FahamLah

Kubernetes glossary

Every Kubernetes word in this course, in plain words.

access mode
Who may use a locker at once: one node (RWO), many nodes (RWX), many readers (ROX) or one pod (RWOP).
In BM lessons: access mode (mod akses): Siapa boleh guna loker serentak: satu node (RWO), banyak node (RWX), banyak pembaca (ROX) atau satu pod (RWOP).
admission control
Gate 3, the hygiene check: is this tray safe? It checks the object before it is saved.
In BM lessons: admission control: Pintu 3, semakan kebersihan: selamatkah dulang ini? Ia semak objek sebelum disimpan.
API deprecation
An old form the office will stop taking. Move to the new apiVersion before it goes.
In BM lessons: API deprecation (API lapuk): Borang lama yang pejabat akan berhenti terima. Tukar ke apiVersion baharu sebelum ia dibuang.
API server
The office's front counter. Every request, even from kubectl, goes through it.
In BM lessons: API server: Kaunter depan pejabat. Setiap permintaan, termasuk dari kubectl, melaluinya.
architecture diagram
A map of your app's parts. Arrows show who talks to whom.
In BM lessons: rajah seni bina: Peta bahagian aplikasi anda. Anak panah tunjuk siapa bercakap dengan siapa.
Argo CD
A GitOps helper with a web dashboard. It reads the order board in Git and keeps the cluster the same.
In BM lessons: Argo CD: Pembantu GitOps dengan papan pemuka web. Ia baca papan pesanan dalam Git dan pastikan kluster sama.
audit log
The guard's logbook: who asked the API server for what, and when.
In BM lessons: log audit: Buku log pengawal: siapa minta apa daripada API server, dan bila.
authentication
Gate 1, the ID check: "Who are you?" A certificate or token proves it.
In BM lessons: authentication: Pintu 1, semakan ID: "Siapa anda?" Sijil atau token membuktikannya.
authorization
Gate 2, the job card check: "May you do this?" In Kubernetes, RBAC decides.
In BM lessons: authorization: Pintu 2, semakan kad tugas: "Bolehkah anda buat ini?" Dalam Kubernetes, RBAC yang putuskan.
Backstage
An open-source developer portal: one place for every app, its owner, its docs and its templates.
In BM lessons: Backstage: Portal developer sumber terbuka: satu tempat untuk setiap aplikasi, pemiliknya, dokumennya dan templatnya.
base64
A way to write any bytes as plain letters. Anyone can turn it back, so it is not a lock.
In BM lessons: base64: Cara tulis apa-apa data sebagai huruf biasa. Sesiapa boleh tukar balik, jadi ia bukan kunci.
capabilities
Small slices of root's power, like changing the network. Drop them ALL unless you need one.
In BM lessons: capabilities: Cebisan kecil kuasa root, contohnya ubah rangkaian. Buang SEMUA kecuali yang perlu.
cert-manager
A helper in the cluster that gets TLS certificates and renews them before they expire.
In BM lessons: cert-manager: Pembantu dalam kluster yang dapatkan sijil TLS dan perbaharuinya sebelum tamat tempoh.
chart
A meal kit: templates plus default values, ready to install.
In BM lessons: chart: Set hidangan siap: templat dan nilai lalai, sedia dipasang.
CKA
Certified Kubernetes Administrator: hands-on tasks to run the cluster itself.
In BM lessons: CKA: Peperiksaan praktikal tentang cara mengurus kluster itu sendiri.
CKAD
Certified Kubernetes Application Developer: hands-on tasks to build and run apps in a live cluster.
In BM lessons: CKAD: Peperiksaan praktikal: bina dan jalankan aplikasi dalam kluster sebenar.
CKS
Certified Kubernetes Security Specialist: a hands-on security exam. Pass the CKA first.
In BM lessons: CKS: Peperiksaan praktikal tentang keselamatan kluster. Lulus CKA dahulu.
CLA (contributor license agreement)
A form you sign once, so a project may use your contributions.
In BM lessons: CLA (perjanjian lesen penyumbang): Borang yang anda tandatangan sekali supaya projek boleh guna sumbangan anda.
cloud engineer
Sets up the building: servers, networks and access on a cloud provider.
In BM lessons: jurutera cloud: Sediakan bangunan: server, rangkaian dan akses di penyedia cloud.
cloud native
Apps built from small, replaceable parts that run on platforms like Kubernetes.
In BM lessons: cloud native: Aplikasi yang dibina daripada bahagian kecil yang mudah diganti, untuk platform seperti Kubernetes.
cluster
The whole food court: a group of machines that Kubernetes runs as one.
In BM lessons: cluster (kluster): Sekumpulan mesin yang Kubernetes urus sebagai satu.
cluster DNS
The food court's directory: turns a Service name like menu.kitchen into its address.
In BM lessons: DNS kluster: Direktori medan selera: tukar nama Service seperti menu.kitchen kepada alamatnya.
ClusterIP
The default Service type: one order number that works inside the cluster only.
In BM lessons: ClusterIP: Jenis Service biasa: satu nombor pesanan yang berfungsi di dalam kluster sahaja.
CNI plugin
The food court's walkways: the network plugin that gives pods IPs and enforces NetworkPolicies.
In BM lessons: plugin CNI: Laluan pejalan kaki medan selera: plugin rangkaian yang beri IP kepada pod dan kuatkuasakan NetworkPolicy.
ConfigMap
A note on the stall wall: settings the app reads, kept outside the image.
In BM lessons: ConfigMap: Nota tetapan yang aplikasi baca, disimpan di luar image.
containerd
The stove on each stall: the program that really runs the containers.
In BM lessons: containerd: Dapur masak di setiap gerai: program yang betul-betul jalankan container.
context
The "you are here" sign: the cluster and namespace you are using now.
In BM lessons: context: Kluster dan namespace yang anda sedang guna.
control plane
The manager's office: the parts that decide what runs where.
In BM lessons: control plane (pejabat pengurus): Bahagian kluster yang putuskan apa jalan di mana.
controller
A manager who checks again and again: want 3, see 2, make 1 more.
In BM lessons: controller (pengawal): Pengurus yang periksa berulang kali: mahu 3, nampak 2, buat 1 lagi.
controller manager
One program that runs many controllers: the managers who walk the floor.
In BM lessons: controller manager: Satu program yang jalankan banyak controller: pengurus yang meronda.
CrashLoopBackOff
The app keeps crashing; Kubernetes waits longer before each restart. Read the logs.
In BM lessons: CrashLoopBackOff: Aplikasi asyik crash; Kubernetes tunggu lebih lama sebelum setiap restart. Baca log.
CRD (CustomResourceDefinition)
Teaches the cluster a new kind of object, like adding a dish to the menu.
In BM lessons: CRD (CustomResourceDefinition): Ajar kluster satu jenis objek baharu, macam tambah hidangan dalam menu.
CRI (Container Runtime Interface)
The standard plug between the kubelet and the stove (containerd).
In BM lessons: CRI (Container Runtime Interface): Palam standard antara kubelet dan dapur masak (containerd).
CronJob
Makes a Job on a schedule, like counting the plates every night.
In BM lessons: CronJob: Buat Job ikut jadual, macam kira pinggan setiap malam.
DaemonSet
One tray on every stall, like a cleaner per stall. New stall, new tray.
In BM lessons: DaemonSet: Satu dulang di setiap gerai, macam seorang pencuci setiap gerai. Gerai baharu, dulang baharu.
debug ladder
Climb one rung at a time: get, describe, logs, events, exec, debug.
In BM lessons: tangga nyahpepijat: Naik satu anak tangga setiap kali: get, describe, logs, events, exec, debug.
demo video
A short screen recording that shows your project working.
In BM lessons: video demo: Rakaman skrin pendek yang tunjuk projek anda berfungsi.
Deployment
The manager's standing order, like "always 3 trays".
In BM lessons: Deployment: Arahan tetap, contohnya "sentiasa ada 3 salinan".
desired state
What is written on the order board. Kubernetes keeps chasing it.
In BM lessons: desired state: Keadaan yang anda mahu; Kubernetes sentiasa kejar keadaan ini.
DevOps engineer
Builds the conveyor belt, so every change gets tested and shipped by itself.
In BM lessons: jurutera DevOps: Bina tali sawat automatik supaya setiap perubahan diuji dan dihantar sendiri.
drift
The floor no longer matches the order board: the cluster differs from Git, often after a change by hand.
In BM lessons: drift (hanyut): Kluster tak lagi sama dengan Git, selalunya selepas perubahan secara manual.
dry run
A rehearsal: kubectl shows what it would do, and changes nothing.
In BM lessons: dry run (raptai): Raptai: kubectl tunjuk apa yang ia akan buat, tanpa ubah apa-apa.
dynamic provisioning
Lockers built on demand: a claim arrives, and the StorageClass makes its PV.
In BM lessons: dynamic provisioning: Loker dibina bila perlu: claim sampai, StorageClass buat PV untuknya.
emptyDir
A scratch table on the tray: its containers share it, and it is wiped when the pod goes.
In BM lessons: emptyDir: Meja sementara atas dulang: container di dalamnya berkongsi, dan ia dikosongkan bila pod hilang.
encryption at rest
The API server locks Secrets before it saves them in etcd.
In BM lessons: encryption at rest: API server kunci Secret sebelum simpan dalam etcd.
EndpointSlice
The list behind an order number: which ready pods a Service sends to.
In BM lessons: EndpointSlice: Senarai di belakang nombor pesanan: pod sedia mana yang Service hantar pesanan.
etcd
The order book: where the cluster keeps every object. Back it up.
In BM lessons: etcd: Buku pesanan: tempat kluster simpan semua objek. Buat salinan sandarannya.
event
A note on the manager's notice board: scheduled, pulled, started, or a warning. Kept for a short time.
In BM lessons: event: Nota pada papan notis pengurus: dijadualkan, ditarik, dimulakan, atau amaran. Disimpan sekejap sahaja.
External Secrets Operator
Copies secrets from an outside vault into Kubernetes Secrets, and keeps them fresh.
In BM lessons: External Secrets Operator: Salin rahsia dari peti besi luar ke dalam Secret Kubernetes, dan sentiasa kemas kini.
Flux
A GitOps helper made of small controllers. It pulls from Git and keeps the cluster the same.
In BM lessons: Flux: Pembantu GitOps yang terdiri daripada controller kecil. Ia tarik dari Git dan pastikan kluster sama.
Gateway
The main entrance and its signboards: the way in from the internet.
In BM lessons: Gateway: Pintu masuk dari internet ke dalam kluster.
GatewayClass
The door maker: which controller builds the Gateways.
In BM lessons: GatewayClass: Pembuat pintu: controller mana yang bina Gateway.
GitOps
The order board is a Git repo. The cluster follows what Git says.
In BM lessons: GitOps: Git jadi sumber kebenaran; kluster ikut apa yang ada dalam Git.
golden path
The ready, paved road to build and ship an app at your company.
In BM lessons: golden path (laluan emas): Jalan siap dan rata untuk bina dan hantar aplikasi dalam syarikat anda.
Grafana
The big screen on the wall: charts and dashboards from your numbers.
In BM lessons: Grafana: Skrin besar di dinding: carta dan papan pemuka daripada nombor anda.
headless Service
No single order number (clusterIP: None). Its name lists each pod's own IP.
In BM lessons: Service headless: Tiada satu nombor pesanan (clusterIP: None). Namanya senaraikan IP setiap pod.
Helm
Kubernetes' package manager: it fills chart templates with values and keeps a history of releases.
In BM lessons: Helm: Pengurus pakej Kubernetes: ia isi templat chart dengan nilai dan simpan sejarah release.
homelab
Your own practice kitchen at home: a spare machine for clusters you can break.
In BM lessons: homelab (makmal di rumah): Dapur latihan anda sendiri: mesin lebihan untuk kluster yang boleh dirosakkan.
HorizontalPodAutoscaler (HPA)
A helper manager who adds trays when they get busy and removes them when it is quiet.
In BM lessons: HorizontalPodAutoscaler (HPA): Pembantu pengurus yang tambah pod bila sibuk dan kurangkan bila lengang.
HTTPRoute
Signboards at the entrance: which path goes to which Service.
In BM lessons: HTTPRoute: Papan tanda di pintu masuk: laluan mana pergi ke Service mana.
image automation
A robot that spots a new image tag in the shop freezer and commits it to Git for you.
In BM lessons: image automation (automasi image): Robot yang nampak tag image baharu dalam registry dan commit ke Git untuk anda.
image signature
A tamper-proof seal on a pack: it proves who built the image and that nobody changed it.
In BM lessons: tandatangan image: Meterai kalis usik pada pek: bukti siapa bina image dan tiada siapa ubahnya.
ImagePullBackOff
The stall cannot fetch the image, often a typo in the name or tag.
In BM lessons: ImagePullBackOff: Gerai tak dapat ambil image, selalunya salah taip nama atau tag.
Ingress
The older way in: one object for the door and its paths. Gateway API replaces it.
In BM lessons: Ingress: Cara lama untuk masuk: satu objek untuk pintu dan laluannya. Gateway API menggantikannya.
init container
The prep cook: runs before the app containers, finishes, then leaves.
In BM lessons: init container: Tukang persediaan: jalan sebelum container aplikasi, siap, kemudian pergi.
Job
A task that runs until it finishes, like counting the plates once.
In BM lessons: Job: Tugas yang berjalan sehingga siap, macam kira pinggan sekali.
KCNA
Kubernetes and Cloud Native Associate: a multiple-choice exam on the big ideas.
In BM lessons: KCNA: Peperiksaan aneka pilihan tentang idea besar Kubernetes dan cloud native.
kind
Kubernetes IN Docker: a practice food court built from containers on your laptop.
In BM lessons: kind: Kubernetes IN Docker: medan selera latihan yang dibina daripada container dalam laptop anda.
kube-proxy
Runs on every stall and sends order-number (Service) traffic to the right trays.
In BM lessons: kube-proxy: Jalan di setiap gerai dan hantar trafik nombor pesanan (Service) ke dulang yang betul.
KubeCon
The big cloud-native conference. Its talk videos go online for free afterwards.
In BM lessons: KubeCon: Persidangan besar cloud native. Video ceramahnya boleh ditonton percuma selepas itu.
kubeconfig
The file that lists your clusters and how to reach them (~/.kube/config).
In BM lessons: kubeconfig: Fail yang senaraikan kluster anda dan cara sampai ke sana (~/.kube/config).
kubectl
Your walkie-talkie to the office: the command-line tool that talks to the API server.
In BM lessons: kubectl: Walkie-talkie anda ke pejabat: alat baris arahan yang bercakap dengan API server.
kubelet
The supervisor on every stall. It starts the trays the office sends there.
In BM lessons: kubelet: Penyelia di setiap gerai. Ia hidupkan dulang yang pejabat hantar ke situ.
Kustomize
One base recipe plus a sticky note per kitchen. Built into kubectl (kubectl apply -k).
In BM lessons: Kustomize: Satu resepi asas dan satu nota lekat untuk setiap dapur. Terbina dalam kubectl (kubectl apply -k).
KYAML
Strict YAML from kubectl: every string in quotes, braces around maps. Any YAML reader still reads it.
In BM lessons: KYAML: YAML yang ketat daripada kubectl: setiap teks dalam petikan, kurungan kerinting untuk map. Ia masih YAML biasa.
label
A sticker on a tray: a key and a value, like app=shop.
In BM lessons: label (pelekat): Pelekat pada dulang: kunci dan nilai, contohnya app=shop.
limit (resources)
The most a container may use. Over the CPU limit: slowed. Over the memory limit: killed.
In BM lessons: limit (sumber): Paling banyak yang container boleh guna. Lebih had CPU: diperlahankan. Lebih had memori: dibunuh.
LimitRange
The zone's default plate size: requests and limits for containers that set none.
In BM lessons: LimitRange: Saiz pinggan lalai zon: requests dan limits untuk container yang tak tetapkan sendiri.
liveness probe
"Is the cook still awake?" If it keeps failing, the kubelet restarts the container.
In BM lessons: liveness probe: "Tukang masak masih berjaga?" Kalau asyik gagal, kubelet hidupkan semula container.
LoadBalancer
A street sign from the cloud: one outside address for a Service.
In BM lessons: LoadBalancer: Papan tanda jalan daripada cloud: satu alamat luar untuk sebuah Service.
logs
The cook's notebook: everything a container prints.
In BM lessons: log: Buku nota tukang masak: semua yang container cetak.
managed Kubernetes
A rented food court: the landlord runs the office (control plane). EKS, GKE, AKS and DOKS are examples.
In BM lessons: Kubernetes terurus: Medan selera sewa: tuan punya urus pejabat (control plane). Contohnya EKS, GKE, AKS dan DOKS.
manifest
An order slip written in YAML: what you want Kubernetes to make.
In BM lessons: manifest (slip pesanan): Pesanan yang ditulis dalam YAML: apa yang anda mahu Kubernetes buat.
metrics-server
The meter reader: it checks how much CPU and memory each tray uses right now. kubectl top and the HPA read it.
In BM lessons: metrics-server: Pembaca meter: semak berapa CPU dan memori setiap pod guna sekarang. kubectl top dan HPA baca daripadanya.
must-have
A skill a job post truly needs. Nice-to-haves are only bonus points.
In BM lessons: must-have (wajib ada): Kemahiran yang benar-benar diperlukan dalam iklan kerja. Nice-to-have cuma markah bonus.
namespace
One zone of the food court: a separate space inside the cluster.
In BM lessons: namespace: Ruang berasingan dalam kluster.
NetworkPolicy
A guest list on a pod's door: which pods may come in, chosen by label.
In BM lessons: NetworkPolicy: Senarai tetamu di pintu pod: pod mana boleh masuk, dipilih ikut label.
node
One stall: one machine in the cluster.
In BM lessons: node: Satu mesin dalam kluster.
node affinity
A wish list for stalls: must-have rules and nice-to-have rules.
In BM lessons: node affinity: Senarai hajat untuk node: syarat wajib dan syarat pilihan.
node autoscaler
Opens a new stall when trays have nowhere to sit, and closes empty ones. Cluster Autoscaler and Karpenter are two.
In BM lessons: node autoscaler: Buka gerai baharu bila pod tiada tempat, dan tutup gerai kosong. Contohnya Cluster Autoscaler dan Karpenter.
NodePort
A side window on every stall: the same port (30000–32767) open on every node.
In BM lessons: NodePort: Tingkap tepi di setiap gerai: port yang sama (30000–32767) dibuka pada setiap node.
nodeSelector
A sign on the tray: "only stalls with this label".
In BM lessons: nodeSelector: Papan tanda pada pod: "hanya node dengan label ini".
OOMKilled
The container used more memory than its limit and was killed (exit code 137).
In BM lessons: OOMKilled: Container guna memori lebih daripada hadnya lalu dibunuh (kod keluar 137).
OpenTelemetry (OTel)
One shared way to collect metrics, logs and traces, so you can switch tools later.
In BM lessons: OpenTelemetry (OTel): Satu cara bersama untuk kumpul metrik, log dan trace, supaya anda boleh tukar alat kemudian.
operator
A new kind plus its own manager: a controller that runs one app, like Postgres, for you.
In BM lessons: operator: Jenis objek baharu bersama pengurusnya sendiri: controller yang jalankan satu aplikasi, seperti Postgres, untuk anda.
orchestrator
A food court manager for containers: it places, watches and replaces them for you.
In BM lessons: orchestrator (pengurus container): Perisian yang letak, pantau dan ganti container untuk anda.
overhead
The work and machines a tool needs just to keep running, before your app does anything.
In BM lessons: overhead (kos tambahan): Kerja dan mesin yang alat itu perlukan untuk terus hidup, sebelum aplikasi anda buat apa-apa.
overlay
The sticky note for one kitchen: it changes the base for dev, staging or prod.
In BM lessons: overlay: Nota lekat untuk satu dapur: ia ubah base untuk dev, staging atau prod.
Pending
The tray has no stall yet (no room), or its images are still on the way.
In BM lessons: Pending: Dulang belum dapat gerai (tiada ruang), atau image masih dalam perjalanan.
PersistentVolume (PV)
The real locker in the store room: storage that outlives pods.
In BM lessons: PersistentVolume (PV): Loker sebenar di stor: storan yang kekal walaupun pod hilang.
PersistentVolumeClaim (PVC)
A locker request slip, like "I need 1Gi". Kubernetes finds or makes a PV for it.
In BM lessons: PersistentVolumeClaim (PVC): Slip minta loker, contohnya "saya perlu 1Gi". Kubernetes cari atau buat PV untuknya.
platform engineer
Builds a self-service counter, so other teams get a ready kitchen in minutes.
In BM lessons: jurutera platform: Bina kaunter layan diri supaya pasukan lain dapat dapur siap dalam beberapa minit.
pod
A tray of dishes that always go together: one or more containers.
In BM lessons: pod: Unit paling kecil; satu atau lebih container yang sentiasa bersama.
pod IP
A tray's own table number: every pod gets an IP. A replaced pod gets a new one.
In BM lessons: IP pod: Nombor meja setiap dulang: setiap pod dapat IP sendiri. Pod pengganti dapat IP baharu.
Pod Security Standards
Three hygiene levels for trays: privileged, baseline and restricted. A namespace label switches one on.
In BM lessons: Pod Security Standards: Tiga tahap kebersihan dulang: privileged, baseline dan restricted. Label namespace menghidupkannya.
PodDisruptionBudget (PDB)
A rule like "at least 2 trays stay up" during planned work, such as a drain.
In BM lessons: PodDisruptionBudget (PDB): Peraturan seperti "sekurang-kurangnya 2 pod kekal hidup" semasa kerja terancang, contohnya drain.
policy engine
An add-on rule keeper at gate 3, like Kyverno or Gatekeeper.
In BM lessons: enjin polisi: Penjaga peraturan tambahan di pintu 3, contohnya Kyverno atau Gatekeeper.
port-forward
A private staff hatch from your laptop to one pod, while the command runs.
In BM lessons: port-forward: Tingkap staf peribadi dari laptop anda ke satu pod, selagi arahan itu berjalan.
portfolio
A few finished projects that prove what you can do.
In BM lessons: portfolio: Beberapa projek siap yang buktikan apa yang anda boleh buat.
progressive delivery
Serve the new dish to a few tables first, check the numbers, then to everyone. Bad numbers roll it back.
In BM lessons: progressive delivery (penghantaran berperingkat): Hantar versi baharu kepada sedikit pengguna dulu, semak angka, kemudian kepada semua. Angka buruk akan rollback.
Prometheus
A clerk who visits every stall on a timer and writes the numbers down, with the time.
In BM lessons: Prometheus: Kerani yang lawat setiap gerai ikut jadual dan catat nombor, bersama masanya.
QoS class
Guaranteed, Burstable or BestEffort. When a stall runs short, BestEffort pods leave first.
In BM lessons: kelas QoS: Guaranteed, Burstable atau BestEffort. Bila gerai kehabisan ruang, pod BestEffort keluar dulu.
RBAC
Role-based access control: job cards (Roles) pinned to staff badges (bindings). It only adds rights.
In BM lessons: RBAC: Kawalan akses ikut peranan: kad tugas (Role) dipin pada lencana staf (binding). Ia hanya menambah hak.
readiness probe
"Ready to serve?" If it fails, the pod gets no customers from its Service. No restart.
In BM lessons: readiness probe: "Sedia melayan?" Kalau gagal, pod tak dapat pelanggan daripada Service. Tiada restart.
reconciliation
The loop that keeps fixing what is real until it matches the order board.
In BM lessons: reconciliation (penyelarasan): Gelung yang terus membetulkan keadaan sebenar sehingga sama dengan papan pesanan.
release
One installed copy of a chart, with numbered revisions you can roll back to.
In BM lessons: release: Satu salinan chart yang dipasang, dengan revision bernombor untuk rollback.
ReplicaSet
The tray counter: keeps the right number of pods with matching labels.
In BM lessons: ReplicaSet: Pengira dulang: kekalkan bilangan pod yang betul dengan label yang sepadan.
request (resources)
The shelf space a container books. The scheduler only places a pod where it fits.
In BM lessons: request (sumber): Ruang rak yang container tempah. Scheduler hanya letak pod di tempat yang muat.
ResourceQuota
A zone's budget: the most CPU, memory or trays one namespace may ask for.
In BM lessons: ResourceQuota: Bajet satu zon: had CPU, memori atau pod yang satu namespace boleh minta.
RESTARTS
How many times the kubelet started a container again inside the same pod.
In BM lessons: RESTARTS: Berapa kali kubelet mulakan semula container dalam pod yang sama.
revision
A numbered version of a Deployment's pod template. rollout undo goes back to one.
In BM lessons: revision: Versi bernombor templat pod sebuah Deployment. rollout undo kembali kepadanya.
Role
A job card: which verbs on which things, in one zone. A ClusterRole works in every zone.
In BM lessons: Role: Kad tugas: kata kerja apa pada benda apa, dalam satu zon. ClusterRole berfungsi di semua zon.
RoleBinding
Pins a job card to a person or bot, in one zone. A ClusterRoleBinding pins it everywhere.
In BM lessons: RoleBinding: Pin kad tugas pada orang atau bot, dalam satu zon. ClusterRoleBinding pin di semua tempat.
scheduler
Picks a stall (node) with room for each new tray (pod).
In BM lessons: scheduler (penjadual): Pilih gerai (node) yang ada ruang untuk setiap dulang (pod) baharu.
Sealed Secret
A Secret locked with the cluster's public key, safe to keep in Git. Only the controller in the cluster can open it.
In BM lessons: Sealed Secret: Secret yang dikunci dengan kunci awam kluster, selamat disimpan dalam Git. Hanya controller dalam kluster boleh buka.
seccomp
A filter on the requests a container makes to the Linux kernel. RuntimeDefault blocks the risky ones.
In BM lessons: seccomp: Penapis permintaan container kepada kernel Linux. RuntimeDefault sekat yang berisiko.
Secret
The locked spice box for passwords and tokens. Its base64 hides nothing, so limit who can read it.
In BM lessons: Secret: Kotak rempah berkunci untuk kata laluan dan token. Base64 tak sorok apa-apa, jadi hadkan siapa boleh baca.
securityContext
The locks on a lunchbox: no root, no extra powers, a seccomp filter, read-only files.
In BM lessons: securityContext: Kunci pada bekas: bukan root, tiada kuasa tambahan, penapis seccomp, fail baca sahaja.
selector
A rule that picks trays by their stickers, like app=shop.
In BM lessons: selector (pemilih): Peraturan yang pilih dulang ikut pelekatnya, contohnya app=shop.
self-heal
Argo CD puts Git's version back by itself when someone changes the cluster by hand.
In BM lessons: self-heal (pulih sendiri): Argo CD kembalikan versi Git dengan sendiri bila seseorang ubah kluster secara manual.
Service
One order number, whichever stall cooks it: a fixed address for a group of pods.
In BM lessons: Service: Alamat tetap untuk sekumpulan pod.
ServiceAccount
A staff badge for a robot: the identity a pod or a CI bot uses with the API.
In BM lessons: ServiceAccount: Lencana staf untuk robot: identiti yang pod atau bot CI guna dengan API.
sidecar container
A helper on the same tray all day, like a log shipper. An init container with restartPolicy: Always.
In BM lessons: sidecar container: Pembantu atas dulang yang sama sepanjang hari, contohnya penghantar log. Init container dengan restartPolicy: Always.
spec
The part of a manifest you write: what you want.
In BM lessons: spec: Bahagian manifest yang anda tulis: apa yang anda mahu.
SRE (site reliability engineer)
Keeps the live service healthy: watches alerts, takes turns on call, then fixes the cause.
In BM lessons: SRE (jurutera kebolehpercayaan laman): Jaga servis yang sedang hidup: pantau amaran, bergilir on-call, kemudian baiki puncanya.
STAR method
Tell a work story in four parts: Situation, Task, Action, Result.
In BM lessons: kaedah STAR: Cerita pengalaman kerja dalam empat bahagian: Situation, Task, Action, Result.
startup probe
"Still warming up?" Gives a slow app time to start before the other probes begin.
In BM lessons: startup probe: "Masih memanaskan dapur?" Beri aplikasi yang lambat masa untuk mula sebelum probe lain bermula.
StatefulSet
Trays with names that stay (web-0, web-1), started in order. For databases and other stateful apps.
In BM lessons: StatefulSet: Dulang dengan nama yang kekal (web-0, web-1), dimulakan ikut giliran. Untuk pangkalan data dan aplikasi berkeadaan.
status
The part Kubernetes writes: what is really there now.
In BM lessons: status: Bahagian yang Kubernetes tulis: apa yang benar-benar ada sekarang.
StorageClass
The locker maker: it builds a new PV when a claim asks for one.
In BM lessons: StorageClass: Pembuat loker: ia bina PV baharu bila ada claim yang minta.
sync
Copy the order board onto the floor: make the cluster match what Git says.
In BM lessons: sync (selaraskan): Jadikan kluster sama seperti yang tertulis dalam Git.
taint
A lock on a stall. Trays without the key stay away.
In BM lessons: taint: Kunci pada node. Pod tanpa anak kunci tak boleh masuk.
TLS
A sealed tray cover: nobody can read or swap the order on the way. The S in HTTPS.
In BM lessons: TLS: Penutup dulang bermeterai: tiada siapa boleh baca atau tukar pesanan di tengah jalan. S dalam HTTPS.
toleration
A key on a tray. It opens a stall's lock, but does not pull the tray there.
In BM lessons: toleration: Anak kunci pada pod. Ia buka kunci node, tapi tak tarik pod ke sana.
topology spread
Spread trays across stalls, so one closing stall hurts less.
In BM lessons: topology spread: Sebar pod ke banyak node, supaya satu node tutup tak beri kesan besar.
trace
One order's whole journey, step by step, with how long each step took.
In BM lessons: trace: Perjalanan penuh satu pesanan, langkah demi langkah, dengan masa setiap langkah.
user namespace
Boss inside the stall, nobody outside: root in the pod is a plain user on the node.
In BM lessons: user namespace: Bos dalam gerai, orang biasa di luar: root dalam pod ialah pengguna biasa pada node.
ValidatingAdmissionPolicy
A house rule checked at gate 3, written in CEL. Built into Kubernetes, nothing to install.
In BM lessons: ValidatingAdmissionPolicy: Peraturan rumah yang disemak di pintu 3, ditulis dalam CEL. Terbina dalam Kubernetes.
values
The order form for a chart, like replicaCount or the image tag. values.yaml holds the defaults.
In BM lessons: values (nilai): Borang pesanan untuk chart, contohnya replicaCount atau tag image. values.yaml simpan nilai lalai.
version skew
How far apart the versions of a cluster's parts may be, and still work together.
In BM lessons: version skew: Sejauh mana versi bahagian kluster boleh berbeza, dan masih berfungsi bersama.
VerticalPodAutoscaler (VPA)
Gives a tray a bigger or smaller plate: it changes requests from real use. An add-on.
In BM lessons: VerticalPodAutoscaler (VPA): Beri pod pinggan lebih besar atau kecil: ubah requests ikut guna sebenar. Satu add-on.
volumeClaimTemplates
A StatefulSet's locker form: each pod gets its own claim, like data-ledger-0.
In BM lessons: volumeClaimTemplates: Borang loker StatefulSet: setiap pod dapat claim sendiri, contohnya data-ledger-0.