEACON_INSECURE_SKIP_VERIFY	BEACON_INSECURE_SKIP_VERIFY	port	no	unrecorded / unrecorded
BEACON_SPKI_FINGERPRINT	BEACON_SPKI_FINGERPRINT	port	no	unrecorded / unrecorded
BEACON_TENANT_FROM_SECRETSTORE	BEACON_TENANT_FROM_SECRETSTORE	port	no	unrecorded / unrecorded
BEACON_TENANT_ID	BEACON_TENANT_ID	port	no	unrecorded / unrecorded
BLOCK_SUSPEND	BLOCK_SUSPEND	operator	no	unrecorded / unrecorded
BOOTSTRAP_ALLOW_INSECURE	BOOTSTRAP_ALLOW_INSECURE	port	no	2026-11-03 / unrecorded
BOOTSTRAP_AUTH_PATH	BOOTSTRAP_AUTH_PATH	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_INSECURE_SKIP_VAULT_TLS	BOOTSTRAP_INSECURE_SKIP_VAULT_TLS	port	no	unrecorded / unrecorded
BOOTSTRAP_KEY_OUTPUT_FILE	BOOTSTRAP_KEY_OUTPUT_FILE	port	no	unrecorded / unrecorded
BOOTSTRAP_KV_PATH	BOOTSTRAP_KV_PATH	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_OPERATOR_NAMESPACE	BOOTSTRAP_OPERATOR_NAMESPACE	cli	no	unrecorded / unrecorded
BOOTSTRAP_OPERATOR_POLICY_NAME	BOOTSTRAP_OPERATOR_POLICY_NAME	cli	no	unrecorded / unrecorded
BOOTSTRAP_OPERATOR_ROLE_NAME	BOOTSTRAP_OPERATOR_ROLE_NAME	cli	no	unrecorded / unrecorded
BOOTSTRAP_OPERATOR_ROLE_TTL	BOOTSTRAP_OPERATOR_ROLE_TTL	cli	no	unrecorded / unrecorded
BOOTSTRAP_OPERATOR_SA_NAME	BOOTSTRAP_OPERATOR_SA_NAME	cli	no	unrecorded / unrecorded
BOOTSTRAP_OUTPUT_SECRET	BOOTSTRAP_OUTPUT_SECRET	cli	no	unrecorded / unrecorded
BOOTSTRAP_POD_READY_POLL	BOOTSTRAP_POD_READY_POLL	port	no	unrecorded / unrecorded
BOOTSTRAP_POD_READY_TIMEOUT	BOOTSTRAP_POD_READY_TIMEOUT	port	no	unrecorded / unrecorded
BOOTSTRAP_POLICY_NAME	BOOTSTRAP_POLICY_NAME	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_PREFLIGHT_ONLY	BOOTSTRAP_PREFLIGHT_ONLY	port	no	unrecorded / unrecorded
BOOTSTRAP_PREFLIGHT_TIMEOUT	BOOTSTRAP_PREFLIGHT_TIMEOUT	port	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_BOUND_SA_NAMES	BOOTSTRAP_ROLE_BOUND_SA_NAMES	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_BOUND_SA_NAMESPACES	BOOTSTRAP_ROLE_BOUND_SA_NAMESPACES	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_MAX_TTL	BOOTSTRAP_ROLE_MAX_TTL	cli	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_NAME	BOOTSTRAP_ROLE_NAME	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_SECRET_PATHS	BOOTSTRAP_ROLE_SECRET_PATHS	cli	no	unrecorded / unrecorded
BOOTSTRAP_ROLE_TTL	BOOTSTRAP_ROLE_TTL	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_SHAMIR_SHARES	BOOTSTRAP_SHAMIR_SHARES	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_SHAMIR_THRESHOLD	BOOTSTRAP_SHAMIR_THRESHOLD	cli, port	no	unrecorded / unrecorded
BOOTSTRAP_SKIP_PREFLIGHT	BOOTSTRAP_SKIP_PREFLIGHT	port	no	unrecorded / unrecorded
BOOTSTRAP_UNSEAL_MODE	BOOTSTRAP_UNSEAL_MODE	port	no	unrecorded / unrecorded
BOOTSTRAP_VS_BROKER_POLICY_NAME	BOOTSTRAP_VS_BROKER_POLICY_NAME	port	no	unrecorded / unrecorded
BOOTSTRAP_VS_BROKER_ROLE_NAME	BOOTSTRAP_VS_BROKER_ROLE_NAME	port	no	unrecorded / unrecorded
BOOTSTRAP_VS_BROKER_ROLE_TTL	BOOTSTRAP_VS_BROKER_ROLE_TTL	port	no	unrecorded / unrecorded
BOOTSTRAP_VS_BROKER_SA_NAME	BOOTSTRAP_VS_BROKER_SA_NAME	port	no	unrecorded / unrecorded
BOOTSTRAP_VS_BROKER_SA_NAMESPACE	BOOTSTRAP_VS_BROKER_SA_NAMESPACE	port	no	unrecorded / unrecorded
BOOTSTRAP_WORKLOADS	BOOTSTRAP_WORKLOADS	port	no	unrecorded / unrecorded
BOOTSTRAP_WORKLOAD_CIDRS	BOOTSTRAP_WORKLOAD_CIDRS	cli	no	unrecorded / unrecorded
BPF_PIN_DIR	BPF_PIN_DIR	ebpf	no	unrecorded / unrecorded
BROKER_ADDR	BROKER_ADDR	port	no	unrecorded / unrecorded
BROKER_CA_PATH	BROKER_CA_PATH	ebpf	no	unrecorded / unrecorded
BROKER_TOKEN_PATH	BROKER_TOKEN_PATH	ebpf	no	unrecorded / unrecorded
BROKER_URL	BROKER_URL	ebpf	no	unrecorded / unrecorded
CAP_SYS_ADMIN	CAP_SYS_ADMIN	ebpf	no	unrecorded / unrecorded
CERT_RELOAD_INTERVAL	CERT_RELOAD_INTERVAL	port	no	unrecorded / unrecorded
CGROUP_ENFORCE	CGROUP_ENFORCE	ebpf, port	no	unrecorded / unrecorded
CHECKPOINT_RESTORE	CHECKPOINT_RESTORE	operator	no	unrecorded / unrecorded
CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE	CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE	ebpf	no	unrecorded / unrecorded
CLOUDSDK_CONFIG	CLOUDSDK_CONFIG	ebpf	no	unrecorded / unrecorded
CLOUDSDK_CORE_PROJECT	CLOUDSDK_CORE_PROJECT	ebpf	no	unrecorded / unrecorded
CLOUDTASER_ALLOW_KUBE_DNS	CLOUDTASER_ALLOW_KUBE_DNS	operator	no	unrecorded / unrecorded
CLOUDTASER_ALLOW_LEGACY_SECRET_PROXY	CLOUDTASER_ALLOW_LEGACY_SECRET_PROXY	operator	no	unrecorded / unrecorded
CLOUDTASER_ALLOW_LEGACY_UNSEAL	CLOUDTASER_ALLOW_LEGACY_UNSEAL	operator	no	unrecorded / unrecorded
CLOUDTASER_ALLOW_UNSIGNED	CLOUDTASER_ALLOW_UNSIGNED	cli	no	unrecorded / unrecorded
CLOUDTASER_ALLOW_UNTRUSTED_REGISTRIES	CLOUDTASER_ALLOW_UNTRUSTED_REGISTRIES	operator	no	unrecorded / unrecorded
CLOUDTASER_API_SERVER_CIDRS	CLOUDTASER_API_SERVER_CIDRS	operator	no	unrecorded / unrecorded
CLOUDTASER_API_SERVER_PORTS	CLOUDTASER_API_SERVER_PORTS	operator	no	unrecorded / unrecorded
CLOUDTASER_APPARMOR_PROFILE	CLOUDTASER_APPARMOR_PROFILE	operator	no	unrecorded / unrecorded
CLOUDTASER_ATTESTATION_ENABLED	CLOUDTASER_ATTESTATION_ENABLED	operator	no	unrecorded / unrecorded
CLOUDTASER_ATTESTATION_INTERVAL	CLOUDTASER_ATTESTATION_INTERVAL	operator	no	unrecorded / unrecorded
CLOUDTASER_AUDIT_LOG	CLOUDTASER_AUDIT_LOG	wrapper	no	unrecorded / unrecorded
CLOUDTASER_AUTH_TOKEN_LOOPBACK_PORT	CLOUDTASER_AUTH_TOKEN_LOOPBACK_PORT	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_ADDRESS	CLOUDTASER_BEACON_ADDRESS	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_ALLOW_INSECURE	CLOUDTASER_BEACON_ALLOW_INSECURE	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_AUTH_KEY	CLOUDTASER_BEACON_AUTH_KEY	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_AUTH_KEY_FILE	CLOUDTASER_BEACON_AUTH_KEY_FILE	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_AUTH_KEY_OUT	CLOUDTASER_BEACON_AUTH_KEY_OUT	cli	no	unrecorded / unrecorded
CLOUDTASER_BEACON_AUTH_KEY_OVERLAP_UNTIL	CLOUDTASER_BEACON_AUTH_KEY_OVERLAP_UNTIL	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_CA	CLOUDTASER_BEACON_CA	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_INFO_HASH	CLOUDTASER_BEACON_INFO_HASH	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_INIT_SALT	CLOUDTASER_BEACON_INIT_SALT	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_INIT_SALT_OVERLAP_UNTIL	CLOUDTASER_BEACON_INIT_SALT_OVERLAP_UNTIL	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_INSECURE_SKIP_VERIFY	CLOUDTASER_BEACON_INSECURE_SKIP_VERIFY	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_MAX_CONSECUTIVE_FAILURES	CLOUDTASER_BEACON_MAX_CONSECUTIVE_FAILURES	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_PREVIOUS_AUTH_KEY_FILE	CLOUDTASER_BEACON_PREVIOUS_AUTH_KEY_FILE	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_PREVIOUS_INIT_SALT	CLOUDTASER_BEACON_PREVIOUS_INIT_SALT	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_SPKI_PIN	CLOUDTASER_BEACON_SPKI_PIN	operator	no	unrecorded / unrecorded
CLOUDTASER_BEACON_TOKEN	CLOUDTASER_BEACON_TOKEN	cli	no	unrecorded / unrecorded
CLOUDTASER_BEACON_TOKEN_OUT	CLOUDTASER_BEACON_TOKEN_OUT	cli	no	unrecorded / unrecorded
CLOUDTASER_BEACON_TRUST_SYSTEM_ROOTS	CLOUDTASER_BEACON_TRUST_SYSTEM_ROOTS	operator	no	unrecorded / unrecorded
CLOUDTASER_BROKER_ADDR	CLOUDTASER_BROKER_ADDR	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_ALLOW_HTTP	CLOUDTASER_BROKER_ALLOW_HTTP	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_BROKER_CA_FILE	CLOUDTASER_BROKER_CA_FILE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_CA_PEM	CLOUDTASER_BROKER_CA_PEM	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_SERVER_NAME	CLOUDTASER_BROKER_SERVER_NAME	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_TLS_CA	CLOUDTASER_BROKER_TLS_CA	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_TLS_CA_BUNDLE	CLOUDTASER_BROKER_TLS_CA_BUNDLE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_TLS_CERT	CLOUDTASER_BROKER_TLS_CERT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_BROKER_TLS_ENABLED	CLOUDTASER_BROKER_TLS_ENABLED	operator	no	unrecorded / unrecorded
CLOUDTASER_BROKER_TLS_KEY	CLOUDTASER_BROKER_TLS_KEY	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_CHART_VERSION	CLOUDTASER_CHART_VERSION	cli	no	unrecorded / unrecorded
CLOUDTASER_CLOUDFLARE_API_BASE	CLOUDTASER_CLOUDFLARE_API_BASE	cli	no	unrecorded / unrecorded
CLOUDTASER_CLUSTER_FINGERPRINT	CLOUDTASER_CLUSTER_FINGERPRINT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_CLUSTER_ID	CLOUDTASER_CLUSTER_ID	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_CONFIDENTIAL_VM	CLOUDTASER_CONFIDENTIAL_VM	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_CONSUMER	CLOUDTASER_CONSUMER	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_CORRELATION_ID	CLOUDTASER_CORRELATION_ID	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_COSIGN_BINARY	CLOUDTASER_COSIGN_BINARY	cli	no	unrecorded / unrecorded
CLOUDTASER_COSIGN_ENFORCED	CLOUDTASER_COSIGN_ENFORCED	operator	no	unrecorded / unrecorded
CLOUDTASER_COSIGN_KEY	CLOUDTASER_COSIGN_KEY	operator	no	unrecorded / unrecorded
CLOUDTASER_COSIGN_KEY_SECRET	CLOUDTASER_COSIGN_KEY_SECRET	operator	no	unrecorded / unrecorded
CLOUDTASER_COSIGN_PUBLIC_KEY	CLOUDTASER_COSIGN_PUBLIC_KEY	cli	no	unrecorded / unrecorded
CLOUDTASER_DANGEROUS_CAPABILITIES_DENY	CLOUDTASER_DANGEROUS_CAPABILITIES_DENY	operator	no	unrecorded / unrecorded
CLOUDTASER_DBPROXY	CLOUDTASER_DBPROXY	operator	no	unrecorded / unrecorded
CLOUDTASER_DBPROXY_AGENT_RESOLUTION	CLOUDTASER_DBPROXY_AGENT_RESOLUTION	ebpf, operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_ALLOW_NON_LOOPBACK_LISTEN	CLOUDTASER_DBPROXY_ALLOW_NON_LOOPBACK_LISTEN	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BLIND_INDEX_COLUMNS	CLOUDTASER_DBPROXY_BLIND_INDEX_COLUMNS	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BLIND_INDEX_KEY	CLOUDTASER_DBPROXY_BLIND_INDEX_KEY	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BROKER_ADDR	CLOUDTASER_DBPROXY_BROKER_ADDR	ebpf, operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BROKER_CA_FILE	CLOUDTASER_DBPROXY_BROKER_CA_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BROKER_SERVER_NAME	CLOUDTASER_DBPROXY_BROKER_SERVER_NAME	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BROKER_TOKEN_AUDIENCE	CLOUDTASER_DBPROXY_BROKER_TOKEN_AUDIENCE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_BROKER_TOKEN_FILE	CLOUDTASER_DBPROXY_BROKER_TOKEN_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_CLUSTER_ID	CLOUDTASER_DBPROXY_CLUSTER_ID	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DB_ALLOW_INSECURE	CLOUDTASER_DBPROXY_DB_ALLOW_INSECURE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DB_ENDPOINT	CLOUDTASER_DBPROXY_DB_ENDPOINT	ebpf, operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DB_TLS	CLOUDTASER_DBPROXY_DB_TLS	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DB_TLS_SKIP_VERIFY	CLOUDTASER_DBPROXY_DB_TLS_SKIP_VERIFY	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DEK_FIELD	CLOUDTASER_DBPROXY_DEK_FIELD	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DEK_KV_MOUNT	CLOUDTASER_DBPROXY_DEK_KV_MOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DEK_KV_PATH	CLOUDTASER_DBPROXY_DEK_KV_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_DEK_UNWRAP_PATH	CLOUDTASER_DBPROXY_DEK_UNWRAP_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_ENCRYPT_COLUMNS	CLOUDTASER_DBPROXY_ENCRYPT_COLUMNS	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_HEALTH_ADDR	CLOUDTASER_DBPROXY_HEALTH_ADDR	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_IMAGE	CLOUDTASER_DBPROXY_IMAGE	operator	no	unrecorded / unrecorded
CLOUDTASER_DBPROXY_IMAGE_PULL_POLICY	CLOUDTASER_DBPROXY_IMAGE_PULL_POLICY	operator	no	unrecorded / unrecorded
CLOUDTASER_DBPROXY_LISTEN_ADDR	CLOUDTASER_DBPROXY_LISTEN_ADDR	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_POD_NAME	CLOUDTASER_DBPROXY_POD_NAME	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_POD_NAMESPACE	CLOUDTASER_DBPROXY_POD_NAMESPACE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_POD_UID	CLOUDTASER_DBPROXY_POD_UID	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_SERVICE_ACCOUNT	CLOUDTASER_DBPROXY_SERVICE_ACCOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_TRANSIT_KEY	CLOUDTASER_DBPROXY_TRANSIT_KEY	ebpf, operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_TRANSIT_MOUNT	CLOUDTASER_DBPROXY_TRANSIT_MOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_TRANSIT_VIA_BEACON	CLOUDTASER_DBPROXY_TRANSIT_VIA_BEACON	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_ADDR	CLOUDTASER_DBPROXY_VAULT_ADDR	ebpf, operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_AUTH_METHOD	CLOUDTASER_DBPROXY_VAULT_AUTH_METHOD	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_AUTH_MOUNT_PATH	CLOUDTASER_DBPROXY_VAULT_AUTH_MOUNT_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_AUTH_ROLE	CLOUDTASER_DBPROXY_VAULT_AUTH_ROLE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_AUTH_SA_TOKEN_FILE	CLOUDTASER_DBPROXY_VAULT_AUTH_SA_TOKEN_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_DBPROXY_VAULT_SKIP_VERIFY	CLOUDTASER_DBPROXY_VAULT_SKIP_VERIFY	operator	always	unrecorded / unrecorded
CLOUDTASER_DEMO_SIGNING_ENABLED	CLOUDTASER_DEMO_SIGNING_ENABLED	operator	no	unrecorded / unrecorded
CLOUDTASER_DEV	CLOUDTASER_DEV	cli	no	unrecorded / unrecorded
CLOUDTASER_DEV_DISABLE_UNSEAL_AUTH	CLOUDTASER_DEV_DISABLE_UNSEAL_AUTH	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_DIGEST_NEGATIVE_TTL_SECONDS	CLOUDTASER_DIGEST_NEGATIVE_TTL_SECONDS	operator	no	unrecorded / unrecorded
CLOUDTASER_DIGEST_POSITIVE_TTL_SECONDS	CLOUDTASER_DIGEST_POSITIVE_TTL_SECONDS	operator	no	unrecorded / unrecorded
CLOUDTASER_DIGEST_TIMEOUT_SECONDS	CLOUDTASER_DIGEST_TIMEOUT_SECONDS	operator	no	unrecorded / unrecorded
CLOUDTASER_DNS_CIDRS	CLOUDTASER_DNS_CIDRS	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_AGENT_ADDR	CLOUDTASER_EBPF_AGENT_ADDR	ebpf, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_EBPF_AGENT_SA	CLOUDTASER_EBPF_AGENT_SA	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_ALLOW_INSECURE_HTTP	CLOUDTASER_EBPF_ALLOW_INSECURE_HTTP	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_EBPF_ALLOW_INSECURE_TLS	CLOUDTASER_EBPF_ALLOW_INSECURE_TLS	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_ALLOW_NAMESPACE_OPT_OUT	CLOUDTASER_EBPF_ALLOW_NAMESPACE_OPT_OUT	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_ATTESTATION_HMAC_KEY	CLOUDTASER_EBPF_ATTESTATION_HMAC_KEY	ebpf, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_EBPF_DAEMONSET_NAME	CLOUDTASER_EBPF_DAEMONSET_NAME	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_ENROLLMENT_SKIP	CLOUDTASER_EBPF_ENROLLMENT_SKIP	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_EBPF_ENROLLMENT_TIMEOUT	CLOUDTASER_EBPF_ENROLLMENT_TIMEOUT	wrapper	no	unrecorded / unrecorded
CLOUDTASER_EBPF_HEALTH_ADDR	CLOUDTASER_EBPF_HEALTH_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_EBPF_HEALTH_PORT	CLOUDTASER_EBPF_HEALTH_PORT	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_EBPF_MODE	CLOUDTASER_EBPF_MODE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_EBPF_MWH_NAME	CLOUDTASER_EBPF_MWH_NAME	ebpf	no	unrecorded / unrecorded
CLOUDTASER_EBPF_NODE_IP	CLOUDTASER_EBPF_NODE_IP	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_ENABLE_EBPF_GATE	CLOUDTASER_ENABLE_EBPF_GATE	operator	no	unrecorded / unrecorded
CLOUDTASER_ENABLE_NETWORK_POLICY	CLOUDTASER_ENABLE_NETWORK_POLICY	operator	no	unrecorded / unrecorded
CLOUDTASER_ENABLE_REVERSE_CONNECT	CLOUDTASER_ENABLE_REVERSE_CONNECT	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_ENV	CLOUDTASER_ENV	cli	no	unrecorded / unrecorded
CLOUDTASER_ENV_ALLOWLIST	CLOUDTASER_ENV_ALLOWLIST	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_ENV_MAP	CLOUDTASER_ENV_MAP	cli, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_ENV_SNAPSHOT_MODE	CLOUDTASER_ENV_SNAPSHOT_MODE	wrapper	no	unrecorded / unrecorded
CLOUDTASER_ENV_SNAPSHOT_STRIP	CLOUDTASER_ENV_SNAPSHOT_STRIP	wrapper	no	unrecorded / unrecorded
CLOUDTASER_EXEC_ACK_FD	CLOUDTASER_EXEC_ACK_FD	wrapper	no	unrecorded / unrecorded
CLOUDTASER_EXEC_TABLE_FD	CLOUDTASER_EXEC_TABLE_FD	wrapper	no	unrecorded / unrecorded
CLOUDTASER_EXPECTED_OPERATOR_SA	CLOUDTASER_EXPECTED_OPERATOR_SA	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_HEALTH_ADDR	CLOUDTASER_HEALTH_ADDR	ebpf, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_HEALTH_CA_FILE	CLOUDTASER_HEALTH_CA_FILE	operator	no	unrecorded / unrecorded
CLOUDTASER_HEALTH_ISSUER_TLS_CA_FILE	CLOUDTASER_HEALTH_ISSUER_TLS_CA_FILE	operator	no	unrecorded / unrecorded
CLOUDTASER_HEALTH_ISSUER_URL	CLOUDTASER_HEALTH_ISSUER_URL	operator	no	unrecorded / unrecorded
CLOUDTASER_INIT_IMAGE	CLOUDTASER_INIT_IMAGE	operator	no	unrecorded / unrecorded
CLOUDTASER_INJECT_RUNTIME_DEFAULT_SECCOMP	CLOUDTASER_INJECT_RUNTIME_DEFAULT_SECCOMP	operator	no	unrecorded / unrecorded
CLOUDTASER_JWKS_APPROVERS	CLOUDTASER_JWKS_APPROVERS	cli	no	2026-11-03 / unrecorded
CLOUDTASER_JWKS_CACHE_TTL_SECONDS	CLOUDTASER_JWKS_CACHE_TTL_SECONDS	wrapper	no	unrecorded / unrecorded
CLOUDTASER_JWKS_SIGNING_KEY	CLOUDTASER_JWKS_SIGNING_KEY	cli	no	2026-11-03 / unrecorded
CLOUDTASER_JWKS_URL	CLOUDTASER_JWKS_URL	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_KEEP_SECRETS_IN_ENV	CLOUDTASER_KEEP_SECRETS_IN_ENV	wrapper	no	unrecorded / unrecorded
CLOUDTASER_LEGACY_SECRET_PROXY	CLOUDTASER_LEGACY_SECRET_PROXY	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_MAX_RENEWAL_FAILURE_DURATION	CLOUDTASER_MAX_RENEWAL_FAILURE_DURATION	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_METRICS_ADDR	CLOUDTASER_METRICS_ADDR	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_METRICS_ALLOW_EXTERNAL	CLOUDTASER_METRICS_ALLOW_EXTERNAL	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_METRICS_ENABLED	CLOUDTASER_METRICS_ENABLED	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_NATIVE_SECRET_FD	CLOUDTASER_NATIVE_SECRET_FD	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_NODE_NAME	CLOUDTASER_NODE_NAME	wrapper	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_BROKER_AUTH_TOKEN	CLOUDTASER_OPERATOR_BROKER_AUTH_TOKEN	operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_NAMESPACE	CLOUDTASER_OPERATOR_NAMESPACE	operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_POD_UID	CLOUDTASER_OPERATOR_POD_UID	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_REPLICAS	CLOUDTASER_OPERATOR_REPLICAS	operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_SA_NAME	CLOUDTASER_OPERATOR_SA_NAME	operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_SECRET_STORE	CLOUDTASER_OPERATOR_SECRET_STORE	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_OPERATOR_STORE_EGRESS	CLOUDTASER_OPERATOR_STORE_EGRESS	operator	no	unrecorded / unrecorded
CLOUDTASER_ORIGINAL_ARGS	CLOUDTASER_ORIGINAL_ARGS	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_ORIGINAL_CMD	CLOUDTASER_ORIGINAL_CMD	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_POD_NAME	CLOUDTASER_POD_NAME	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_POD_NAMESPACE	CLOUDTASER_POD_NAMESPACE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_POD_UID	CLOUDTASER_POD_UID	cli, operator, port, wrapper	always	unrecorded / unrecorded
CLOUDTASER_PORT_	CLOUDTASER_PORT_	port	no	unrecorded / unrecorded
CLOUDTASER_PORT_ADDR	CLOUDTASER_PORT_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_AUTHORITY_CATALOG_SHA256	CLOUDTASER_PORT_AUTHORITY_CATALOG_SHA256	port	no	unrecorded / unrecorded
CLOUDTASER_PORT_AUTHORITY_GENERATION	CLOUDTASER_PORT_AUTHORITY_GENERATION	cli, port	no	unrecorded / unrecorded
CLOUDTASER_PORT_AUTHORITY_INSTANCE	CLOUDTASER_PORT_AUTHORITY_INSTANCE	cli, port	no	unrecorded / unrecorded
CLOUDTASER_PORT_AUTH_MODE	CLOUDTASER_PORT_AUTH_MODE	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_AUTO_REGISTER	CLOUDTASER_PORT_AUTO_REGISTER	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_BEACON_ADDRESS	CLOUDTASER_PORT_BEACON_ADDRESS	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_BEACON_SPKI_FINGERPRINT	CLOUDTASER_PORT_BEACON_SPKI_FINGERPRINT	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_BEACON_TENANT_FROM_SECRETSTORE	CLOUDTASER_PORT_BEACON_TENANT_FROM_SECRETSTORE	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_BEACON_TENANT_ID	CLOUDTASER_PORT_BEACON_TENANT_ID	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_BOOTSTRAP_ID	CLOUDTASER_PORT_BOOTSTRAP_ID	cli, port	no	unrecorded / unrecorded
CLOUDTASER_PORT_CA_CERT	CLOUDTASER_PORT_CA_CERT	operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_DEV_MODE	CLOUDTASER_PORT_DEV_MODE	port	no	2026-11-03 / unrecorded
CLOUDTASER_PORT_FINGERPRINT_SWEEP_INTERVAL	CLOUDTASER_PORT_FINGERPRINT_SWEEP_INTERVAL	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_HEALTH_ADDR	CLOUDTASER_PORT_HEALTH_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_HOST_ROLE	CLOUDTASER_PORT_HOST_ROLE	port	no	unrecorded / unrecorded
CLOUDTASER_PORT_HOST_UID	CLOUDTASER_PORT_HOST_UID	port	no	unrecorded / unrecorded
CLOUDTASER_PORT_HOST_UNIT	CLOUDTASER_PORT_HOST_UNIT	port	no	unrecorded / unrecorded
CLOUDTASER_PORT_INIT_LISTENER_AUTO_PRUNE	CLOUDTASER_PORT_INIT_LISTENER_AUTO_PRUNE	cli	no	unrecorded / unrecorded
CLOUDTASER_PORT_SELF_BOOTSTRAP	CLOUDTASER_PORT_SELF_BOOTSTRAP	cli, operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_TLS_CERT	CLOUDTASER_PORT_TLS_CERT	operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_TLS_KEY	CLOUDTASER_PORT_TLS_KEY	operator	no	unrecorded / unrecorded
CLOUDTASER_PORT_VAULT_CA_SHA256	CLOUDTASER_PORT_VAULT_CA_SHA256	cli, port	no	unrecorded / unrecorded
CLOUDTASER_POSTURE_CONFIG_FILE	CLOUDTASER_POSTURE_CONFIG_FILE	operator	no	unrecorded / unrecorded
CLOUDTASER_PROXY_BROKER_CA_PEM	CLOUDTASER_PROXY_BROKER_CA_PEM	operator	always	unrecorded / unrecorded
CLOUDTASER_READY_PROBE	CLOUDTASER_READY_PROBE	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_REEXEC_SCRUB	CLOUDTASER_REEXEC_SCRUB	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_REEXEC_SCRUBBED	CLOUDTASER_REEXEC_SCRUBBED	wrapper	no	unrecorded / unrecorded
CLOUDTASER_RENEWAL_INTERVAL	CLOUDTASER_RENEWAL_INTERVAL	wrapper	no	unrecorded / unrecorded
CLOUDTASER_REQUIRE_ADMIN_ENROLLMENT	CLOUDTASER_REQUIRE_ADMIN_ENROLLMENT	operator	no	unrecorded / unrecorded
CLOUDTASER_REQUIRE_EBPF_AGENT_ON_CREATE	CLOUDTASER_REQUIRE_EBPF_AGENT_ON_CREATE	operator	no	unrecorded / unrecorded
CLOUDTASER_REQUIRE_FULL_ENFORCEMENT	CLOUDTASER_REQUIRE_FULL_ENFORCEMENT	ebpf	no	2026-11-03 / unrecorded
CLOUDTASER_REQUIRE_MEMFD_SECRET	CLOUDTASER_REQUIRE_MEMFD_SECRET	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_REQUIRE_MLOCK	CLOUDTASER_REQUIRE_MLOCK	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_REVOCATION_CHECK_INTERVAL	CLOUDTASER_REVOCATION_CHECK_INTERVAL	wrapper	no	unrecorded / unrecorded
CLOUDTASER_REVOCATION_GRACE	CLOUDTASER_REVOCATION_GRACE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_ROTATION	CLOUDTASER_ROTATION	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_RUNTIME_POLICY	CLOUDTASER_RUNTIME_POLICY	wrapper	no	unrecorded / unrecorded
CLOUDTASER_RUNTIME_SOCKET_DENY_PATHS	CLOUDTASER_RUNTIME_SOCKET_DENY_PATHS	operator	no	unrecorded / unrecorded
CLOUDTASER_S3PROXY	CLOUDTASER_S3PROXY	operator	no	unrecorded / unrecorded
CLOUDTASER_S3PROXY_BROKER_ADDR	CLOUDTASER_S3PROXY_BROKER_ADDR	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_BROKER_CA_FILE	CLOUDTASER_S3PROXY_BROKER_CA_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_BROKER_SERVER_NAME	CLOUDTASER_S3PROXY_BROKER_SERVER_NAME	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_BROKER_TOKEN_AUDIENCE	CLOUDTASER_S3PROXY_BROKER_TOKEN_AUDIENCE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_BROKER_TOKEN_FILE	CLOUDTASER_S3PROXY_BROKER_TOKEN_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_CLUSTER_ID	CLOUDTASER_S3PROXY_CLUSTER_ID	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_DEK_FIELD	CLOUDTASER_S3PROXY_DEK_FIELD	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_DEK_KV_MOUNT	CLOUDTASER_S3PROXY_DEK_KV_MOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_DEK_KV_PATH	CLOUDTASER_S3PROXY_DEK_KV_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_DEK_UNWRAP_PATH	CLOUDTASER_S3PROXY_DEK_UNWRAP_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_IMAGE	CLOUDTASER_S3PROXY_IMAGE	operator	no	unrecorded / unrecorded
CLOUDTASER_S3PROXY_IMAGE_PULL_POLICY	CLOUDTASER_S3PROXY_IMAGE_PULL_POLICY	operator	no	unrecorded / unrecorded
CLOUDTASER_S3PROXY_POD_NAME	CLOUDTASER_S3PROXY_POD_NAME	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_POD_NAMESPACE	CLOUDTASER_S3PROXY_POD_NAMESPACE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_POD_UID	CLOUDTASER_S3PROXY_POD_UID	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_S3_ALLOW_INSECURE	CLOUDTASER_S3PROXY_S3_ALLOW_INSECURE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_S3_ALLOW_INSECURE_ENDPOINT	CLOUDTASER_S3PROXY_S3_ALLOW_INSECURE_ENDPOINT	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_S3_ENDPOINT	CLOUDTASER_S3PROXY_S3_ENDPOINT	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_S3_ENDPOINT_INSECURE	CLOUDTASER_S3PROXY_S3_ENDPOINT_INSECURE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_S3_REGION	CLOUDTASER_S3PROXY_S3_REGION	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_SERVICE_ACCOUNT	CLOUDTASER_S3PROXY_SERVICE_ACCOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_TRANSIT_KEY	CLOUDTASER_S3PROXY_TRANSIT_KEY	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_TRANSIT_MOUNT	CLOUDTASER_S3PROXY_TRANSIT_MOUNT	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_TRANSIT_VIA_BEACON	CLOUDTASER_S3PROXY_TRANSIT_VIA_BEACON	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_ADDR	CLOUDTASER_S3PROXY_VAULT_ADDR	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_AUTH_METHOD	CLOUDTASER_S3PROXY_VAULT_AUTH_METHOD	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_AUTH_MOUNT_PATH	CLOUDTASER_S3PROXY_VAULT_AUTH_MOUNT_PATH	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_AUTH_ROLE	CLOUDTASER_S3PROXY_VAULT_AUTH_ROLE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_AUTH_SA_TOKEN_FILE	CLOUDTASER_S3PROXY_VAULT_AUTH_SA_TOKEN_FILE	operator	always	unrecorded / unrecorded
CLOUDTASER_S3PROXY_VAULT_SKIP_VERIFY	CLOUDTASER_S3PROXY_VAULT_SKIP_VERIFY	operator	always	unrecorded / unrecorded
CLOUDTASER_SECCOMP_PROFILE	CLOUDTASER_SECCOMP_PROFILE	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_ADDRESS	CLOUDTASER_SECRETSTORE_ADDRESS	cli	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_AUTH_PATH	CLOUDTASER_SECRETSTORE_AUTH_PATH	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_AUTH_ROLE	CLOUDTASER_SECRETSTORE_AUTH_ROLE	cli, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_CIDRS	CLOUDTASER_SECRETSTORE_CIDRS	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_DEFAULT_BACKEND	CLOUDTASER_SECRETSTORE_DEFAULT_BACKEND	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_KV_MOUNT	CLOUDTASER_SECRETSTORE_KV_MOUNT	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_NAMESPACE	CLOUDTASER_SECRETSTORE_NAMESPACE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_PORTS	CLOUDTASER_SECRETSTORE_PORTS	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_PORT_ADDR	CLOUDTASER_SECRETSTORE_PORT_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_SAAS_ADDR	CLOUDTASER_SECRETSTORE_SAAS_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_SECRETSTORE_SUBSTRATE	CLOUDTASER_SECRETSTORE_SUBSTRATE	cli	no	unrecorded / unrecorded
CLOUDTASER_SECRET_ALLOWLIST	CLOUDTASER_SECRET_ALLOWLIST	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRET_BACKEND	CLOUDTASER_SECRET_BACKEND	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRET_ENVELOPE_TOKEN_PATH	CLOUDTASER_SECRET_ENVELOPE_TOKEN_PATH	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRET_FD	CLOUDTASER_SECRET_FD	wrapper	no	unrecorded / unrecorded
CLOUDTASER_SECRET_FETCH_TIMEOUT	CLOUDTASER_SECRET_FETCH_TIMEOUT	wrapper	no	unrecorded / unrecorded
CLOUDTASER_SECRET_FETCH_TOKEN_PATH	CLOUDTASER_SECRET_FETCH_TOKEN_PATH	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRET_FETCH_TRANSIENT_TIMEOUT	CLOUDTASER_SECRET_FETCH_TRANSIENT_TIMEOUT	wrapper	no	unrecorded / unrecorded
CLOUDTASER_SECRET_PATHS	CLOUDTASER_SECRET_PATHS	cli, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_SECRET_ROOT	CLOUDTASER_SECRET_ROOT	cli	no	unrecorded / unrecorded
CLOUDTASER_SOVEREIGNTY_SUBSTRATE	CLOUDTASER_SOVEREIGNTY_SUBSTRATE	cli	no	unrecorded / unrecorded
CLOUDTASER_STRICT_BPF_LOADERS	CLOUDTASER_STRICT_BPF_LOADERS	operator	no	unrecorded / unrecorded
CLOUDTASER_STRICT_BPF_LOAD_MODE	CLOUDTASER_STRICT_BPF_LOAD_MODE	operator	no	unrecorded / unrecorded
CLOUDTASER_TIMEOUT	CLOUDTASER_TIMEOUT	cli	no	unrecorded / unrecorded
CLOUDTASER_TOKEN_FD	CLOUDTASER_TOKEN_FD	wrapper	no	unrecorded / unrecorded
CLOUDTASER_UNSEAL_CLIENT_CA	CLOUDTASER_UNSEAL_CLIENT_CA	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_UNSEAL_TOKEN_PATH	CLOUDTASER_UNSEAL_TOKEN_PATH	wrapper	no	unrecorded / unrecorded
CLOUDTASER_VAULT_ALLOW_HTTP	CLOUDTASER_VAULT_ALLOW_HTTP	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VAULT_ALLOW_INSECURE	CLOUDTASER_VAULT_ALLOW_INSECURE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VAULT_APPROLE_ROLE_ID	CLOUDTASER_VAULT_APPROLE_ROLE_ID	cli, port	no	unrecorded / unrecorded
CLOUDTASER_VAULT_APPROLE_SECRET_ID_FILE	CLOUDTASER_VAULT_APPROLE_SECRET_ID_FILE	port	no	unrecorded / unrecorded
CLOUDTASER_VAULT_AUTH_PATH	CLOUDTASER_VAULT_AUTH_PATH	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_VAULT_AUTH_ROLE	CLOUDTASER_VAULT_AUTH_ROLE	operator, wrapper	no	unrecorded / unrecorded
CLOUDTASER_VAULT_DEFAULT_BACKEND	CLOUDTASER_VAULT_DEFAULT_BACKEND	operator	no	unrecorded / unrecorded
CLOUDTASER_VAULT_KV_MOUNT	CLOUDTASER_VAULT_KV_MOUNT	operator	no	unrecorded / unrecorded
CLOUDTASER_VAULT_NAMESPACE	CLOUDTASER_VAULT_NAMESPACE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VAULT_PORT_ADDR	CLOUDTASER_VAULT_PORT_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_VAULT_SAAS_ADDR	CLOUDTASER_VAULT_SAAS_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_VAULT_TOKEN	CLOUDTASER_VAULT_TOKEN	wrapper	no	unrecorded / unrecorded
CLOUDTASER_VAULT_WRAPPED_TOKEN	CLOUDTASER_VAULT_WRAPPED_TOKEN	port	no	unrecorded / unrecorded
CLOUDTASER_VERIFY_COSIGN_SIGNATURES	CLOUDTASER_VERIFY_COSIGN_SIGNATURES	operator	no	unrecorded / unrecorded
CLOUDTASER_VOLUME_SHIELD_ENABLED	CLOUDTASER_VOLUME_SHIELD_ENABLED	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VOLUME_SHIELD_MOUNTS	CLOUDTASER_VOLUME_SHIELD_MOUNTS	ebpf, operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_BROKER_HEALTH_ADDR	CLOUDTASER_VS_BROKER_HEALTH_ADDR	wrapper	no	unrecorded / unrecorded
CLOUDTASER_VS_BROKER_MODE	CLOUDTASER_VS_BROKER_MODE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_BROKER_SOCK	CLOUDTASER_VS_BROKER_SOCK	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_DEK_BACKEND	CLOUDTASER_VS_DEK_BACKEND	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_DEK_PROVISION_ENDPOINT	CLOUDTASER_VS_DEK_PROVISION_ENDPOINT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_DEK_PROVISION_TIMEOUT	CLOUDTASER_VS_DEK_PROVISION_TIMEOUT	wrapper	no	unrecorded / unrecorded
CLOUDTASER_VS_DEK_PROVISION_TOKEN_AUDIENCE	CLOUDTASER_VS_DEK_PROVISION_TOKEN_AUDIENCE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_DEK_PROVISION_TOKEN_FILE	CLOUDTASER_VS_DEK_PROVISION_TOKEN_FILE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FDPASS_AUTH_DERIVE	CLOUDTASER_VS_FDPASS_AUTH_DERIVE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FDPASS_AUTH_DERIVE_SUPPORTED	CLOUDTASER_VS_FDPASS_AUTH_DERIVE_SUPPORTED	operator	no	unrecorded / unrecorded
CLOUDTASER_VS_FDPASS_AUTH_KEY	CLOUDTASER_VS_FDPASS_AUTH_KEY	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FDPASS_AUTH_KEY_FILE	CLOUDTASER_VS_FDPASS_AUTH_KEY_FILE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FDPASS_AUTH_TOKEN_FILE	CLOUDTASER_VS_FDPASS_AUTH_TOKEN_FILE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FRESHNESS	CLOUDTASER_VS_FRESHNESS	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_FRESHNESS_TIMEOUT	CLOUDTASER_VS_FRESHNESS_TIMEOUT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_GENERATION_INTERVAL	CLOUDTASER_VS_GENERATION_INTERVAL	wrapper	no	unrecorded / unrecorded
CLOUDTASER_VS_HEALTH_PORT	CLOUDTASER_VS_HEALTH_PORT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_MOUNT_PATH	CLOUDTASER_VS_MOUNT_PATH	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_NONCE_BUDGET	CLOUDTASER_VS_NONCE_BUDGET	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_NONCE_LEASE_SIZE	CLOUDTASER_VS_NONCE_LEASE_SIZE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_NONCE_LEASE_TIMEOUT	CLOUDTASER_VS_NONCE_LEASE_TIMEOUT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_PVC_UID	CLOUDTASER_VS_PVC_UID	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_RAW_PATH	CLOUDTASER_VS_RAW_PATH	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_SIDECAR_IMAGE	CLOUDTASER_VS_SIDECAR_IMAGE	operator	no	unrecorded / unrecorded
CLOUDTASER_VS_SIDECAR_SOCK	CLOUDTASER_VS_SIDECAR_SOCK	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_STRICT_MODE	CLOUDTASER_VS_STRICT_MODE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_TRUSTED_STATE_ENDPOINT	CLOUDTASER_VS_TRUSTED_STATE_ENDPOINT	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_TRUSTED_STATE_TOKEN_AUDIENCE	CLOUDTASER_VS_TRUSTED_STATE_TOKEN_AUDIENCE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_VS_TRUSTED_STATE_TOKEN_FILE	CLOUDTASER_VS_TRUSTED_STATE_TOKEN_FILE	operator, wrapper	always	unrecorded / unrecorded
CLOUDTASER_WATCHDOG_ENABLED	CLOUDTASER_WATCHDOG_ENABLED	wrapper	no	unrecorded / unrecorded
CLOUDTASER_WATCHDOG_INTERVAL	CLOUDTASER_WATCHDOG_INTERVAL	wrapper	no	unrecorded / unrecorded
CLOUDTASER_WATCHDOG_THRESHOLD	CLOUDTASER_WATCHDOG_THRESHOLD	wrapper	no	unrecorded / unrecorded
CLOUDTASER_WRAPPER_INIT_IMAGE_PULL_POLICY	CLOUDTASER_WRAPPER_INIT_IMAGE_PULL_POLICY	operator	no	unrecorded / unrecorded
CLOUDTASER_WRAPPER_LOG_LEVEL	CLOUDTASER_WRAPPER_LOG_LEVEL	wrapper	no	unrecorded / unrecorded
CLOUDTASER_WRAPPER_METRICS_ADDR	CLOUDTASER_WRAPPER_METRICS_ADDR	operator	no	unrecorded / unrecorded
CLOUDTASER_WRAPPER_METRICS_ENABLED	CLOUDTASER_WRAPPER_METRICS_ENABLED	operator	no	unrecorded / unrecorded
CONCURRENT_INIT_GRACE_PERIOD	CONCURRENT_INIT_GRACE_PERIOD	port	no	unrecorded / unrecorded
CONFIG_BPF_KPROBE_OVERRIDE	CONFIG_BPF_KPROBE_OVERRIDE	ebpf	no	unrecorded / unrecorded
CONFIG_BPF_LSM	CONFIG_BPF_LSM	ebpf	no	unrecorded / unrecorded
CONFIG_CRASH_DUMP	CONFIG_CRASH_DUMP	ebpf	no	unrecorded / unrecorded
CONFIG_DEVKMEM	CONFIG_DEVKMEM	ebpf	no	unrecorded / unrecorded
CONFIG_DEVMEM	CONFIG_DEVMEM	ebpf	no	unrecorded / unrecorded
CONFIG_SECRETMEM	CONFIG_SECRETMEM	ebpf	no	unrecorded / unrecorded
CONFIG_STRICT_DEVMEM	CONFIG_STRICT_DEVMEM	ebpf	no	unrecorded / unrecorded
CONNECT_ALLOWLIST_ENFORCE	CONNECT_ALLOWLIST_ENFORCE	ebpf	no	unrecorded / unrecorded
COOLDOWN_STATE_PATH	COOLDOWN_STATE_PATH	port	no	unrecorded / unrecorded
CT_PROXY_POD_NAME	CT_PROXY_POD_NAME	operator	always	unrecorded / unrecorded
CT_PROXY_POD_NAMESPACE	CT_PROXY_POD_NAMESPACE	operator	always	unrecorded / unrecorded
CT_PROXY_POD_UID	CT_PROXY_POD_UID	operator	always	unrecorded / unrecorded
CT_PROXY_SERVICE_ACCOUNT	CT_PROXY_SERVICE_ACCOUNT	operator	always	unrecorded / unrecorded
DAC_OVERRIDE	DAC_OVERRIDE	operator	no	unrecorded / unrecorded
DAC_READ_SEARCH	DAC_READ_SEARCH	operator	no	unrecorded / unrecorded
DEMO_ADMIN_TOKEN	DEMO_ADMIN_TOKEN	cli	no	unrecorded / unrecorded
DEMO_BEACON_RELAY_ADDR	DEMO_BEACON_RELAY_ADDR	cli	no	unrecorded / unrecorded
DEMO_BROKER_CA_PATH	DEMO_BROKER_CA_PATH	ebpf	no	unrecorded / unrecorded
DEMO_BROKER_TOKEN_PATH	DEMO_BROKER_TOKEN_PATH	ebpf	no	unrecorded / unrecorded
DEMO_BROKER_URL	DEMO_BROKER_URL	ebpf	no	unrecorded / unrecorded
DEMO_VAULT_ADDR	DEMO_VAULT_ADDR	cli	no	unrecorded / unrecorded
DEMO_VM3_RELAY_ADDR	DEMO_VM3_RELAY_ADDR	cli	no	unrecorded / unrecorded
DEMO_VM3_RELAY_TOKEN	DEMO_VM3_RELAY_TOKEN	cli	no	unrecorded / unrecorded
DEPLOYMENT_ENVIRONMENT	DEPLOYMENT_ENVIRONMENT	cli	no	unrecorded / unrecorded
EBPF_ATTESTATION_HMAC_KEY	EBPF_ATTESTATION_HMAC_KEY	ebpf	no	unrecorded / unrecorded
EBPF_OBJECT_PATH	EBPF_OBJECT_PATH	ebpf	no	unrecorded / unrecorded
EBPF_RINGBUF_SIZE	EBPF_RINGBUF_SIZE	ebpf	no	unrecorded / unrecorded
ENFORCEMENT_PROFILE	ENFORCEMENT_PROFILE	ebpf	no	unrecorded / unrecorded
ENFORCE_MODE	ENFORCE_MODE	ebpf, operator, wrapper	no	unrecorded / unrecorded
ENROLL_ADMIN_TOKEN	ENROLL_ADMIN_TOKEN	port	no	unrecorded / unrecorded
ENROLL_ALLOW_UNAUTHENTICATED	ENROLL_ALLOW_UNAUTHENTICATED	port	no	unrecorded / unrecorded
ENROLL_BEACON_ADDRESS	ENROLL_BEACON_ADDRESS	port	no	unrecorded / unrecorded
ENROLL_CLI_PATH	ENROLL_CLI_PATH	port	no	unrecorded / unrecorded
ENROLL_LISTEN_ADDR	ENROLL_LISTEN_ADDR	port	no	unrecorded / unrecorded
ENROLL_RATE_LIMIT_GLOBAL	ENROLL_RATE_LIMIT_GLOBAL	port	no	unrecorded / unrecorded
ENROLL_RATE_LIMIT_PER_IP	ENROLL_RATE_LIMIT_PER_IP	port	no	unrecorded / unrecorded
ENROLL_REQUEST_TOKEN	ENROLL_REQUEST_TOKEN	port	no	unrecorded / unrecorded
ENROLL_REQUEST_TOKEN_FILE	ENROLL_REQUEST_TOKEN_FILE	port	no	unrecorded / unrecorded
ENROLL_TLS_CERT	ENROLL_TLS_CERT	port	no	unrecorded / unrecorded
ENROLL_TLS_KEY	ENROLL_TLS_KEY	port	no	unrecorded / unrecorded
ENROLL_VAULT_ADDR	ENROLL_VAULT_ADDR	port	no	unrecorded / unrecorded
ENROLL_VAULT_CA_CERT	ENROLL_VAULT_CA_CERT	port	no	unrecorded / unrecorded
ENV_VAR	ENV_VAR	cli	no	unrecorded / unrecorded
EVENT_STREAM_LISTEN_ADDR	EVENT_STREAM_LISTEN_ADDR	ebpf	no	unrecorded / unrecorded
EVENT_STREAM_TLS_CERT_PATH	EVENT_STREAM_TLS_CERT_PATH	ebpf	no	unrecorded / unrecorded
EVENT_STREAM_TLS_CLIENT_CA_PATH	EVENT_STREAM_TLS_CLIENT_CA_PATH	ebpf	no	unrecorded / unrecorded
EVENT_STREAM_TLS_KEY_PATH	EVENT_STREAM_TLS_KEY_PATH	ebpf	no	unrecorded / unrecorded
FAIL_CLOSED_ON_ENFORCEMENT_GAP	FAIL_CLOSED_ON_ENFORCEMENT_GAP	ebpf	no	unrecorded / unrecorded
FIM_ENABLED	FIM_ENABLED	ebpf	no	unrecorded / unrecorded
FIM_PATHS	FIM_PATHS	ebpf	no	unrecorded / unrecorded
FINGERPRINT_SWEEP_INTERVAL	FINGERPRINT_SWEEP_INTERVAL	port	no	unrecorded / unrecorded
GCONV_PATH	GCONV_PATH	cli, operator, wrapper	no	unrecorded / unrecorded
GETCONF_DIR	GETCONF_DIR	operator	no	unrecorded / unrecorded
GIT_PROTOCOL	GIT_PROTOCOL	cli	no	unrecorded / unrecorded
GLIBC_TUNABLES	GLIBC_TUNABLES	cli, operator, wrapper	no	unrecorded / unrecorded
GLOBAL_PRIVESC_DETECT	GLOBAL_PRIVESC_DETECT	ebpf, operator, wrapper	no	unrecorded / unrecorded
GOOGLE_APPLICATION_CREDENTIALS	GOOGLE_APPLICATION_CREDENTIALS	ebpf	no	unrecorded / unrecorded
GRPC_INSECURE_DEV_NO_PEER_AUTH	GRPC_INSECURE_DEV_NO_PEER_AUTH	ebpf	no	unrecorded / unrecorded
GRPC_LISTEN_ADDR	GRPC_LISTEN_ADDR	ebpf	no	unrecorded / unrecorded
GRPC_TLS_CERT_PATH	GRPC_TLS_CERT_PATH	ebpf	no	unrecorded / unrecorded
GRPC_TLS_CLIENT_CA_PATH	GRPC_TLS_CLIENT_CA_PATH	ebpf	no	unrecorded / unrecorded
GRPC_TLS_KEY_PATH	GRPC_TLS_KEY_PATH	ebpf	no	unrecorded / unrecorded
HEALTH_ADDR	HEALTH_ADDR	port, wrapper	no	unrecorded / unrecorded
HEALTH_LISTEN_ADDR	HEALTH_LISTEN_ADDR	ebpf	no	unrecorded / unrecorded
HEALTH_PROBE_ADDR	HEALTH_PROBE_ADDR	ebpf	no	unrecorded / unrecorded
HEALTH_PROXY_CA_PATH	HEALTH_PROXY_CA_PATH	ebpf	no	unrecorded / unrecorded
HEALTH_PROXY_OBSERVATION_SOCKET	HEALTH_PROXY_OBSERVATION_SOCKET	ebpf	no	unrecorded / unrecorded
HEALTH_STATUS_SOCKET	HEALTH_STATUS_SOCKET	ebpf	no	unrecorded / unrecorded
HEALTH_TLS_CA_PATH	HEALTH_TLS_CA_PATH	ebpf	no	unrecorded / unrecorded
HEALTH_TLS_CERT_PATH	HEALTH_TLS_CERT_PATH	ebpf	no	unrecorded / unrecorded
HEALTH_TLS_KEY_PATH	HEALTH_TLS_KEY_PATH	ebpf	no	unrecorded / unrecorded
HEALTH_TLS_TOKEN_PATH	HEALTH_TLS_TOKEN_PATH	ebpf	no	2026-11-03 / unrecorded
HELM_DEBUG	HELM_DEBUG	cli	no	unrecorded / unrecorded
HELM_DRIVER	HELM_DRIVER	cli	no	unrecorded / unrecorded
HELM_KUBE	HELM_KUBE	cli	no	unrecorded / unrecorded
HOME	HOME	ebpf, wrapper	no	unrecorded / unrecorded
HOSTNAME	HOSTNAME	operator	no	unrecorded / unrecorded
INIT_LISTENER_AUTO_PRUNE	INIT_LISTENER_AUTO_PRUNE	port	no	unrecorded / unrecorded
INIT_LISTENER_CONCURRENCY	INIT_LISTENER_CONCURRENCY	port	no	unrecorded / unrecorded
INIT_LISTENER_POLL_INTERVAL	INIT_LISTENER_POLL_INTERVAL	port	no	unrecorded / unrecorded
INIT_LISTENER_STALE_TTL	INIT_LISTENER_STALE_TTL	port	no	unrecorded / unrecorded
INIT_LISTENER_TIMEOUT	INIT_LISTENER_TIMEOUT	port	no	unrecorded / unrecorded
IPC_LOCK	IPC_LOCK	cli, operator	no	unrecorded / unrecorded
IPC_OWNER	IPC_OWNER	operator	no	unrecorded / unrecorded
JAVA_TOOL_OPTIONS	JAVA_TOOL_OPTIONS	wrapper	no	unrecorded / unrecorded
JWKS_APPROVERS	JWKS_APPROVERS	port	no	2026-11-03 / unrecorded
JWKS_EXPIRY_WARNING_DAYS	JWKS_EXPIRY_WARNING_DAYS	port	no	2026-11-03 / unrecorded
KERNEL_SIDE_KILL	KERNEL_SIDE_KILL	ebpf	no	unrecorded / unrecorded
KUBERNETES_SERVICE_HOST	KUBERNETES_SERVICE_HOST	ebpf, operator, port, wrapper	operator-token-auth	unrecorded / unrecorded
KUBERNETES_SERVICE_PORT	KUBERNETES_SERVICE_PORT	operator, port, wrapper	operator-token-auth	unrecorded / unrecorded
LANG	LANG	wrapper	no	unrecorded / unrecorded
LD_PRELOAD	LD_PRELOAD	wrapper	no	unrecorded / unrecorded
LINUX_IMMUTABLE	LINUX_IMMUTABLE	operator	no	unrecorded / unrecorded
LOG_ALL	LOG_ALL	ebpf	no	unrecorded / unrecorded
LOG_LEVEL	LOG_LEVEL	port	no	unrecorded / unrecorded
MAC_ADMIN	MAC_ADMIN	operator	no	unrecorded / unrecorded
MAC_OVERRIDE	MAC_OVERRIDE	operator	no	unrecorded / unrecorded
MANAGED_TOKEN_NOT_LIVE	MANAGED_TOKEN_NOT_LIVE	operator, port	no	unrecorded / unrecorded
METRICS_ADDR	METRICS_ADDR	port	no	unrecorded / unrecorded
METRICS_ENABLED	METRICS_ENABLED	port	no	unrecorded / unrecorded
MONITORED_PIDS_MAP_SIZE	MONITORED_PIDS_MAP_SIZE	ebpf	no	unrecorded / unrecorded
MONITOR_MODE_ALERT	MONITOR_MODE_ALERT	ebpf, wrapper	no	unrecorded / unrecorded
MONITOR_MODE_ENFORCE	MONITOR_MODE_ENFORCE	ebpf, wrapper	no	unrecorded / unrecorded
MONITOR_MODE_UNSPECIFIED	MONITOR_MODE_UNSPECIFIED	ebpf, wrapper	no	unrecorded / unrecorded
NETWORK_POLICY_PROBE_PASS	NETWORK_POLICY_PROBE_PASS	cli	no	unrecorded / unrecorded
NET_ADMIN	NET_ADMIN	operator	no	unrecorded / unrecorded
NET_BIND_SERVICE	NET_BIND_SERVICE	operator	no	unrecorded / unrecorded
NET_BROADCAST	NET_BROADCAST	operator	no	unrecorded / unrecorded
NET_RAW	NET_RAW	operator	no	unrecorded / unrecorded
NODE_NAME	NODE_NAME	ebpf, operator	no	unrecorded / unrecorded
NSS_WRAPPER_	NSS_WRAPPER_	cli, wrapper	no	unrecorded / unrecorded
OPENBAO_ADDR	OPENBAO_ADDR	cli, port	no	unrecorded / unrecorded
OPENBAO_NAMESPACE	OPENBAO_NAMESPACE	cli, port	no	unrecorded / unrecorded
OPENBAO_RELEASE_NAME	OPENBAO_RELEASE_NAME	cli, port	no	unrecorded / unrecorded
OPENBAO_REPLICAS	OPENBAO_REPLICAS	port	no	unrecorded / unrecorded
OPENSSL_CONF	OPENSSL_CONF	cli, wrapper	no	unrecorded / unrecorded
OPENSSL_ENGINES	OPENSSL_ENGINES	cli, wrapper	no	unrecorded / unrecorded
OPENSSL_MODULES	OPENSSL_MODULES	cli, wrapper	no	unrecorded / unrecorded
OPERATOR_ENABLE_TOKEN_CREATE	OPERATOR_ENABLE_TOKEN_CREATE	port	no	unrecorded / unrecorded
OPERATOR_POLICY	OPERATOR_POLICY	port	no	unrecorded / unrecorded
OPERATOR_POLICY_NAME	OPERATOR_POLICY_NAME	port	no	unrecorded / unrecorded
OPERATOR_ROLE_MAX_TTL	OPERATOR_ROLE_MAX_TTL	port	no	unrecorded / unrecorded
OPERATOR_ROLE_NAME	OPERATOR_ROLE_NAME	port	no	unrecorded / unrecorded
OPERATOR_ROLE_TTL	OPERATOR_ROLE_TTL	port	no	unrecorded / unrecorded
OPERATOR_SA_NAME	OPERATOR_SA_NAME	port	no	unrecorded / unrecorded
OPERATOR_SA_NAMESPACE	OPERATOR_SA_NAMESPACE	port	no	unrecorded / unrecorded
OTEL_EXPORTER_OTLP_ENDPOINT	OTEL_EXPORTER_OTLP_ENDPOINT	cli	no	unrecorded / unrecorded
PATH	PATH	ebpf, wrapper	no	unrecorded / unrecorded
PLATFORM_CA_PATH	PLATFORM_CA_PATH	ebpf	no	unrecorded / unrecorded
PLATFORM_ENDPOINT	PLATFORM_ENDPOINT	ebpf	no	unrecorded / unrecorded
POD_IP	POD_IP	operator, wrapper	always	unrecorded / unrecorded
POD_NAME	POD_NAME	operator	no	unrecorded / unrecorded
POD_NAMESPACE	POD_NAMESPACE	ebpf	no	unrecorded / unrecorded
POD_UID	POD_UID	ebpf	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_ACK_CONFLICT	PORT_AUTH_BOOTSTRAP_ACK_CONFLICT	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_ACK_FAILED	PORT_AUTH_BOOTSTRAP_ACK_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_ACK_TIMEOUT	PORT_AUTH_BOOTSTRAP_ACK_TIMEOUT	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_ACQUIRE_TIMEOUT	PORT_AUTH_BOOTSTRAP_ACQUIRE_TIMEOUT	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_CHANNEL_CONFLICT	PORT_AUTH_BOOTSTRAP_CHANNEL_CONFLICT	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_CLEANUP_FAILED	PORT_AUTH_BOOTSTRAP_CLEANUP_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_LEASE_EXPIRED	PORT_AUTH_BOOTSTRAP_LEASE_EXPIRED	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_LEASE_INVALID	PORT_AUTH_BOOTSTRAP_LEASE_INVALID	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_READY_TIMEOUT	PORT_AUTH_BOOTSTRAP_READY_TIMEOUT	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_REQUIRED	PORT_AUTH_BOOTSTRAP_REQUIRED	cli	no	unrecorded / unrecorded
PORT_AUTH_BOOTSTRAP_SINK_EXISTS	PORT_AUTH_BOOTSTRAP_SINK_EXISTS	cli	no	unrecorded / unrecorded
PORT_AUTH_CONFIG_INVALID	PORT_AUTH_CONFIG_INVALID	cli	no	unrecorded / unrecorded
PORT_AUTH_EXPIRED	PORT_AUTH_EXPIRED	cli	no	unrecorded / unrecorded
PORT_AUTH_LOGIN_FAILED	PORT_AUTH_LOGIN_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_PERSIST_FAILED	PORT_AUTH_PERSIST_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_POLICY_CONFLICT	PORT_AUTH_POLICY_CONFLICT	cli	no	unrecorded / unrecorded
PORT_AUTH_REAUTH_FAILED	PORT_AUTH_REAUTH_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_RENEW_FAILED	PORT_AUTH_RENEW_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_SECRET_ID_UNSAFE	PORT_AUTH_SECRET_ID_UNSAFE	cli	no	unrecorded / unrecorded
PORT_AUTH_SINK_COMMIT_FAILED	PORT_AUTH_SINK_COMMIT_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_SINK_UNSAFE	PORT_AUTH_SINK_UNSAFE	cli	no	unrecorded / unrecorded
PORT_AUTH_UNWRAP_FAILED	PORT_AUTH_UNWRAP_FAILED	cli	no	unrecorded / unrecorded
PORT_AUTH_WRAP_ISSUANCE_FAILED	PORT_AUTH_WRAP_ISSUANCE_FAILED	cli	no	unrecorded / unrecorded
PORT_BEACON_TRUST_INVALID	PORT_BEACON_TRUST_INVALID	cli	no	unrecorded / unrecorded
PORT_CHART_COORDINATE_INVALID	PORT_CHART_COORDINATE_INVALID	cli	no	unrecorded / unrecorded
PORT_CHART_REQUIRED	PORT_CHART_REQUIRED	cli	no	unrecorded / unrecorded
POSTGRES_PASSWORD	POSTGRES_PASSWORD	cli	no	unrecorded / unrecorded
PREVIOUS_BEACON_AUTH_KEY	PREVIOUS_BEACON_AUTH_KEY	port	no	unrecorded / unrecorded
PREVIOUS_BEACON_AUTH_KEY_FILE	PREVIOUS_BEACON_AUTH_KEY_FILE	port	no	unrecorded / unrecorded
PRIVATE_KEY	PRIVATE_KEY	cli	no	unrecorded / unrecorded
REACTIVE_KILL	REACTIVE_KILL	ebpf, operator, port, wrapper	no	unrecorded / unrecorded
RENEWAL_INTERVAL	RENEWAL_INTERVAL	wrapper	no	unrecorded / unrecorded
REQUEST_HANDLER_CONCURRENCY	REQUEST_HANDLER_CONCURRENCY	port	no	unrecorded / unrecorded
REQUIRE_FULL_ENFORCEMENT	REQUIRE_FULL_ENFORCEMENT	ebpf	no	unrecorded / unrecorded
REQUIRE_LSM_OR_FAIL	REQUIRE_LSM_OR_FAIL	ebpf, operator, port, wrapper	no	unrecorded / unrecorded
RESOLV_HOST_CONF	RESOLV_HOST_CONF	cli, operator, wrapper	no	unrecorded / unrecorded
RES_OPTIONS	RES_OPTIONS	cli, wrapper	no	unrecorded / unrecorded
SAAS_ADDR	SAAS_ADDR	port	no	unrecorded / unrecorded
SECCOMP_DEPLOY	SECCOMP_DEPLOY	ebpf	no	unrecorded / unrecorded
SECCOMP_HOST_DIR	SECCOMP_HOST_DIR	ebpf	no	unrecorded / unrecorded
SECCOMP_SOURCE_PATH	SECCOMP_SOURCE_PATH	ebpf	no	unrecorded / unrecorded
SECRETSTORE_TOKEN	SECRETSTORE_TOKEN	cli	no	unrecorded / unrecorded
SECRET_ID	SECRET_ID	cli	no	unrecorded / unrecorded
SENSITIVE_LISTEN_ADDR	SENSITIVE_LISTEN_ADDR	ebpf	no	unrecorded / unrecorded
SEV_SNP	SEV_SNP	cli, ebpf, operator, wrapper	no	unrecorded / unrecorded
SHA2_256	SHA2_256	cli	no	unrecorded / unrecorded
STRICT_BPF_ENUM	STRICT_BPF_ENUM	ebpf	no	unrecorded / unrecorded
STRICT_BPF_LOAD	STRICT_BPF_LOAD	ebpf	no	unrecorded / unrecorded
STRICT_BPF_LOADERS	STRICT_BPF_LOADERS	ebpf, operator	no	unrecorded / unrecorded
STRICT_BPF_LOAD_MODE	STRICT_BPF_LOAD_MODE	ebpf, operator	no	unrecorded / unrecorded
SYS_ADMIN	SYS_ADMIN	operator	no	unrecorded / unrecorded
SYS_BOOT	SYS_BOOT	operator	no	unrecorded / unrecorded
SYS_CHROOT	SYS_CHROOT	operator	no	unrecorded / unrecorded
SYS_MODULE	SYS_MODULE	operator	no	unrecorded / unrecorded
SYS_NICE	SYS_NICE	operator	no	unrecorded / unrecorded
SYS_PACCT	SYS_PACCT	operator	no	unrecorded / unrecorded
SYS_PTRACE	SYS_PTRACE	operator	no	unrecorded / unrecorded
SYS_RAWIO	SYS_RAWIO	operator	no	unrecorded / unrecorded
SYS_RESOURCE	SYS_RESOURCE	operator	no	unrecorded / unrecorded
SYS_TIME	SYS_TIME	operator	no	unrecorded / unrecorded
SYS_TTY_CONFIG	SYS_TTY_CONFIG	operator	no	unrecorded / unrecorded
TLS_CA	TLS_CA	port	no	unrecorded / unrecorded
TLS_CERT	TLS_CERT	port	no	unrecorded / unrecorded
TLS_KEY	TLS_KEY	port	no	unrecorded / unrecorded
TRACEPARENT	TRACEPARENT	cli	no	unrecorded / unrecorded
TRUST_JWT	TRUST_JWT	port	no	unrecorded / unrecorded
TRUST_JWT_AUDIENCE	TRUST_JWT_AUDIENCE	port	no	unrecorded / unrecorded
TRUST_JWT_ISSUER	TRUST_JWT_ISSUER	port	no	unrecorded / unrecorded
TRUST_JWT_JWKS	TRUST_JWT_JWKS	port	no	unrecorded / unrecorded
TZ	TZ	wrapper	no	unrecorded / unrecorded
VAULT_ADDR	VAULT_ADDR	cli, operator, port, wrapper	always	unrecorded / unrecorded
VAULT_AUTH_METHOD	VAULT_AUTH_METHOD	operator, wrapper	always	unrecorded / unrecorded
VAULT_AUTH_MOUNT_PATH	VAULT_AUTH_MOUNT_PATH	operator, wrapper	always	unrecorded / unrecorded
VAULT_AUTH_PATH	VAULT_AUTH_PATH	operator, wrapper	no	unrecorded / unrecorded
VAULT_AUTH_ROLE	VAULT_AUTH_ROLE	operator, wrapper	always	unrecorded / unrecorded
VAULT_CACERT	VAULT_CACERT	cli, operator, port, wrapper	always	unrecorded / unrecorded
VAULT_CAPATH	VAULT_CAPATH	operator, wrapper	always	unrecorded / unrecorded
VAULT_K8S_ROLE	VAULT_K8S_ROLE	operator, wrapper	no	unrecorded / unrecorded
VAULT_KV_MOUNT	VAULT_KV_MOUNT	operator	no	unrecorded / unrecorded
VAULT_LOCAL_CONFIG	VAULT_LOCAL_CONFIG	cli	no	unrecorded / unrecorded
VAULT_ROLE	VAULT_ROLE	operator	no	unrecorded / unrecorded
VAULT_SA_TOKEN_PATH	VAULT_SA_TOKEN_PATH	operator, wrapper	always	unrecorded / unrecorded
VAULT_SKIP_VERIFY	VAULT_SKIP_VERIFY	operator, port, wrapper	always	unrecorded / unrecorded
VAULT_TOKEN	VAULT_TOKEN	cli, port, wrapper	no	unrecorded / unrecorded
VAULT_TOKEN_FILE	VAULT_TOKEN_FILE	wrapper	no	unrecorded / unrecorded
VS_PROTECTED_PATHS	VS_PROTECTED_PATHS	ebpf	no	unrecorded / unrecorded
VS_RAW_PATH_GUARD_ENABLED	VS_RAW_PATH_GUARD_ENABLED	ebpf	no	unrecorded / unrecorded
WAKE_ALARM	WAKE_ALARM	operator	no	unrecorded / unrecorded
WARN_ON_ENFORCEMENT_GAPS	WARN_ON_ENFORCEMENT_GAPS	ebpf	no	unrecorded / unrecorded
WRAPPED_TOKEN	WRAPPED_TOKEN	cli	no	unrecorded / unrecorded
WRAPPER_HEALTH_PORT	WRAPPER_HEALTH_PORT	ebpf	no	unrecorded / unrecorded
XDG_CONFIG_HOME	XDG_CONFIG_HOME	ebpf	no	unrecorded / unrecorded

Annotations

Input	Canonical	Consumers	Operator lock	Since / until
api.cloudtaser.io/v1alpha1	api.cloudtaser.io/v1alpha1	cli, operator	no	unrecorded / unrecorded
capability.cloudtaser.io/bpffs-writable	capability.cloudtaser.io/bpffs-writable	operator	no	unrecorded / unrecorded
capability.cloudtaser.io/lsm-stack	capability.cloudtaser.io/lsm-stack	operator	no	unrecorded / unrecorded
cli.cloudtaser.io/migration-id	cli.cloudtaser.io/migration-id	cli	no	unrecorded / unrecorded
cloudtaser.io/AdmissionEnrollment	cloudtaser.io/AdmissionEnrollment	operator	no	unrecorded / unrecorded
cloudtaser.io/PodTokenMintCapacity	cloudtaser.io/PodTokenMintCapacity	operator	no	unrecorded / unrecorded
cloudtaser.io/RecoveryLoopSuspected	cloudtaser.io/RecoveryLoopSuspected	operator	no	unrecorded / unrecorded
cloudtaser.io/admission-inputs	cloudtaser.io/admission-inputs	operator	no	unrecorded / unrecorded
cloudtaser.io/agent-health-tls	cloudtaser.io/agent-health-tls	operator	no	unrecorded / unrecorded
cloudtaser.io/allow-exec	cloudtaser.io/allow-exec	operator	no	unrecorded / unrecorded
cloudtaser.io/allow-privileged	cloudtaser.io/allow-privileged	operator	no	unrecorded / unrecorded
cloudtaser.io/allow-share-process-namespace	cloudtaser.io/allow-share-process-namespace	operator	no	unrecorded / unrecorded
cloudtaser.io/attestation	cloudtaser.io/attestation	operator	no	unrecorded / unrecorded
cloudtaser.io/authority-capability	cloudtaser.io/authority-capability	cli	no	unrecorded / unrecorded
cloudtaser.io/beacon-auth-key-checksum	cloudtaser.io/beacon-auth-key-checksum	cli	no	unrecorded / unrecorded
cloudtaser.io/beacon-keys	cloudtaser.io/beacon-keys	cli	no	unrecorded / unrecorded
cloudtaser.io/bootstrap-id	cloudtaser.io/bootstrap-id	cli	no	unrecorded / unrecorded
cloudtaser.io/bootstrap-result	cloudtaser.io/bootstrap-result	cli	no	unrecorded / unrecorded
cloudtaser.io/bootstrap-secret-name	cloudtaser.io/bootstrap-secret-name	cli	no	unrecorded / unrecorded
cloudtaser.io/bootstrap-secret-uid	cloudtaser.io/bootstrap-secret-uid	cli	no	unrecorded / unrecorded
cloudtaser.io/certificate-rotation-check	cloudtaser.io/certificate-rotation-check	operator	no	2026-11-03 / unrecorded
cloudtaser.io/confidential-vm	cloudtaser.io/confidential-vm	operator	no	unrecorded / unrecorded
cloudtaser.io/config	cloudtaser.io/config	operator	no	unrecorded / unrecorded
cloudtaser.io/containers	cloudtaser.io/containers	operator	no	unrecorded / unrecorded
cloudtaser.io/contract	cloudtaser.io/contract	cli	no	unrecorded / unrecorded
cloudtaser.io/correlation-id	cloudtaser.io/correlation-id	operator	no	unrecorded / unrecorded
cloudtaser.io/cosign-verified	cloudtaser.io/cosign-verified	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy	cloudtaser.io/db-proxy	ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-blind-index-columns	cloudtaser.io/db-proxy-blind-index-columns	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-dek-kv-path	cloudtaser.io/db-proxy-dek-kv-path	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-encrypt-columns	cloudtaser.io/db-proxy-encrypt-columns	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-listen-port	cloudtaser.io/db-proxy-listen-port	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-tls	cloudtaser.io/db-proxy-tls	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-tls-skip-verify	cloudtaser.io/db-proxy-tls-skip-verify	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-transit-key	cloudtaser.io/db-proxy-transit-key	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-transit-mount	cloudtaser.io/db-proxy-transit-mount	operator	no	unrecorded / unrecorded
cloudtaser.io/db-proxy-upstream	cloudtaser.io/db-proxy-upstream	operator	no	unrecorded / unrecorded
cloudtaser.io/dek-unwrap	cloudtaser.io/dek-unwrap	operator, port	no	unrecorded / unrecorded
cloudtaser.io/demo-session	cloudtaser.io/demo-session	cli	no	unrecorded / unrecorded
cloudtaser.io/dns-probe	cloudtaser.io/dns-probe	operator	no	unrecorded / unrecorded
cloudtaser.io/dns-probe-id	cloudtaser.io/dns-probe-id	operator	no	unrecorded / unrecorded
cloudtaser.io/ebpf	cloudtaser.io/ebpf	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/ebpf-health-addr	cloudtaser.io/ebpf-health-addr	operator	no	unrecorded / unrecorded
cloudtaser.io/ebpf-integration	cloudtaser.io/ebpf-integration	operator	no	unrecorded / unrecorded
cloudtaser.io/encrypt-pvc	cloudtaser.io/encrypt-pvc	operator, wrapper	no	unrecorded / unrecorded
cloudtaser.io/enforcement-mode	cloudtaser.io/enforcement-mode	operator	no	unrecorded / unrecorded
cloudtaser.io/env-allowlist	cloudtaser.io/env-allowlist	operator	no	unrecorded / unrecorded
cloudtaser.io/env-map	cloudtaser.io/env-map	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/fingerprint-latch-cleared-at	cloudtaser.io/fingerprint-latch-cleared-at	cli	no	unrecorded / unrecorded
cloudtaser.io/image-verification-warning	cloudtaser.io/image-verification-warning	operator	no	unrecorded / unrecorded
cloudtaser.io/image-verified	cloudtaser.io/image-verified	operator	no	unrecorded / unrecorded
cloudtaser.io/inject	secretstore.cloudtaser.io/inject	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/injected	cloudtaser.io/injected	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/injection	cloudtaser.io/injection	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/injection-token	cloudtaser.io/injection-token	cli, ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/introduction-ca-pem-sha256	cloudtaser.io/introduction-ca-pem-sha256	cli	no	unrecorded / unrecorded
cloudtaser.io/introduction-issuer-ref	cloudtaser.io/introduction-issuer-ref	cli	no	unrecorded / unrecorded
cloudtaser.io/introduction-migration	cloudtaser.io/introduction-migration	cli	no	unrecorded / unrecorded
cloudtaser.io/managed-by	cloudtaser.io/managed-by	cli	no	unrecorded / unrecorded
cloudtaser.io/network-policy-gate	cloudtaser.io/network-policy-gate	cli	no	unrecorded / unrecorded
cloudtaser.io/network-policy-observed-at	cloudtaser.io/network-policy-observed-at	cli	no	unrecorded / unrecorded
cloudtaser.io/network-policy-status	cloudtaser.io/network-policy-status	cli	no	unrecorded / unrecorded
cloudtaser.io/openbao-client	cloudtaser.io/openbao-client	operator	no	unrecorded / unrecorded
cloudtaser.io/openbao-server-tls	cloudtaser.io/openbao-server-tls	cli	no	unrecorded / unrecorded
cloudtaser.io/operator-introduction	cloudtaser.io/operator-introduction	cli, operator, port	no	unrecorded / unrecorded
cloudtaser.io/operator-namespace	cloudtaser.io/operator-namespace	operator	no	unrecorded / unrecorded
cloudtaser.io/preserve-fsgroup	cloudtaser.io/preserve-fsgroup	operator	no	unrecorded / unrecorded
cloudtaser.io/protected	cloudtaser.io/protected	cli, ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/pvc-chunk-size-kb	cloudtaser.io/pvc-chunk-size-kb	operator	no	unrecorded / unrecorded
cloudtaser.io/pvc-transit-key	cloudtaser.io/pvc-transit-key	operator	no	unrecorded / unrecorded
cloudtaser.io/ready-probe	cloudtaser.io/ready-probe	operator	no	unrecorded / unrecorded
cloudtaser.io/request-id	cloudtaser.io/request-id	cli	no	unrecorded / unrecorded
cloudtaser.io/require-image-verification	cloudtaser.io/require-image-verification	operator	no	unrecorded / unrecorded
cloudtaser.io/revocation-grace	cloudtaser.io/revocation-grace	operator	no	unrecorded / unrecorded
cloudtaser.io/rotation	cloudtaser.io/rotation	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy	cloudtaser.io/s3-proxy	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-allow-insecure-endpoint	cloudtaser.io/s3-proxy-allow-insecure-endpoint	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-dek-kv-path	cloudtaser.io/s3-proxy-dek-kv-path	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-endpoint	cloudtaser.io/s3-proxy-endpoint	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-provider-ca-configmap	cloudtaser.io/s3-proxy-provider-ca-configmap	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-provider-ca-configmap-key	cloudtaser.io/s3-proxy-provider-ca-configmap-key	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-region	cloudtaser.io/s3-proxy-region	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-transit-key	cloudtaser.io/s3-proxy-transit-key	operator	no	unrecorded / unrecorded
cloudtaser.io/s3-proxy-transit-mount	cloudtaser.io/s3-proxy-transit-mount	operator	no	unrecorded / unrecorded
cloudtaser.io/secret-backend	cloudtaser.io/secret-backend	operator	no	unrecorded / unrecorded
cloudtaser.io/secret-envelope	cloudtaser.io/secret-envelope	operator, port	no	unrecorded / unrecorded
cloudtaser.io/secret-fetch	cloudtaser.io/secret-fetch	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/secret-paths	cloudtaser.io/secret-paths	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-address	cloudtaser.io/secretstore-address	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-auth-method	cloudtaser.io/secretstore-auth-method	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-auth-path	cloudtaser.io/secretstore-auth-path	operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-backend	cloudtaser.io/secretstore-backend	operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-ca-pem	cloudtaser.io/secretstore-ca-pem	operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-ca-subject	cloudtaser.io/secretstore-ca-subject	operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-role	cloudtaser.io/secretstore-role	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-skip-verify	cloudtaser.io/secretstore-skip-verify	operator	no	unrecorded / unrecorded
cloudtaser.io/secretstore-tls-skip-verify	cloudtaser.io/secretstore-tls-skip-verify	operator	no	unrecorded / unrecorded
cloudtaser.io/source-commit	cloudtaser.io/source-commit	cli	no	unrecorded / unrecorded
cloudtaser.io/source-introduction-migrated	cloudtaser.io/source-introduction-migrated	operator	no	unrecorded / unrecorded
cloudtaser.io/source-tag	cloudtaser.io/source-tag	cli	no	unrecorded / unrecorded
cloudtaser.io/sovereignty-substrate	cloudtaser.io/sovereignty-substrate	cli	no	unrecorded / unrecorded
cloudtaser.io/status	cloudtaser.io/status	cli, ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-agent-generation	cloudtaser.io/strict-bpf-agent-generation	operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-agent-pod-uid	cloudtaser.io/strict-bpf-agent-pod-uid	operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-attestation-counter	cloudtaser.io/strict-bpf-attestation-counter	operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-attestation-time	cloudtaser.io/strict-bpf-attestation-time	operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-mode	cloudtaser.io/strict-bpf-mode	operator	no	unrecorded / unrecorded
cloudtaser.io/strict-bpf-policy-hash	cloudtaser.io/strict-bpf-policy-hash	operator	no	unrecorded / unrecorded
cloudtaser.io/token-reviewer-expires-at	cloudtaser.io/token-reviewer-expires-at	cli	no	unrecorded / unrecorded
cloudtaser.io/trusted-registries	cloudtaser.io/trusted-registries	operator	no	unrecorded / unrecorded
cloudtaser.io/unseal-keyshare	cloudtaser.io/unseal-keyshare	operator	no	unrecorded / unrecorded
cloudtaser.io/v1alpha1	cloudtaser.io/v1alpha1	cli	no	unrecorded / unrecorded
cloudtaser.io/v2	cloudtaser.io/v2	cli	no	unrecorded / unrecorded
cloudtaser.io/vault-address	cloudtaser.io/secretstore-address	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/vault-auth-method	cloudtaser.io/secretstore-auth-method	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-auth-path	cloudtaser.io/secretstore-auth-path	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-backend	cloudtaser.io/vault-backend	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-ca-configmap	cloudtaser.io/vault-ca-configmap	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-ca-configmap-key	cloudtaser.io/vault-ca-configmap-key	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-ca-subject	cloudtaser.io/vault-ca-subject	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-policy-name	cloudtaser.io/vault-policy-name	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-role	cloudtaser.io/secretstore-role	cli, operator	no	unrecorded / unrecorded
cloudtaser.io/vault-skip-verify	cloudtaser.io/secretstore-skip-verify	operator	no	unrecorded / unrecorded
cloudtaser.io/vault-tls-skip-verify	cloudtaser.io/secretstore-tls-skip-verify	operator	no	unrecorded / unrecorded
cloudtaser.io/vs-broker	cloudtaser.io/vs-broker	ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/vs-dek-provision	cloudtaser.io/vs-dek-provision	operator, wrapper	no	unrecorded / unrecorded
cloudtaser.io/vs-freshness	cloudtaser.io/vs-freshness	operator	no	unrecorded / unrecorded
cloudtaser.io/vs-io-mode	cloudtaser.io/vs-io-mode	operator	no	unrecorded / unrecorded
cloudtaser.io/vs-protected-paths	cloudtaser.io/vs-protected-paths	ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/vs-sidecar	cloudtaser.io/vs-sidecar	ebpf, operator	no	unrecorded / unrecorded
cloudtaser.io/vs-trusted-state	cloudtaser.io/vs-trusted-state	operator, wrapper	no	unrecorded / unrecorded
cloudtaser.io/wire-version	cloudtaser.io/wire-version	cli	no	unrecorded / unrecorded
cloudtaser.io/wrap-expires-at-unix-nano	cloudtaser.io/wrap-expires-at-unix-nano	cli	no	unrecorded / unrecorded
cloudtaser.io/wrapped-token-sha256	cloudtaser.io/wrapped-token-sha256	cli	no	unrecorded / unrecorded
cloudtaser.io/wrapper-cpu-limit	cloudtaser.io/wrapper-cpu-limit	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-cpu-request	cloudtaser.io/wrapper-cpu-request	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-image	cloudtaser.io/wrapper-image	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-image-digest	cloudtaser.io/wrapper-image-digest	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-memory-limit	cloudtaser.io/wrapper-memory-limit	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-memory-request	cloudtaser.io/wrapper-memory-request	operator	no	unrecorded / unrecorded
cloudtaser.io/wrapper-status	cloudtaser.io/wrapper-status	wrapper	no	unrecorded / unrecorded
cloudtaser.io/wrapper-unseal	cloudtaser.io/wrapper-unseal	operator, wrapper	no	unrecorded / unrecorded
node.cloudtaser.io/provider	node.cloudtaser.io/provider	ebpf, operator	no	unrecorded / unrecorded
secretstore.cloudtaser.io/env-map	secretstore.cloudtaser.io/env-map	operator	no	unrecorded / unrecorded
secretstore.cloudtaser.io/inject	secretstore.cloudtaser.io/inject	cli, operator	no	unrecorded / unrecorded
secretstore.cloudtaser.io/secret-paths	secretstore.cloudtaser.io/secret-paths	operator	no	unrecorded / unrecorded