Which kubernetes entites are enriched by "Metadata enrichment of all telemetry originating from kubernetes workloads"?

Hello,

I am trying to set dt.security_context using existing label with this feature:

My dt.security_context is set to kubernetes events and to trace spans as expected, but I am not able to find any kubernetes entities with dt.security_context using DQL query

In this document: Metadata enrichment of all telemetry originating from Kubernetes — Dynatrace Docs
there is a mention in “Which data will be enriched” -section:
“Kubernetes monitored entities (dt.security_context only)”

Does anybody know exactly which kubernetes monitored entities should be enriched with this feature?

Well, I was able to find enriched kubernetes entities using entity selector using get entities API:

type(“CLOUD_APPLICATION”),dt.security_context.exists()

Similar(?) DQL query in notebooks did not find anything:

fetch dt.entity.cloud_application | filter isNotNull(dt.security_context)

I was finally able to find entities using DQL when I changed Destination property of dt.entity.cloud_application from managementZones to dt.security_context using this feature: