Glossary

Application

An application is an instance installed by the Helm tool. It is a collection of resource objects such as workloads, services and storage.

Workload

A workload is an application running on Kubernetes. It manages a group of pods that use the same image, and includes types such as Deployment, StatefulSet and DaemonSet.

Job

A job processes short-lived workloads in batches and ensures that one or more pods used for batch processing terminate successfully. Jobs include one-time jobs and scheduled jobs.

Pod

A pod is the smallest unit of cluster scheduling and management. Containers in the same pod share the same network and storage.

Service

A service provides a unified access entry for pods, so that applications can easily implement service discovery and load balancing.

Ingress

An ingress is a collection of HTTP or HTTPS routing rules used to access services inside a cluster from outside the cluster. It provides externally accessible URLs, load balancing, SSL termination and HTTP routing for cluster services.

Network Policy

A network policy controls communication between workloads, and between workloads and the outside. By filtering inbound and outbound traffic, it protects applications against network attacks.

PVC

A PVC (PersistentVolumeClaim) is used to persistently store the data of a workload, so that the data is retained when a pod is restarted or deleted.

ConfigMap

A configmap stores configuration data as key-value pairs and can be mounted into a workload as a configuration file. A configmap decouples environment configuration from the container image, which makes it easier to modify application configuration.

Secret

A secret stores sensitive configuration in a Kubernetes cluster, such as passwords and certificates, and can be used in a workload as a file or an environment variable.

Microservices Application

A microservices application is a collection of resource objects such as workloads, services and service mesh resources. Microservices applications can be connected to the platform for visual governance.

Service Topology

The service topology visually displays the invocation and dependency relationships between microservices applications in the current namespace, together with traffic monitoring data.

Repository

A repository stores Docker images and Helm charts uploaded by users. You can upload your own modified images and charts to a repository, or download uploaded Docker images and charts from a repository.

Artifact Sync

Artifact Sync connects to an external registry and automatically synchronizes OCI artifacts such as container images and Helm charts to a repository, achieving unified management of artifact assets.

YAML Template Repo

The YAML Template Repo stores YAML templates written by users, and provides example templates for more than ten common Kubernetes resources such as Deployment, Statefulset, Service, Configmap and PersistentVolumeClaim. You can use the example templates in the YAML Template Repo to quickly write the YAML text you need.

Application Market

The application market provides a rich set of official charts such as kafka, zookeeper, mysql, redis and rabbitmq, which can be installed to a cluster with one click and deployed as application instances.

One-Click Inspection

One-click inspection performs an all-round health check of key platform resources and services with a single click, scores the health of the inspected resources and services based on the results, and provides inspection suggestions and an inspection report. It supports efficient O&M and helps keep platform resources and services in optimal condition.

Alarm

An alarm monitors and responds to status changes in time series data, and pushes alarm messages to specified endpoints through the notification service. You can create alarms to monitor resources.

Endpoint

An endpoint is the way in which a user receives information about a subscribed topic. Endpoint types include system, email, WeCom and DingTalk.

Message Template

The text template used when an alarm sends a message to an endpoint.

Audit Log

Audit logs record platform resource operations, authentication activities, and Kubernetes resource operations to help you trace operations and troubleshoot issues.

Cluster

A cluster mainly refers to a Kubernetes cluster that runs container applications. ZStack Zaku provides standardized, highly available and stable Kubernetes clusters, and simplifies O&M operations such as cluster deployment, scale-out, upgrade and high availability, so that you can focus on your own upper-layer container applications.

Node Auto-Scaling Group

A node auto-scaling group is a node management unit that automatically adjusts the number of nodes according to the business load of a cluster, achieving on-demand resource allocation and cost optimization.

Node

A node is a basic component of a Kubernetes cluster. Nodes are divided into control planes (Master) and compute nodes (Node).

GPU Pool

A GPU pool is a resource sharing unit formed by aggregating multiple GPUs. It dynamically manages and allocates GPUs, improving resource utilization and making resource allocation more flexible.

Storageclass

A storageclass (StorageClass) is a configuration template used in Kubernetes to dynamically create PVCs. It defines the properties of a PVC, the creation policy, and the required storage plug-in.

Local Storage

Local storage organizes local disks on cluster nodes into storage pools and provides persistent storage for workloads through storage classes.

External Network

An external network provides IP addresses for pods and LoadBalancer services in a cluster, allowing them to be accessed from outside the Kubernetes cluster.

Project

A project is a type of tenant used to implement resource isolation and user permission management. After a user joins a project, the user can have view or operation permissions on the resources of the project.

User

Users are created by an administrator or synchronized from a 3rd-party authentication system, and are managed by administrators. A user must join a project or be set as an administrator before having operation permissions on the platform.

Namespace

A namespace provides virtual isolation for a Kubernetes cluster. Resources in different namespaces are isolated from each other.

AccessKey

An AccessKey is an identity credential for accessing platform APIs. It has the same platform permissions as the current user, and consists of an AccessKey ID and an AccessKey Secret.