---
title: "Inventory report"
description: "Reference for the inventory compliance report in Calico Cloud connected clusters that catalogs endpoints, namespaces, and policies in scope at report time."
product: "Calico Cloud"
version: "v23.0.1"
section: "Reference"
canonical_url: "https://docs.tigera.io/calico-cloud/reference/resources/compliance-reports/inventory"
---

# Inventory report

To create an Inventory report, create a [`GlobalReport`](https://docs.tigera.io/calico-cloud/reference/resources/globalreport.md) with the `reportType` set to `inventory`.

The following sample command creates a GlobalReport that results in a daily inventory report for endpoints in the `public` namespace.

```bash
kubectl apply -f - << EOF
apiVersion: projectcalico.org/v3
kind: GlobalReport
metadata:
  name: daily-public-inventory-report
  labels:
    deployment: production
spec:
  reportType: inventory
  endpoints:
    namespaces:
      names:
        - public
  schedule: 0 0 * * *
EOF
```

## Downloadable reports

### summary.csv

A summary CSV file that includes details about the report parameters and the top level counts.

| Heading                       | Description                                                                                                 | Format                                      |
| ----------------------------- | ----------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
| startTime                     | The report interval start time.                                                                             | RFC3339 string                              |
| endTime                       | The report interval end time.                                                                               | RFC3339 string                              |
| endpointSelector              | The endpoint selector used to restrict in-scope endpoints by endpoint label selection.                      | selector string                             |
| namespaceNames                | The set of namespace names used to restrict in-scope endpoints by namespace.                                | ";" separated list of namespace names       |
| namespaceSelector             | The namespace selector used to restrict in-scope endpoints by namespace label selection.                    | selector string                             |
| serviceAccountNames           | The set of service account names used to restrict in-scope endpoints by service account.                    | ";" separated list of service account names |
| serviceAccountSelectors       | The service account selector used to restrict in-scope endpoints by service account label selection.        | selector string                             |
| endpointsNumInScope           | The number of enumerated endpoints that are in-scope according to the requested endpoint selection options. | number                                      |
| endpointsNumIngressProtected  | The number of in-scope endpoints that were always ingress protected during the report interval.             | number                                      |
| endpointsNumEgressProtected   | The number of in-scope endpoints that were always egress protected during the report interval.              | number                                      |
| namespacesNumInScope          | The number of namespaces containing in-scope endpoints.                                                     | number                                      |
| namespacesNumIngressProtected | The number of namespaces whose in-scope endpoints were always ingress protected during the report interval. | number                                      |
| namespacesNumEgressProtected  | The number of namespaces whose in-scope endpoints were always egress protected during the report interval.  | number                                      |
| serviceAccountsNumInScope     | The number of service accounts associated with in-scope endpoints.                                          | number                                      |

### endpoints.csv

An endpoints CSV file that includes per-endpoint information.

| Heading          | Description                                                                                   | Format                              |
| ---------------- | --------------------------------------------------------------------------------------------- | ----------------------------------- |
| endpoint         | The name of the endpoint.                                                                     | string                              |
| ingressProtected | Whether the endpoint was always ingress protected during the report interval.                 | bool                                |
| egressProtected  | Whether the endpoint was always egress protected during the report interval.                  | bool                                |
| envoyEnabled     | Whether the endpoint was always Envoy enabled during the report interval.                     | bool                                |
| appliedPolicies  | The full set of policies that applied to the endpoint at any time during the report interval. | ";" separated list of policy names  |
| services         | The full set of services that included this endpoint at any time during the report interval.  | ";" separated list of service names |

### namespaces.csv

A namespaces CSV file that includes per-namespace information.

| Heading          | Description                                                                                                   | Format |
| ---------------- | ------------------------------------------------------------------------------------------------------------- | ------ |
| namespace        | The name of the namespace.                                                                                    | string |
| ingressProtected | Whether all in-scope endpoints within the namespace were always ingress protected during the report interval. | bool   |
| egressProtected  | Whether all in-scope endpoints within the namespace were always egress protected during the report interval.  | bool   |
| envoyEnabled     | Whether all in-scope endpoints within the namespace were always Envoy enabled during the report interval.     | bool   |

### services.csv

A services CSV file that includes per-service information.

| Heading          | Description                                                                                                      | Format |
| ---------------- | ---------------------------------------------------------------------------------------------------------------- | ------ |
| service          | The name of the service.                                                                                         | string |
| ingressProtected | Whether all in-scope endpoints that are in the service were always ingress protected during the report interval. | bool   |
| envoyEnabled     | Whether all in-scope endpoints that are in the service were always Envoy enabled during the report interval.     | bool   |