service catalog

search depth: 1

edge kinds

declared (config) permitted (netpol) uses-bucket (GCS) uses-secret (Secret Manager)

workload (Deployment / STS / DS / Job) GCS bucket GCP secret external (CIDR) ns-alias (NetworkPolicy catch-all)