Engineering Glossary

From fundamental principles to cutting-edge practices, this glossary covers the full spectrum of software engineering terminology.

DevOps
Cloud Computing
Git
Containerization & Orchestration

Behaviour-Driven Design

Approach to software design that focuses on defining system behavior through examples and scenarios.
DevOps

Bento

Lightweight Docker-based development environments for PHP applications, simplifying local development setup.
DevOps

Berkshelf

Dependency manager for Chef cookbooks, simplifying the process of managing and versioning cookbook dependencies.
DevOps

Beta Testing

Pre-release testing phase where a sample of the intended audience tries the product to uncover any bugs or issues.
DevOps

Bitbucket

Web-based version control repository hosting service for Git and Mercurial projects, owned by Atlassian.
DevOps

Black Box Testing

Testing method where the internal structure/design of the item being tested is not known to the tester.
DevOps

Blameless Postmortem

Process of analyzing incidents or failures without assigning blame, focusing on learning and improvement.
DevOps

Blast Radius

Extent of damage or impact that could result from a failure or security breach in a system.
DevOps

Blue Green Deployment

Technique for releasing applications by shifting traffic between two identical environments running different versions.
DevOps

Blue Team

Group responsible for defending against and responding to cyber attacks in an organization.
DevOps

Bot Attack

Automated attempt by malicious actors to compromise systems or steal data using software programs (bots).
DevOps

Bot Management Tools

Solutions designed to detect, prevent, and mitigate bot-related threats to websites and applications.
DevOps

Bots

Automated software applications that run scripted tasks, often used in both beneficial and malicious contexts.
DevOps

Bottleneck

Point in a system where the flow of data or processes is constrained, limiting overall system performance.
DevOps

Bounded Context

Core concept in Domain-Driven Design, defining the limits within which a particular model is applicable.
DevOps

Branching

Creating a divergent copy of source code to develop features or fix bugs without affecting the main codebase.
DevOps

Broken Access Control

Security vulnerability where restrictions on authenticated users are not properly enforced.
DevOps

Broken Authentication

Security flaw allowing attackers to compromise passwords, keys, or session tokens to assume user identities.
DevOps

Broken Function Level Authorization

Vulnerability where an application does not restrict function access to appropriate users.
DevOps

Broken Object Level Authorization

Security issue where an application does not verify if the user has permission to access a specific object.
DevOps

Broken User Authentication

Security vulnerability where flaws in the authentication process allow unauthorized access to user accounts.
DevOps

Brooklyn

Framework for modeling, deploying, and managing distributed applications across cloud environments.
DevOps

Bucket

Container for storing objects in cloud storage services like Amazon S3 or Google Cloud Storage.
DevOps

Bug Bounty Program

Initiative offering rewards to individuals for discovering and reporting software bugs or vulnerabilities.
DevOps

Build

Process of converting source code files into standalone software artifacts that can be run on a computer.
DevOps

Build Agent

Component in a CI/CD system that executes build and test processes on behalf of the build server.
DevOps

Build Artifact Repository

Central storage location for managing and distributing software build outputs and dependencies.
DevOps

Build Automation

Process of scripting or automating the creation of compiled code and related processes.
DevOps

Build Cache

Mechanism to store and reuse the output of previous build steps to speed up subsequent builds.
DevOps

Build Pipelines

Automated processes for compiling, testing, and deploying code changes through various stages.
DevOps

Build Service

System that automates the process of compiling source code into executable programs.
DevOps

Build System

Set of tools and processes used to compile, assemble, and package software from source code.
DevOps

BuildMaster

Application release automation platform for creating and managing software delivery pipelines.
DevOps

Buildbot

Continuous integration framework written in Python, allowing automation of build, test, and release processes across multiple platforms.
DevOps

Business Acceptance

Process of verifying that a software solution meets the business requirements and is ready for use.
DevOps

Business Analytics (BA)

Practice of iterative exploration of an organization's data to gain insights and drive business planning.
DevOps

Business Intelligence (BI)

Technologies and practices for collecting, integrating, analyzing, and presenting business information.
DevOps

Business Logic Attack

Exploitation of flaws in the business logic of an application to perform unauthorized actions.
DevOps

CALMS Model

Framework for DevOps culture emphasizing Collaboration, Automation, Lean, Measurement, and Sharing.
DevOps

CASB

Cloud Access Security Broker; software that mediates between cloud service users and cloud applications.
DevOps

CD Pipeline

Continuous Delivery Pipeline; automated system for moving code changes through build, test, and deployment stages.
DevOps

CI Pipeline

Continuous Integration Pipeline; automated sequence of steps for building, testing, and validating code changes.
DevOps

CI Service

System that automates the integration of code changes from multiple contributors into a single software project.
DevOps

CI/CD (Continuous Integration and Continuous Delivery)

Continuous Integration and Continuous Delivery; practices of frequently integrating code changes and delivering to production.
DevOps

CI/CD Server

Platform that facilitates the automation of building, testing, and deploying code changes.
DevOps

CLI (Command Line Interface)

Command Line Interface; text-based interface for interacting with computer programs or operating systems.
DevOps

CMB (Cloud Message Bus)

Messaging infrastructure that enables communication between different parts of a cloud-based application.
DevOps

CPU Limit

Restriction on the amount of processing power allocated to a particular process or container.
DevOps

CRUD (Create, Read, Update and Delete)

Four basic functions of persistent storage, fundamental to database operations and RESTful API design.
DevOps

CaaS

Containers as a Service; cloud-based service that provides container orchestration and management.
DevOps

Cadence

Regular rhythm or pattern of work or processes, often used in the context of software development and release cycles.
DevOps

Canary Deployment

Technique of rolling out changes to a small subset of users before a full deployment.
DevOps

Canary Release

Gradual rollout of new features to a subset of users to test in production with reduced risk.
DevOps

Capacity Test

Performance test to determine how many users or transactions a system can handle before performance degrades.
DevOps

Capistrano

Remote server automation and deployment tool, primarily used for deploying web applications by scripting arbitrary deployment tasks.
DevOps

Certificate Authority (CA)

Trusted entity that issues digital certificates for secure communication over networks.
DevOps

CfEngine

Open-source configuration management system for managing large numbers of computers.
DevOps

Chain of Custody

Documentation of the movement and handling of evidence in security incidents or investigations.
DevOps

Change Failure Rate

Percentage of changes to production or released to users that result in degraded service or require remediation.
DevOps

Chaos Engineering

Practice of intentionally introducing failures in a system to test its resilience and identify weaknesses.
DevOps

Chaos Monkey

Tool developed by Netflix to randomly terminate instances in production to test system fault tolerance.
DevOps

Chaos Testing

Deliberate introduction of faults into a system to verify its ability to withstand turbulent conditions.
DevOps

ChatOps

Approach to managing IT operations and workflows through conversation-driven development.
DevOps

Chef

Configuration management tool that uses a pure-Ruby domain-specific language for writing system configurations.
DevOps

Chocolatey

Package manager for Windows, automating software installation, upgrade, and configuration.
DevOps

Clean Code Prinzipien

Set of principles aimed at producing readable, maintainable, and efficient code, promoting software quality and developer productivity.
DevOps

Click Fraud

Fraudulent clicks on pay-per-click advertisements to generate charges for advertisers.
DevOps

Clickjacking

Malicious technique of tricking users into clicking on hidden or disguised elements on a webpage.
DevOps

Client Side Attacks

Security threats that target vulnerabilities in web browsers or other client applications.
DevOps

Cloud Application

Software program where cloud-based and local components work together, primarily processed on remote servers.
DevOps

Cloud Automation

Use of tools and processes to reduce manual efforts in deploying and managing cloud computing workloads.
DevOps

Cloud Computing

Delivery of computing services over the internet, including servers, storage, databases, and software.
DevOps

Cloud Infrastructure

Hardware and software components required to support cloud computing delivery model.
DevOps

Cloud Infrastructure Security

Measures and controls to protect data, applications, and infrastructure associated with cloud computing.
DevOps

Cloud Management

Control and oversight of cloud computing resources, often through automated tools.
DevOps

Cloud Migration

Process of moving data, applications, or other business elements from an on-premises environment to the cloud.
DevOps

Cloud Native Computing Foundation (CNCF)

Organization promoting cloud native technologies and practices to shape the evolution of cloud computing.
DevOps

Cloud Native DevOps

Practices combining cloud native technologies with DevOps principles for faster, more flexible software delivery.
DevOps

Cloud Orchestration

Arrangement and coordination of automated tasks resulting in a consolidated process or workflow.
DevOps

Cloud Security Alliance (CSA)

Organization that defines best practices to help ensure a secure cloud computing environment.
DevOps

Cloud Security Monitoring

Continuous monitoring of cloud-based assets and services to detect security threats and vulnerabilities.
DevOps

Cloud Security Posture Management

Continuous monitoring of cloud infrastructure to identify misconfigurations and compliance risks.
DevOps

Cloud-native

Designed to take full advantage of cloud computing frameworks, beyond simple rehosting in the cloud.
DevOps

Cloud-native Security

Security practices and tools designed specifically for cloud-native applications and infrastructure.
DevOps

CloudWatch

Amazon Web Services' monitoring and observability service for cloud resources and applications.
DevOps

Code All Your Resources

Practice of managing all aspects of infrastructure and operations through code, enabling version control and automation.
DevOps

Code Dependencies

External libraries, modules, or packages that a software project relies on to function properly.
DevOps

Code Injection

Security vulnerability where an attacker inserts malicious code into a vulnerable application.
DevOps

Code Promotion

Process of moving code through various stages of development, testing, and deployment.
DevOps

Code Signing

Process of digitally signing executables and scripts to confirm the software author and guarantee it hasn't been altered.
DevOps

Code-first Workflow

Development approach where code is written before database schemas or other structures are defined.
DevOps

Coding Standards

Set of guidelines for programming style and practices within a project or organization.
DevOps

Cognitive Load

Mental effort required to learn new information or complete tasks, important in user experience design and learning theory.
DevOps

Collectd

System statistics collection daemon that collects, transfers, and stores performance data of computers and network equipment.
DevOps

Common Vulnerabilities and Exposures (CVE)

List of publicly disclosed cybersecurity vulnerabilities, providing a standardized identifier for known issues.
DevOps

Common Weakness Enumeration (CWE)

Comprehensive list of common software and hardware weakness types, serving as a common language for describing security vulnerabilities.
DevOps

Complex-Adaptive System (CAS)

System of interconnected components that can adapt and self-organize in response to changes.
DevOps

Complex-Adaptive Systems

Systems of interconnected components that can adapt and evolve in response to changes in their environment.
DevOps

Compliance

Adherence to laws, regulations, guidelines, and specifications relevant to a business.
DevOps

Compliance Level

Degree to which an organization meets regulatory or industry-specific requirements.
DevOps
stash entry

stash entry

A single set of stashed changes in Git, which can be reapplied later to the working directory.
status checks

status checks

Automated tests or processes that run when changes are proposed in a Git repository, ensuring code quality and compatibility.
subscription

subscription

Notifications or updates a user receives about activity in Git repositories they're interested in or contributing to.
superproject

superproject

The main Git repository that contains submodules, managing references to specific versions of nested repositories.
symref

symref

A symbolic reference in Git that points to another reference, most commonly used for HEAD pointing to the current branch.
tag object

tag object

A Git object containing metadata about a tag, including the tagger, date, and optional message.
team

team

A group of users on a Git platform with shared access permissions to repositories within an organization.
team maintainer

team maintainer

A user with administrative privileges for managing a team's membership and access rights in a Git organization.
timeline

timeline

A chronological display of events and activities in a Git repository or user profile on hosting platforms.
topic branch

topic branch

A short-lived Git branch created to develop a specific feature or fix a particular issue.
topics

topics

Keywords or categories assigned to Git repositories to help users discover related projects on hosting platforms.
traffic graph

traffic graph

A visual representation of visitor activity and clone statistics for a Git repository on hosting platforms.
transfer

transfer

The process of moving Git objects between repositories during push, fetch, or clone operations.
tree

tree

A Git object representing a directory structure, containing references to blobs (files) and other trees (subdirectories).
tree object

tree object

A Git object that stores the hierarchy of files and directories in a repository at a specific point in time.
tree-ish (also treeish)

tree-ish (also treeish)

A Git term referring to an object that resolves to a tree, such as a commit, tag, or tree.
unborn

unborn

A state of a Git branch that has no commits yet, typically seen when initializing a new repository.
unmerged index

unmerged index

The state of the Git index containing conflicting changes from different branches during a merge operation.
unreachable object

unreachable object

A Git object not accessible from any reference, potentially subject to garbage collection if not recovered.
upstream branch

upstream branch

The remote branch that a local branch is set to track, used as a reference for pull and push operations.
user

user

An individual account on a Git platform, associated with personal repositories and contributions.
user-to-server request

user-to-server request

An authenticated request from a Git client to a server, typically for operations like push or fetch.
username

username

The unique identifier for a user account on Git platforms, used for authentication and mention notifications.
visible team

visible team

A team in a Git organization that is visible to all members of the organization, as opposed to secret teams.
watch

watch

A feature allowing users to receive notifications about activity in Git repositories they're interested in.
watching notifications

watching notifications

Alerts received for all notable events in a watched Git repository, including issues, pull requests, and releases.
web notifications

web notifications

Alerts displayed on Git platforms' web interfaces, notifying users of relevant activity or mentions.
working area

working area

The directory on your local machine where you modify files before staging and committing them in Git.
working tree

working tree

The set of files and directories in your project that are currently checked out and available for editing.
worktree

worktree

A Git feature allowing multiple working directories to be associated with a single repository.
write access

write access

Permission to make changes to a Git repository, including pushing commits and modifying branches.

Progressive Delivery

Technique for gradually rolling out new features to subsets of users in cloud applications.

Pub/Sub Messaging

Asynchronous communication pattern for decoupled microservices in cloud architectures.

Pulumi

Infrastructure-as-Code tool for deploying and managing cloud resources using programming languages.

Quantum Annealing

Quantum computing technique for solving optimization problems in cloud environments.

Quantum Circuit Simulation

Cloud-based emulation of quantum circuits for algorithm development and testing.

Quantum Cloud API

Interface for accessing and controlling quantum computing resources in the cloud.

Quantum Computing as a Service

Cloud-based platforms offering access to quantum computing resources and algorithms.

Quantum Databases

Experimental database systems leveraging quantum principles for enhanced performance in the cloud.

Quantum Error Correction

Techniques for mitigating errors in quantum computations performed in cloud environments.

Quantum Internet Services

Experimental cloud services utilizing quantum communication for enhanced security and speed.

Quantum Key Distribution

Secure communication method using quantum mechanics principles in cloud environments.

Quantum Key Distribution (QKD) Networks

Infrastructure for ultra-secure data transmission using quantum principles in cloud systems.

Quantum Key Distribution Networks

Systems for ultra-secure data transmission using quantum mechanics in cloud environments.

Quantum Machine Learning

Applying quantum computing techniques to machine learning tasks in cloud environments.

Quantum Machine Learning Services

Cloud-based platforms offering quantum-enhanced machine learning algorithms and resources.

Quantum Optimization

Using quantum computing to solve complex optimization problems in cloud environments.

Quantum Programming Frameworks

Tools and libraries for developing quantum algorithms in cloud computing environments.

Quantum Resource Estimation

Assessing quantum computational requirements for algorithms in cloud environments.

Quantum Software Development Kit (SDK)

Tools for creating and testing quantum algorithms in cloud computing platforms, enabling quantum application development.

Quantum Supremacy

Demonstrating quantum computers' ability to outperform classical computers in specific tasks.

Quantum Volume

Metric for measuring the capability and performance of quantum computing systems in the cloud.

Quantum as a Service (QaaS)

Cloud-based access to quantum computing resources and algorithms, enabling exploration of quantum applications.

Quantum-Classical Hybrid Algorithms

Algorithms combining quantum and classical computing techniques for enhanced problem-solving in the cloud.

Quantum-Inspired Algorithms

Classical algorithms that emulate quantum computing concepts to solve problems efficiently in the cloud.

Quantum-Inspired Annealing

Optimization technique inspired by quantum annealing, used for complex problems in cloud computing.

Quantum-Inspired Anomaly Detection

Algorithms based on quantum concepts for identifying unusual patterns in cloud data.

Quantum-Inspired Cryptography

Encryption methods inspired by quantum principles, designed for use in classical cloud systems.

Quantum-Inspired Data Encoding

Techniques for data representation inspired by quantum states, used in classical cloud computing.

Quantum-Inspired Evolutionary Algorithms

Optimization methods combining evolutionary principles with quantum concepts in cloud environments.

Quantum-Inspired Feature Maps

Data transformation techniques based on quantum principles for machine learning in the cloud.

Quantum-Inspired Financial Modeling

Applying quantum-like algorithms to financial analysis and prediction in cloud environments.

Quantum-Inspired Generative Models

AI models for data generation based on quantum computing principles, used in classical cloud systems.

Quantum-Inspired Machine Learning

Classical ML algorithms incorporating quantum computing concepts for improved performance in the cloud.

Quantum-Inspired Natural Language Processing

NLP techniques leveraging quantum computing principles in classical cloud environments.

Quantum-Inspired Neural Networks

AI models mimicking both neural and quantum systems for enhanced learning in cloud computing.

Quantum-Inspired Optimization Algorithms

Classical algorithms using quantum-like approaches for solving complex optimization problems in the cloud.

Quantum-Inspired Reinforcement Learning

RL techniques incorporating quantum principles for improved decision-making in cloud environments.

Quantum-Inspired Sampling

Data sampling methods based on quantum principles, used in classical cloud computing tasks.

Quantum-Inspired Tensor Networks

Data structures and algorithms inspired by quantum tensor networks, used in classical cloud computing.

Quantum-Resistant Cryptography

Encryption methods designed to withstand attacks from future quantum computers in cloud systems.

Quantum-Resistant Databases

Database systems designed to maintain security against potential quantum computer attacks in the cloud.

Quantum-Resistant Hardware Security Modules

Cloud-based HSMs designed to resist attacks from both classical and quantum computers, ensuring long-term data protection.

Quantum-Safe Cryptography

Encryption techniques designed to be secure against both quantum and classical attacks in cloud environments.

Quantum-inspired AI Algorithms

Classical algorithms mimicking quantum principles to improve AI performance in cloud environments.

Query Optimization

Techniques for improving the efficiency and speed of database queries in cloud environments.

RI Utilization and Coverage

Metrics for assessing the usage and financial impact of Reserved Instances in cloud environments.

Re-platforming

Process of moving applications to a new cloud platform, often involving some code modifications.

Reactive Programming in the Cloud

Development paradigm for building responsive, resilient applications in cloud environments.

Read Replica

Copy of a database that allows read-only queries, improving performance and scalability in cloud environments.

Read Replicas

Multiple copies of a database for distributing read operations, enhancing performance in cloud systems.

Real-Time Analytics

Instantaneous processing and analysis of data as it's generated in cloud environments.

Real-Time Analytics Pipelines

Systems for continuous data processing and analysis in cloud environments with minimal latency.

Real-Time Data Harmonization

Process of standardizing diverse data formats in real-time within cloud environments.

Real-Time Data Synchronization

Ensuring immediate consistency of data across multiple cloud systems or locations.

Real-time Business Activity Monitoring

Continuous tracking and analysis of business processes in cloud-based systems, enabling rapid decision-making.

Real-time Data Integration

Combining data from multiple sources instantly in cloud-based systems, enabling up-to-date analytics and decision-making.

Real-time Regulatory Reporting

Instantaneous generation and submission of compliance reports in cloud environments.

Recommendation Systems

AI-driven tools suggesting items or actions to users based on data analysis in the cloud.

Regulatory Reporting

Generation and submission of compliance-related reports using cloud-based tools and data.

Regulatory Technology (RegTech) as a Service

Cloud-based solutions for managing regulatory compliance and reporting, streamlining governance processes.

Reinforcement Learning

AI technique where agents learn optimal behaviors through trial and error in cloud environments.

Reinforcement Learning Environments

Simulated or real-world scenarios for training AI agents in cloud-based systems.

Relational Database Service (e.g., Amazon RDS, Azure SQL Database)

Managed cloud service for deploying, operating, and scaling relational databases.

Renewable Energy Credits (RECs)

Certificates representing clean energy used to power cloud data centers, promoting sustainable cloud operations.

Renewable Energy Credits (RECs) Management

Tracking and optimizing the use of clean energy certificates in cloud operations.

Reproducible Research Platforms

Cloud-based environments ensuring scientific experiments can be replicated precisely.

Reserved Capacity Management

Optimizing the use of pre-purchased cloud resources to maximize cost savings and ensure resource availability.

Reserved Instance Management

Administering pre-purchased cloud instances to optimize costs and resource allocation.

Reserved Instance Planning

Strategizing the purchase of discounted cloud instances for long-term use to reduce costs.

Reserved Instances

Pre-purchased cloud compute capacity offered at a discount for a committed term.

Resource Graph

Visual representation of cloud resources and their relationships for better management and insight.

Resource Organization

Structuring and categorizing cloud resources for efficient management and access control.

Resource Quotas and Limits

Restrictions on the amount or type of cloud resources that can be consumed by a user or account.

Resource Tagging

Assigning metadata to cloud resources for better organization, management, and cost allocation.

Resource Tagging for Billing

Using metadata tags to track and allocate cloud costs across different projects or departments.

Retention Policies

Rules determining how long data is kept in cloud storage before being deleted or archived.

Right to be Forgotten

Data privacy principle allowing individuals to request deletion of their personal data from cloud systems.

Rightsizing

Adjusting cloud resource allocations to match actual usage, optimizing performance and cost.

Robot Fleet Management

Cloud-based systems for coordinating and monitoring multiple robots in industrial or commercial settings.

Robot as a Service (RaaS)

Cloud-based platform for remotely operating and managing robotic systems, enabling scalable robotics applications.

Robotic Process Automation (RPA) in the Cloud

Using cloud-based software robots to automate repetitive tasks and workflows, improving efficiency and accuracy.

Robotic Teleoperation via Cloud

Controlling robots remotely using cloud infrastructure for communication and processing.

Root Cause Analysis Automation

AI-driven tools for identifying the source of issues in cloud systems, speeding up troubleshooting and resolution.

Route Table

Configuration defining network traffic paths between subnets and gateways in cloud environments.

Runtime Application Self-Protection (RASP)

Security technology that detects and prevents attacks on cloud applications in real-time.

SOC 2 Compliance

Adherence to security and privacy standards for cloud service providers handling customer data.

SSL/TLS Certificates

Digital certificates ensuring secure, encrypted connections to cloud services and applications.

Savings Plans

Flexible pricing model offering lower prices on cloud compute usage in exchange for a commitment.

Secrets Management

Tools for securely storing, accessing, and managing sensitive information in cloud environments.

Secure Multi-Party Computation (SMPC) Platforms

Cloud services enabling collaborative computation while keeping individual inputs private.

Security Chaos Engineering

Proactively testing cloud system resilience by simulating security incidents and failures.

Security Group

Virtual firewall for controlling inbound and outbound traffic to cloud resources.

Security Groups

Virtual firewalls controlling inbound and outbound traffic for cloud instances within defined security rules.

Security Orchestration, Automation and Response (SOAR)

Platforms integrating security tools and automating incident response in the cloud.

Self-Driving Databases

Cloud databases using AI to automate administration, optimization, and security tasks.

Self-Service Analytics

Tools allowing non-technical users to perform data analysis in cloud environments without IT assistance.

Semantic Interoperability Frameworks

Standards enabling meaningful data exchange between different cloud systems and services.

Serverless AI

AI services that automatically scale and manage underlying infrastructure in cloud environments.

Serverless Application Model (SAM)

Framework for building and deploying serverless applications in cloud environments.

Serverless Computing (e.g., AWS Lambda, Azure Functions)

Cloud execution model where providers manage infrastructure, automatically scaling resources as needed.

5G MEC Integration

Integration of 5G mobile edge computing with container platforms for low-latency applications and services at network edges.

AIOps for Container Environments

Application of AI and machine learning for automated operations, monitoring, and management of containerized environments.

API Deprecation Policy

Guidelines for phasing out older API versions in Kubernetes, ensuring smooth transitions for users.

API Extensions

Mechanisms to extend the Kubernetes API with custom resources and functionalities, enhancing platform capabilities.

API Gateway Pattern

Containerized service that acts as a single entry point for all client requests to a microservices architecture.

API Server

Core component of Kubernetes that exposes the cluster's API and handles all administrative operations.

API Server Aggregation

Kubernetes feature allowing the API server to be extended with additional APIs without modifying core Kubernetes code.

API-First Development

Approach prioritizing API design before implementation, crucial for developing scalable containerized microservices.

AWS Fargate

Serverless compute engine for containers, allowing you to run containers without managing the underlying infrastructure.

Adapter Pattern

Design pattern in containerized microservices that wraps a service's interface to make it compatible with other services.

Admission Controllers

Plugins that intercept requests to the Kubernetes API server before object persistence, enforcing policies or modifying objects.

Admission Controllers for Security

Admission controllers specifically focused on enforcing security policies and validating security-related configurations.

Admission Webhooks

HTTP callbacks that receive admission requests and can modify or validate objects before they are persisted.

Admission Webhooks in Operators

Use of admission webhooks within Kubernetes operators to enforce custom policies or modify resources.

Advanced Audit

Kubernetes feature providing detailed logging of all requests processed by the API server for security and compliance.

Aggregated API Servers

Extension of the Kubernetes API server to include custom resources and functionalities without modifying core Kubernetes.

Aggregated ClusterRoles

Combination of multiple ClusterRoles into a single role, simplifying RBAC management in Kubernetes.

Air-gapped Registries

Container registries isolated from public networks, used in secure or restricted environments.

Akri

Open-source project for exposing heterogeneous leaf devices as resources in Kubernetes clusters.

Alertmanager Configuration

Setup and management of Prometheus Alertmanager for handling alerts from monitoring systems.

Amazon Elastic Container Registry (ECR)

Fully managed Docker container registry provided by AWS for storing, managing, and deploying container images.

Ambassador Pattern

Microservices design pattern where a dedicated service acts as an API gateway for other services.

Ambient Mesh

Service mesh implementation that doesn't require sidecars, reducing resource overhead and simplifying deployment.

Anchore Engine for Image Scanning

Open-source tool for deep inspection of container images, including vulnerability scanning and policy enforcement.

Ansible-based Operators

Kubernetes operators implemented using Ansible for automating application lifecycle management.

Antrea Network Policies

Network policies specific to the Antrea CNI plugin, offering fine-grained control over pod-to-pod communication.

Antrea for Open vSwitch-based Networking

Kubernetes networking solution using Open vSwitch for improved performance and advanced networking features.

Apache OpenWhisk

Open-source serverless platform that executes functions in response to events or direct invocations.

AppArmor Profiles

Security profiles for Linux that restrict program capabilities, enhancing container isolation and security.

Application-level Logging

Logging implemented within applications, providing detailed insights into application behavior and performance.

Aqua Security

Platform providing security and compliance for container-based and cloud-native applications throughout their lifecycle.

Aqua Security Platform

Comprehensive security solution for containerized and cloud-native environments, offering vulnerability management and runtime protection.

Argo CD

GitOps continuous delivery tool for Kubernetes, automating application deployment and lifecycle management.

Argo Rollouts

Kubernetes controller for advanced deployment strategies like canary and blue-green deployments.

ArgoCD

Declarative GitOps tool for Kubernetes, automating application deployment and synchronization with Git repositories.

Artifact Management

Process of storing, organizing, and managing container images and related artifacts in container registries.

Athenz for Fine-grained Access Control

Open-source platform for fine-grained access control and authentication in distributed systems.

Attribute-Based Access Control (ABAC)

Access control paradigm where authorization decisions are based on attributes of users, resources, and environment.

Audit Annotations

Additional metadata added to Kubernetes audit events for enhanced context and analysis, improving audit trails.

Audit Backends

Components responsible for processing and storing Kubernetes audit logs, supporting various storage and analysis options.

Audit Events

Records of requests and activities within a Kubernetes cluster, used for security monitoring and compliance.

Audit Levels

Configurable detail levels for Kubernetes audit logs, ranging from metadata-only to full request and response details.

Audit Logging

Process of recording API server requests and responses for security, troubleshooting, and compliance purposes.

Audit Logs

Detailed records of activities and operations within a Kubernetes cluster, used for security and compliance monitoring.

Audit Policy

Configuration defining which events should be recorded in Kubernetes audit logs and at what level of detail.

Audit Profile

Predefined set of audit policy rules for common use cases in Kubernetes, simplifying audit configuration.

Audit Stages

Different phases of request processing where audit events can be generated in Kubernetes, providing comprehensive auditing.

Audit Webhook Configuration

Setup for sending Kubernetes audit events to external webhook endpoints for processing or analysis.

Auditing

Process of systematically recording and examining activities within a Kubernetes cluster for security and compliance purposes.

Authenticating Proxy

Intermediary service that handles authentication before forwarding requests to the Kubernetes API server.

Authentication Modules

Pluggable components in container orchestration platforms for verifying user identities using various methods.

Authorization Policies

Rules defining access permissions for users and services in container orchestration platforms.

Azure Container Instances

Serverless container hosting service in Azure, offering rapid deployment of containers without cluster management.

Azure Container Registry

Managed Docker registry service for storing and managing container images in Azure cloud environments.

BGP (Border Gateway Protocol) in Containers

Implementation of Border Gateway Protocol within containerized network environments for advanced routing.

BGP in Container Networks

In container networks, BGP (Border Gateway Protocol) manages routing information between containers and external networks for efficient traffic routing.

Backend for Frontend (BFF) Pattern

Microservices design pattern where a dedicated service acts as an API gateway for specific frontend needs.

Backup and Restore

Processes for preserving and recovering container data and configurations in orchestration platforms.

Base Image

Foundation Docker image upon which other images are built, containing core OS and runtime components.

Base Image Selection

Process of choosing appropriate foundation images for container builds, balancing size, security, and functionality.

Best Effort QoS

Kubernetes quality of service class for pods with no resource guarantees, scheduled when resources are available.

Blue-Green Deployments

Deployment strategy using two identical environments to minimize downtime and risk during updates.

Bootstrap Tokens

Temporary tokens used for secure cluster initialization and node joining in Kubernetes, simplifying cluster setup.

Bottlerocket OS

Minimalist Linux-based operating system optimized for running containers in cloud environments.

BuildKit

Advanced container image building toolkit offering improved performance and caching capabilities.

BuildKit for Advanced Image Building

Use of BuildKit for efficient, concurrent, and cache-optimized container image creation, improving build performance.

Bulkhead Pattern

Isolation technique in microservices to contain failures and prevent system-wide cascading failures.

Bulkhead Pattern in Microservices

The Bulkhead Pattern in microservices isolates failures by dividing services into separate compartments, preventing issues in one from affecting others.

Burstable QoS

Kubernetes quality of service class for pods that can use more resources than requested when available.

CIS Benchmarks for Containers

Security configuration guidelines for deploying containers securely in various environments.

CNI Plugin Chaining

Technique of using multiple Container Network Interface plugins together for advanced networking capabilities.

CPU Manager

Kubernetes feature for fine-grained CPU resource management and allocation to containers, optimizing performance.

CPU Throttling

Technique to limit CPU usage of containers to prevent resource monopolization and ensure fair allocation.

CQRS (Command Query Responsibility Segregation)

Architectural pattern separating read and write operations in distributed systems, often used in microservices.

CQRS (Command Query Responsibility Segregation) Pattern

Architectural pattern separating read and write operations in distributed systems, often used in microservices.

CRI (Container Runtime Interface) Specification

Standard interface between container runtimes and Kubernetes, allowing pluggable runtime implementations.

CRI Image Management

Functionality within CRI for pulling, inspecting, and removing container images, standardizing image operations.

CRI Logging

Standardized logging interface for container runtimes implementing the Container Runtime Interface.

CRI Metrics

Performance and resource usage data exposed by container runtimes adhering to the CRI specification.

CRI Runtime Class

Kubernetes feature allowing selection of different runtime configurations for containers, enabling specialized runtimes.

CRI Socket

Unix domain socket used for communication between Kubelet and the CRI-compatible container runtime.

CRI Validation Testing

Process of verifying that a container runtime correctly implements the CRI specification, ensuring compatibility.

CRI-O

Lightweight container runtime specifically designed for Kubernetes, implementing the CRI specification.

CRI-O Internals

Core components and architecture of the CRI-O container runtime, including its interaction with Kubernetes.

CRI-O as Container Runtime

Use of CRI-O, a lightweight container runtime, as the primary runtime in a Kubernetes cluster.

CSI Controller Plugin

Component of CSI responsible for volume provisioning and attachment operations in container orchestration systems.

CSI Drivers

Plugins implementing the Container Storage Interface for various storage systems in Kubernetes.

CSI Ephemeral Volumes

Short-lived volumes in Kubernetes, created and deleted alongside a pod using CSI drivers, for temporary storage.

CSI Migration

Process of transitioning from in-tree volume plugins to CSI drivers in Kubernetes, improving storage extensibility.

CSI Node Plugin

Component of CSI responsible for mounting volumes and making them available to containers.

CSI Topology

Feature allowing storage provisioning based on topology constraints in Kubernetes, optimizing data locality.

Cache-Aside Pattern

Caching strategy where the application checks the cache before retrieving data from the main data store.

Caching Strategies for Containers

Techniques for implementing and managing caches in containerized applications for improved performance.

Calico

Open-source networking and network security solution for containers, providing a rich set of security policies.

Calico eBPF Datapath

High-performance networking mode in Calico using extended Berkeley Packet Filter for packet processing.

Canary Deployments

Technique of releasing new versions to a subset of users or servers to minimize risk and gather feedback.

Capabilities

Fine-grained privileges that can be assigned to containers, enhancing security by limiting root-level access.

Capability Controls

Mechanisms for managing and restricting Linux capabilities assigned to containers for improved security.

Categories

Groupings or classifications of container-related resources or components for easier management and discovery.

Ceph RBD

Ceph's block storage system, often used for persistent volumes in container orchestration platforms.