Glossary
Introduction to proprietary terms, concepts, and abbreviations used in this document.
| Chinese Full Name | English Full Name | Acronym | Description |
|---|---|---|---|
| 集群 | Cluster | - | Kubernetes cluster, the infrastructure cluster that hosts containers in a Kubernetes container platform, consisting of multiple nodes, load balancers, private networks, and other resources. Single-node cluster: a cluster with only one Master node; Highly available cluster: a cluster with at least 3 Master nodes. |
| 节点 | Node | - | Nodes in the cluster, categorized into control nodes and compute nodes. Control nodes run kube-apiserver, kube-scheduler, kube-controller-manager, etcd, container network, and some management components of the platform. Compute nodes are responsible for workload scheduling and communication with control nodes in the Kubernetes cluster, which can be virtual or physical machines. |
| 项目 | Project | - | Projects (tenants) on the platform can be flexibly divided into independent and isolated resource spaces. Each project has its own project environment, representing different subsidiaries, departments, or project teams within an organization. Project management enables easy resource isolation between project teams and quota management within tenants. |
| 命名空间 | Namespace | - | Kubernetes Namespace, a smaller resource space isolated under a project on the platform and serves as a workspace for job production. Multiple namespaces can be created under a project, and the total resource quota used cannot exceed the project quota. Namespace divides resource quotas more finely and limits the size of containers (CPU, memory) in the namespace, effectively improving resource utilization. |
| 镜像 | Image | - | A standard format in which container applications are packaged. When deploying containerized applications, images can be specified from Docker Hub, the company’s DevOps platform image repository, or users’ private image repositories. An image ID uniquely identifies an image by the repository URI and image tag (default is latest). |
| 容器 | Container | - | A running instance created from an image. |
| 容器组 | Pod | - | The smallest basic unit for deploying applications or services in Kubernetes. A Pod encapsulates multiple application containers (or a single container), storage resources, a unique network IP, and policy options for managing how containers run. |
| 应用 | Application | - | Custom Kubernetes resources on this platform, consisting of one or more associated computing components to form a complete business application. Applications can be created through UI editing mode or YAML files and run in development, testing, or production environments. |
| 计算组件 | Workload | - | Components on the platform that constitute an application. These are programs created based on images that can provide services in combination or independently. |
| 自定义资源类型 | CustomResourceDefinition | CRD | In the Kubernetes API, a resource is an endpoint for storing a collection of API objects of a certain type. CRD objects define a new and unique Kind object in the cluster and allow the Kubernetes API server to handle the entire lifecycle of that object. Kubernetes supports users to customize Kubernetes extension resources through the CustomResourceDefinition API, ensuring that new resources can be quickly registered and used. |
| 事件 | Event | - | The platform integrates Kubernetes events, recording important state changes of Kubernetes resources and various operational status events. Events help analyze specific reasons when resources such as clusters, applications, tasks encounter exceptions. |
| 审计 | Audit | - | The platform integrates Kubernetes auditing, providing security-related chronological operation records including time, source, operation result, user initiating the operation, operated resource, and detailed information of requests/responses. Through auditing, platform auditors can clearly understand changes in the Kubernetes cluster. |
| 日志 | Log | - | The platform integrates Kubernetes logs to quickly collect container logs from the Kubernetes cluster, including container standard output and text files inside containers. It also supports collecting logs from Kubelet, Docker, and other Kubernetes containerized components. |
| 令牌 | Token | - | A token issued by the system to users containing identity and permission information. When users call an API, they include the token in the request message header to authenticate their identity and gain access to resources for API operations. |
| - | OpenId Connect | OIDC | OpenID Connect (OIDC) is an identity authentication standard protocol based on the OAuth 2.0 protocol. It uses an OAuth 2.0 authorization server to provide user identity authentication to third-party clients and passes corresponding authentication information to clients. |
| 轻量级目录访问协议 | Lightweight Directory Access Protocol | LDAP | LDAP is a mature, flexible, and well-supported standard mechanism for interaction with directory servers. LDAP allows clients to perform various operations in directory servers, including storing and retrieving data, searching for data that matches specific conditions, authenticating clients, and more. LDAP directory servers are quite versatile data stores that can be used for various applications. |
| - | Identity Provider | IDP | An Identity Provider that stores and manages digital identities of users. |
| 角色 | Role | - | A collection of operational permissions. Platform permissions for resources include create, view, update, delete operations which are categorized and combined by roles on the platform. A role can have one or more types of resources with one or more operational permissions. Assigning specific roles to users quickly grants or restricts operational permissions for specified resources. |
| 地域 | Region | - | Geographic region where fault isolation is complete (including natural disasters), generally interconnected between regions via metropolitan area networks or dedicated lines. |
| 标签 | Label | - | Key-value pairs attached to Kubernetes objects (e.g., Pods) to specify meaningful and relevant identifying attributes for efficient querying and monitoring operations. |
| 注解 | Annotation | - | Non-identifying metadata attached to Kubernetes objects (e.g., Pods) in key-value pairs that clients can retrieve. Annotations do not identify or select objects like labels do; they can contain characters not allowed in labels and help users record information about objects. |