| Active Directory | A directory service that stores information about objects on the network |
| API | Application Programming Interface. Mechanisms that let software components interact using a defined set of definitions and protocols |
| Control Plane | The set of Kubernetes components responsible for managing and maintaining a container orchestration cluster. The set includes modules such as kube-apiserver, kube-scheduler, Geneve, and kube-controller-manager |
| CPU | Central processing unit |
| CRD | Custom Resource Definition — a Kubernetes resource that lets you store arbitrary data |
| CSI | Computer System Interface. A set of standards for physical connection and data transfer between computers and peripheral devices |
| CIDR | Classless Inter-Domain Routing. A prefix-based standard for representing IP addresses and routing properties |
| DHCP | Dynamic Host Configuration Protocol. A network management protocol that automates device configuration in IP networks. A DHCP server dynamically assigns an IP address and other network configuration parameters to each device so devices can communicate across IP networks |
| DN | Distinguished name — a unique or approximately unique name within a directory information tree |
| DNS | Domain Name System |
| Docker | Open-source software for automating deployment and management of applications in containerized environments |
| etcd cluster | A unified key-value configuration store for a container orchestration cluster |
| FQDN | Fully Qualified Domain Name. An unambiguous full domain name that includes all parent domain names in the DNS hierarchy |
| FTP | File Transfer Protocol. A network file transfer protocol |
| Geneve | Generic Network Virtualization Encapsulation. A tunneling and network encapsulation protocol |
| HTTP | HyperText Transfer Protocol. An application-layer hypertext protocol family for transferring arbitrary data, including HTTP, HTTP/2, and HTTPS |
| HTTPS | HyperText Transfer Protocol Secure. An HTTP extension that supports encryption for improved security |
| ICMP | Internet Control Message Protocol. Used by IP devices to inform other IP devices about network actions and errors |
| ID | Identifier. A unique identifier |
| Ingress | A module for managing external connections to a cluster |
| IP | Internet Protocol. A unique numeric identifier for a device on a TCP/IP network |
| IT | Information Technology |
| JSON | JavaScript Object Notation. A text-based data exchange format derived from JavaScript |
| Kubernetes | An extensible open-source platform for managing a cluster of containerized applications and services |
| LAN | Local Area Network |
| LDAP | Lightweight Directory Access Protocol. An application-layer protocol for accessing directory services |
| Control Plane | Control plane, the main management layer |
| Control Plane node | A node that manages the entire cluster |
| NCI | Node Config Item |
| Node.JS | An open-source software platform based on the JavaScript engine |
| NTP | Network Time Protocol. Synchronizes system clocks from desktops to servers |
| Open Container Initiative (OCI) | A standard that defines the container image format for compatibility with different container runtimes |
| oVirt | A free cross-platform virtualization management system |
| Pod | A structural unit (logical host) that groups several application containers with shared storage and network resources |
| PTR record | Pointer. A DNS record that maps an IP address to a host name |
| RAM | Random Access Memory |
| RBAC | Role-based access control. A method of regulating access to computer or network resources based on user roles |
| RDN | Relative distinguished name. The relative part of a distinguished name |
| Registry | A registry of Docker repositories |
| Root | The primary account with UID 0 in UNIX-like systems |
| S3 | Simple Storage Service. A data transfer protocol |
| S3 storage | Object storage that stores large volumes of data in raw format without hierarchy or separate directories and scales without fixed limits |
| SSH | Secure Shell. A protocol that uses encryption to secure the connection between client and server |
| SSL | Secure Sockets Layer. A cryptographic protocol for secure data transfer |
| STC | Shturval CTL initial deployment module |
| Shtil | Initial deployment module from the graphical interface |
| Sudo | Substitute user and do. A UNIX system administration program that delegates privileged resources to users with activity logging |
| TCP | Transmission Control Protocol. A core protocol in the Internet protocol suite |
| UDP | User Datagram Protocol. Lets computer applications send messages to other hosts over an IP network without establishing dedicated transmission channels first |
| UID | User ID. A positive integer that uniquely identifies a user in UNIX-like systems |
| URL | Uniform Resource Locator. A standardized system for locating electronic resources |
| VIP address | Virtual IP address |
| VMware | Server virtualization technology |
| Worker | Worker |
| Worker node | A node that runs containers |
| CPU units of measure | 1 CPU = 100% of one physical or virtual CPU core. For example, 800m = 80% of the time |
| Information security (IS) | Information security |
| Encapsulation | Combining functions and data in one structure whose internal state is hidden from the outside world |
| Information technology (IT) | Information technology |
| Cluster | Kubernetes cluster. A set of servers (nodes) running container orchestration components |
| Container | Container. A standard software unit — a runnable instance that packages application binaries with configuration files, libraries, dependencies, and runtime. Enables faster and more secure application creation and deployment than traditional coding approaches |
| Containerization | Process isolation, dependency encapsulation, and software packaging technology |
| Controller | A general term for controllers that monitor a cluster and maintain its desired state |
| Local area network (LAN) | Local area network |
| Log | Log. An event journal |
| Container image scanning module | A module that checks for vulnerabilities and malware |
| Container image | Container image. Software packaged according to the OCI standard with everything required to run an application: source code, dependencies, runtime, configuration, and more |
| I/O operations | Input/output operations |
| RAM | Random access memory |
| Container orchestration | Automation and management of the container and service lifecycle: scheduling, deployment, scaling, load balancing, availability, and container networking |
| Operating system (OS) | Operating system |
| Permanent storage | Permanent storage |
| Application programming interface (API) | Application programming interface |
| Platform, Shturval Platform™ | Shturval container orchestration management platform |
| Software | Software |
| Initial deployment software | Software used for initial deployment |
| Management cluster application functions | Management cluster application functions |
| Backup and restore | Backup and restore |