The API has a number of references to other resources that don't specify full details needed to construct API calls (e.g., secretName) without specific, detailed knowledge of the API. Clients need to be able to resolve dependencies generically.

There are a few possible approaches. One could be to augment the OpenAPI spec. Another could be to provide a subresource or alternative representation (#33900) to enumerate fully qualified dependencies.

See also #3676.