# Which kubernetes entites are enriched by "Metadata enrichment of all telemetry originating from kubernetes workloads"?

**URL:** <https://community.dynatrace.com/t/which-kubernetes-entites-are-enriched-by-metadata-enrichment-of-all-telemetry-originating-from-kubernetes-workloads/50528>\
**Category:** Container platforms\
**Tags:** kubernetes\
**Created:** [March 3, 2025, 8:43am UTC](https://community.dynatrace.com/t/which-kubernetes-entites-are-enriched-by-metadata-enrichment-of-all-telemetry-originating-from-kubernetes-workloads/50528 "2025-03-03T08:43:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![panumjp](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@panumjp](https://community.dynatrace.com/u/panumjp)\
**Post date:** [March 3, 2025, 8:43am UTC](https://community.dynatrace.com/t/which-kubernetes-entites-are-enriched-by-metadata-enrichment-of-all-telemetry-originating-from-kubernetes-workloads/50528/1 "2025-03-03T08:43:13Z")

</div>

Hello,

I am trying to set dt.security\_context using existing label with this feature:

> **[Enrichment options - Metadata enrichment of all telemetry originating from...](https://docs.dynatrace.com/docs/ingest-from/setup-on-k8s/guides/metadata-automation/k8s-metadata-telemetry-enrichment#enrichment-options)**
>
> A new tagging model supersedes what's described on this page. | Enrich Kubernetes telemetry signals with metadata from namespace, pod and resource attributes.

My dt.security\_context is set to kubernetes events and to trace spans as expected, but I am not able to find any kubernetes entities with dt.security\_context using DQL query

In this document: [Metadata enrichment of all telemetry originating from Kubernetes — Dynatrace Docs](https://docs.dynatrace.com/docs/ingest-from/setup-on-k8s/guides/metadata-automation/k8s-metadata-telemetry-enrichment#which-data-will-be-enriched)  
there is a mention in “Which data will be enriched” -section:  
“Kubernetes monitored entities (dt.security\_context only)”

Does anybody know exactly which kubernetes monitored entities should be enriched with this feature?

---

<div class="post-metadata">

**Author:** ![panumjp](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@panumjp](https://community.dynatrace.com/u/panumjp)\
**Post date:** [March 4, 2025, 6:46am UTC](https://community.dynatrace.com/t/which-kubernetes-entites-are-enriched-by-metadata-enrichment-of-all-telemetry-originating-from-kubernetes-workloads/50528/2 "2025-03-04T06:46:29Z")

</div>

Well, I was able to find enriched kubernetes entities using entity selector using get entities API:

type(“CLOUD\_APPLICATION”),dt.security\_context.exists()

Similar(?) DQL query in notebooks did not find anything:

fetch dt.entity.cloud\_application | filter isNotNull(dt.security\_context)

---

<div class="post-metadata">

**Author:** ![panumjp](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@panumjp](https://community.dynatrace.com/u/panumjp)\
**Post date:** [March 31, 2025, 10:50am UTC](https://community.dynatrace.com/t/which-kubernetes-entites-are-enriched-by-metadata-enrichment-of-all-telemetry-originating-from-kubernetes-workloads/50528/3 "2025-03-31T10:50:31Z")

</div>

I was finally able to find entities using DQL when I changed Destination property of dt.entity.cloud\_application from managementZones to dt.security\_context using this feature:

> **[Grant access to entities with security context](https://docs.dynatrace.com/docs/manage/identity-access-management/use-cases/access-security-context#id-1-set-the-security-context-for-monitored-entities)**
>
> Grant access to entities with security context