FahamLah

CI/CD glossary

Every CI/CD word in this course, in plain words.

agent
Jenkins and Azure Pipelines call the worker machine an agent. GitHub and GitLab call it a runner.
In BM lessons: agent: Jenkins dan Azure Pipelines panggil mesin pekerja sebagai agent. GitHub dan GitLab panggil runner.
alert fatigue
So many pings that people stop reading them. Then the one real alarm gets missed.
In BM lessons: alert fatigue (letih makluman): Terlalu banyak makluman sampai orang berhenti membacanya. Akhirnya amaran yang betul terlepas.
allow-list
The approved supplier list: only the actions on it may run in your organisation.
In BM lessons: allow-list: Senarai pembekal yang diluluskan: hanya action dalam senarai boleh jalan dalam organisasi anda.
blue/green deployment
Two full kitchens. Test the new one, then flip the sign so everyone goes there. Flip back to undo.
In BM lessons: blue/green: Dua dapur penuh. Uji yang baharu, kemudian tukar papan tanda supaya semua ke sana. Tukar balik untuk undur.
Buildx
The packing machine: Docker's builder. It can save the layer cache and build for many CPU types.
In BM lessons: Buildx: Mesin pembungkus: pembina Docker. Ia boleh simpan cache layer dan bina untuk banyak jenis CPU.
canary release
A few users get the new version first, like a few customers tasting a new dish. All good? Serve more.
In BM lessons: canary: Sedikit pengguna dapat versi baharu dulu, macam beberapa pelanggan rasa hidangan baharu. Okey? Hidang kepada lebih ramai.
CD
The delivery van: a version that passed its tests is shipped by itself.
In BM lessons: CD: Versi yang lulus ujian dihantar secara automatik.
change fail rate
The share of deployments that need an urgent fix right after they go out.
In BM lessons: change fail rate: Peratus deployment yang perlu dibaiki segera sebaik sahaja keluar.
change lead time
The time from a commit to that change running in production.
In BM lessons: change lead time: Masa dari commit sehingga perubahan itu berjalan dalam production.
CI
Continuous integration: every change is taste-tested by itself.
In BM lessons: CI: Setiap perubahan diuji secara automatik.
Cloudflare Containers
Runs your container image on Cloudflare, behind a Worker. It needs the Workers Paid plan.
In BM lessons: Cloudflare Containers: Jalankan image container anda di Cloudflare, di belakang sebuah Worker. Perlukan pelan Workers Paid.
composite action
A pre-mixed spice blend: a few steps saved as one action. It runs as one step in your job.
In BM lessons: composite action: Rempah siap campur: beberapa langkah disimpan sebagai satu action. Ia jalan sebagai satu langkah dalam job.
concurrency
Runs in the same group wait their turn, or the older one is cancelled.
In BM lessons: concurrency: Run dalam kumpulan yang sama tunggu giliran, atau run yang lama dibatalkan.
continuous delivery
The van is packed and waiting. Every change that passes can ship, and a person says go.
In BM lessons: continuous delivery: Setiap perubahan yang lulus sedia dihantar. Seseorang tekan butang untuk hantar.
continuous deployment
The van drives off by itself: every change that passes goes live, with no button.
In BM lessons: continuous deployment: Setiap perubahan yang lulus terus sampai kepada pengguna, tanpa butang.
CVE
A public ID for a known security hole, like CVE-2099-0001. Each gets a severity.
In BM lessons: CVE: ID awam untuk lubang keselamatan yang diketahui, contohnya CVE-2099-0001. Setiap satu ada tahap bahaya.
deploy
Put new code on the servers. The dish is on the counter, maybe still under a cover. Releasing is lifting the cover.
In BM lessons: deploy: Letak kod baharu pada server. Hidangan dah ada di kaunter, mungkin masih bertutup. Release ialah buka tudung itu.
deployment frequency
How often you deploy to production: how often the van leaves.
In BM lessons: deployment frequency: Berapa kerap anda deploy ke production: berapa kerap van keluar.
deployment rework rate
The share of deployments that were not planned: extra trips made to fix a problem in production.
In BM lessons: deployment rework rate: Peratus deployment yang tak dirancang: trip tambahan untuk baiki masalah dalam production.
DORA metrics
Five numbers from the DORA research group that show how well a team delivers software.
In BM lessons: metrik DORA: Lima nombor daripada kajian DORA yang tunjuk sebaik mana pasukan menghantar perisian.
end-to-end test
Tests the whole app like a real user, from start to finish. Slow, but close to real life.
In BM lessons: end-to-end test: Uji seluruh aplikasi macam pengguna sebenar, dari mula hingga habis. Perlahan, tapi paling dekat dengan dunia sebenar.
environment secret
A secret only jobs that name that environment can read. Each kitchen's own locked spice box.
In BM lessons: environment secret: Secret yang hanya boleh dibaca oleh job yang menyebut environment itu. Kotak rempah berkunci milik setiap dapur.
expand and contract
Change a database in safe steps: add the new shelf, move the stock, then remove the old shelf. Old and new code keep working.
In BM lessons: expand dan contract: Ubah pangkalan data langkah demi langkah: tambah rak baharu, pindah stok, kemudian buang rak lama. Kod lama dan baharu terus berfungsi.
failed deployment recovery time
How long it takes to recover when a deployment fails and needs urgent work.
In BM lessons: failed deployment recovery time: Berapa lama untuk pulih bila satu deployment gagal dan perlu dibaiki segera.
fast feedback
Hearing about a problem in seconds or minutes, while the change is still fresh in your head.
In BM lessons: maklum balas pantas: Tahu tentang masalah dalam beberapa saat atau minit, semasa anda masih ingat perubahan itu.
flaky test
A test that passes and fails on the same code, like a taster who keeps changing their mind.
In BM lessons: flaky test: Ujian yang kadang lulus, kadang gagal, pada kod yang sama.
GHCR
GitHub Container Registry (ghcr.io): GitHub's own shop freezer for images.
In BM lessons: GHCR: GitHub Container Registry (ghcr.io): peti sejuk kedai milik GitHub untuk image.
image tag
A label on the pack, like 1.2.0, main or sha-3f9c2a7. One image can carry many.
In BM lessons: tag image: Label pada pek, contohnya 1.2.0, main atau sha-3f9c2a7. Satu image boleh ada banyak tag.
integration test
Tests parts working together, like tasting a sauce made of a few ingredients.
In BM lessons: integration test: Uji beberapa bahagian yang bekerja bersama, macam rasa kuah.
layer cache
Kek lapis layers kept from an earlier build. Unchanged layers are reused, not baked again.
In BM lessons: cache layer: Lapisan kek lapis yang disimpan dari binaan lepas. Lapisan yang tak berubah diguna semula.
least privilege
Give each worker only the keys their station needs. Nothing extra.
In BM lessons: least privilege: Beri setiap pekerja kunci untuk stesennya sahaja. Tiada lebih.
linter
A proofreader robot. It finds mistakes and risky habits in a file before it runs.
In BM lessons: linter: Robot penyemak. Ia cari kesilapan dan tabiat berisiko dalam fail sebelum fail itu dijalankan.
masking
Blacking out a secret in the logbook: GitHub shows *** instead of the exact secret text.
In BM lessons: masking: Hitamkan secret dalam buku log: GitHub tunjuk *** dan bukan teks secret yang tepat.
multi-arch image
One image name with a pack for each CPU type, like amd64 and arm64.
In BM lessons: image multi-arch: Satu nama image dengan satu pek untuk setiap jenis CPU, contohnya amd64 dan arm64.
OIDC (OpenID Connect)
The runner shows a visitor badge for one job. The cloud checks it and lends a key that expires when the job ends.
In BM lessons: OIDC (OpenID Connect): Runner tunjuk pas pelawat untuk satu job. Cloud semak pas itu dan pinjamkan kunci yang luput bila job tamat.
path filter
paths or paths-ignore: start the workflow only when certain files change.
In BM lessons: penapis laluan: paths atau paths-ignore: mulakan workflow hanya bila fail tertentu berubah.
pipeline
A conveyor belt with stations: build, test, ship. It runs by itself.
In BM lessons: pipeline: Tali sawat automatik: bina, uji, hantar.
preview environment
A short-lived copy of the site for one pull request, with its own link. A tasting plate, cleared when the PR closes.
In BM lessons: persekitaran pratonton: Salinan laman sementara untuk satu pull request, dengan pautan sendiri. Pinggan rasa, dibuang bila PR ditutup.
production
The real shop: the place where real users use your app.
In BM lessons: production: Kedai sebenar: tempat pengguna sebenar guna aplikasi anda.
promote
Move the same tested build on to the next environment, like from staging to production.
In BM lessons: promote: Pindahkan build yang sama, yang dah diuji, ke persekitaran seterusnya. Contohnya dari staging ke production.
provenance
A signed "made here" label: which repo, commit and workflow built this image.
In BM lessons: provenance: Label "dibuat di sini" yang ditandatangani: repo, commit dan workflow mana yang bina image ini.
pull_request_target
A PR trigger that runs with your secrets and a write key, even for a stranger's fork. Never run their code in it.
In BM lessons: pull_request_target: Pencetus PR yang jalan dengan secret dan kunci tulis anda, walaupun untuk fork orang asing. Jangan jalankan kod mereka di situ.
QEMU
An adapter that lets one CPU type pretend to be another. Slower, but it works.
In BM lessons: QEMU: Penyesuai yang buat satu jenis CPU berlakon jadi jenis lain. Lebih perlahan, tapi berfungsi.
recreate
Stop the old version, then start the new one. Like closing the stall to swap the menu: users wait.
In BM lessons: recreate: Hentikan versi lama, kemudian mulakan yang baharu. Macam tutup gerai untuk tukar menu: pelanggan kena tunggu.
release PR
A pull request a robot keeps up to date with the next version number and the changelog. Merge it to release.
In BM lessons: release PR: Pull request yang robot kemas kini dengan nombor versi seterusnya dan changelog. Merge untuk lancarkan.
required reviewer
A person who must approve before a job deploys to an environment, like the head chef signing before the van leaves.
In BM lessons: penyemak wajib: Orang yang mesti lulus dulu sebelum job deploy ke environment, macam ketua chef tandatangan sebelum van bertolak.
rollback
Go back to the last good version, like serving yesterday's good batch again.
In BM lessons: rollback: Kembali ke versi elok yang terakhir, macam hidang semula masakan semalam yang sedap.
rolling update
Swap the copies one at a time, like changing cooks one by one. The stall never closes.
In BM lessons: rolling update: Tukar salinan satu demi satu, macam tukar tukang masak seorang demi seorang. Gerai tak pernah tutup.
runner
The worker at a station: a machine that runs the jobs in a pipeline.
In BM lessons: runner: Mesin yang jalankan kerja dalam pipeline.
SBOM
Software bill of materials: the ingredients label. It lists every package and version inside.
In BM lessons: SBOM: Senarai bahan perisian: label ramuan. Ia senaraikan setiap pakej dan versi di dalamnya.
script injection
An order slip with a hidden instruction: text from a stranger becomes a command in your run: script.
In BM lessons: script injection: Slip pesanan dengan arahan tersembunyi: teks orang asing jadi arahan dalam skrip run: anda.
secret
The locked spice box: private info like a token. Never put it in code.
In BM lessons: secret: Maklumat rahsia seperti token; jangan letak dalam kod.
self-hosted runner
Your own worker in your own back room: a machine you run that picks up jobs. It is not wiped after each job.
In BM lessons: self-hosted runner: Pekerja sendiri dalam bilik belakang anda: mesin anda yang ambil kerja. Ia tidak dipadam selepas setiap kerja.
service container
A helper container, like a test database, that lives only for one job.
In BM lessons: service container: Container pembantu, contohnya pangkalan data ujian, yang hidup untuk satu job sahaja.
SLSA
A food-safety grade for builds (say "salsa"): levels that show how much you can trust where a package was made.
In BM lessons: SLSA: Gred keselamatan makanan untuk binaan (sebut "salsa"): tahap yang tunjuk sejauh mana anda boleh percaya asal pakej.
smoke test
A quick taste right after a deploy: does the page load, does /health say ok?
In BM lessons: smoke test: Rasa sekejap sejurus selepas deploy: halaman boleh dibuka, /health kata ok?
stage
One station on the belt, like lint, test, build, scan, publish or deploy.
In BM lessons: stage: Satu stesen pada tali sawat, contohnya lint, test, build, scan, publish atau deploy.
staging
The tasting room: a copy of production where you check a build before real users see it.
In BM lessons: staging: Bilik rasa: salinan production untuk semak build sebelum pengguna sebenar nampak.
supply chain attack
A poisoned ingredient from a supplier: attackers break into a tool that many pipelines borrow.
In BM lessons: supply chain attack: Bahan beracun dari pembekal: penyerang ceroboh alat yang dipinjam oleh banyak pipeline.
testing pyramid
Many fast unit tests at the bottom, some integration tests, a few slow end-to-end tests on top.
In BM lessons: piramid ujian: Banyak unit test pantas di bawah, sedikit integration test, dan beberapa end-to-end test perlahan di atas.
unit test
Tests one small piece on its own, like tasting one ingredient. Very fast.
In BM lessons: unit test: Uji satu bahagian kecil sahaja, macam rasa satu bahan. Sangat pantas.
Workers static assets
Cloudflare keeps your built files (HTML, CSS, pictures) on its servers around the world. Packed food on a shelf: nothing to cook.
In BM lessons: Workers static assets: Cloudflare simpan fail siap anda (HTML, CSS, gambar) pada server di seluruh dunia. Makanan siap bungkus di rak: tiada apa nak dimasak.