Glosarium

Glosarium ini dimaksudkan sebagai daftar terminologi Kubernetes yang komprehensif dan terstandardisasi. Glosarium ini mencakup istilah-istilah teknis yang spesifik digunakan di Kubernetes, serta beberapa istilah umum untuk membantu memberikan konteks.

Klik pada [+] indikator di bawah ini untuk mendapatkan penjelasan yang lebih lengkap untuk istilah tertentu.

• Add-ons

  Resources that extend the functionality of Kubernetes.

  [+]

  Installing addons explains more about using add-ons with your cluster, and lists some popular add-ons.

• Admission Controller

  A piece of code that intercepts requests to the Kubernetes API server prior to persistence of the object.

  [+]

  Admission controllers are configurable for the Kubernetes API server and may be "validating", "mutating", or both. Any admission controller may reject the request. Mutating controllers may modify the objects they admit; validating controllers may not.

  • Admission controllers in the Kubernetes documentation
• Affinity

  In Kubernetes, affinity is a set of rules that give hints to the scheduler about where to place pods.

  [+]

  There are two kinds of affinity:

  • node affinity
  • pod-to-pod affinity

  The rules are defined using the Kubernetes labels, and selectors specified in pods, and they can be either required or preferred, depending on how strictly you want the scheduler to enforce them.

• Aggregation Layer

  The aggregation layer lets you install additional Kubernetes-style APIs in your cluster.

  [+]

  When you've configured the Kubernetes API Server to support additional APIs, you can add APIService objects to "claim" a URL path in the Kubernetes API.

• Anotasi

  Suatu pasangan kunci-nilai (key-value) yang digunakan untuk melampirkan metadata nonidentifikasi arbitrer ke objek.

  [+]

  Metadata dalam anotasi bisa berukuran kecil atau besar, terstruktur atau tidak terstruktur, dan dapat menyertakan karakter yang tidak dibolehkan pada label. Klien seperti utilitas dan pustaka dapat mengambil metadata ini.

• Antarmuka Runtime Container
  Dikenal juga sebagai: Container Runtime Interface (CRI)
  

  Sebuah API untuk mengintegrasikan runtime Container dengan kubelet.

  [+]

  Untuk informasi lebih lanjut, lihat API dan spesifikasi CRI.

• API resource
  Dikenal juga sebagai: Resource
  

  An entity in the Kubernetes type system, corresponding to an endpoint on the Kubernetes API. A resource typically represents an object. Some resources represent an operation on other objects, such as a permission check.

  [+]

  Each resource represents an HTTP endpoint (URI) on the Kubernetes API server, defining the schema for the objects or operations on that resource.

• API-initiated eviction

  API-initiated eviction is the process by which you use the Eviction API to create an Eviction object that triggers graceful pod termination.

  [+]

  You can request eviction either by directly calling the Eviction API using a client of the kube-apiserver, like the kubectl drain command. When an Eviction object is created, the API server terminates the Pod.

  API-initiated evictions respect your configured PodDisruptionBudgets and terminationGracePeriodSeconds.

  API-initiated eviction is not the same as node-pressure eviction.

  • See API-initiated eviction for more information.
• Aplikasi
  Lapisan (layer) tempat menjalankan berbagai aplikasi dalam Container. [+]

  Lapisan (layer) tempat menjalankan berbagai aplikasi dalam Container.

• App Container

  Application containers (or app containers) are the containers in a pod that are started after any init containers have completed.

  [+]

  An init container lets you separate initialization details that are important for the overall workload, and that don't need to keep running once the application container has started. If a pod doesn't have any init containers configured, all the containers in that pod are app containers.

• Application Architect

  A person responsible for the high-level design of an application.

  [+]

  An architect ensures that an app's implementation allows it to interact with its surrounding components in a scalable, maintainable way. Surrounding components include databases, logging infrastructure, and other microservices.

• Application Developer

  A person who writes an application that runs in a Kubernetes cluster.

  [+]

  An application developer focuses on one part of an application. The scale of their focus may vary significantly in size.

• Approver

  A person who can review and approve Kubernetes code contributions.

  [+]

  While code review is focused on code quality and correctness, approval is focused on the holistic acceptance of a contribution. Holistic acceptance includes backwards/forwards compatibility, adhering to API and flag conventions, subtle performance and correctness issues, interactions with other parts of the system, and others. Approver status is scoped to a part of the codebase. Approvers were previously referred to as maintainers.

• cAdvisor

  cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers.

  [+]

  It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container it keeps resource isolation parameters, historical resource usage, histograms of complete historical resource usage and network statistics. This data is exported by container and machine-wide.

• Certificate

  A cryptographically secure file used to validate access to the Kubernetes cluster.

  [+]

  Certificates enable applications within a Kubernetes cluster to access the Kubernetes API securely. Certificates validate that clients are allowed to access the API.

• cgroup (control group)
  Dikenal juga sebagai: grup kontrol
  

  Suatu grup proses Linux dengan isolasi, penghitungan, dan pembatasan sumber daya opsional.

  [+]

  cgroup merupakan fitur kernel Linux yang membatasi, menghitung, dan mengisolasi penggunaan sumber daya (CPU, memori, I/O diska, jaringan) untuk sekumpulan proses.

• CIDR

  CIDR (Classless Inter-Domain Routing) is a notation for describing blocks of IP addresses and is used heavily in various networking configurations.

  [+]

  In the context of Kubernetes, each Node is assigned a range of IP addresses through the start address and a subnet mask using CIDR. This allows Nodes to assign each Pod a unique IP address. Although originally a concept for IPv4, CIDR has also been expanded to include IPv6.

• CLA (Contributor License Agreement)

  Terms under which a contributor grants a license to an open source project for their contributions.

  [+]

  CLAs help resolve legal disputes involving contributed material and intellectual property (IP).

• Cloud Controller Manager

  A Kubernetes control plane component that embeds cloud-specific control logic. The cloud controller manager lets you link your cluster into your cloud provider's API, and separates out the components that interact with that cloud platform from components that only interact with your cluster.

  [+]

  By decoupling the interoperability logic between Kubernetes and the underlying cloud infrastructure, the cloud-controller-manager component enables cloud providers to release features at a different pace compared to the main Kubernetes project.

• Cloud Native Computing Foundation (CNCF)

  The Cloud Native Computing Foundation (CNCF) builds sustainable ecosystems and fosters a community around projects that orchestrate containers as part of a microservices architecture.

  Kubernetes is a CNCF project.

  [+]

  The CNCF is a sub-foundation of the Linux Foundation. Its mission is to make cloud native computing ubiquitous.

• Cloud Provider
  Dikenal juga sebagai: Cloud Service Provider
  

  A business or other organization that offers a cloud computing platform.

  [+]

  Cloud providers, sometimes called Cloud Service Providers (CSPs), offer cloud computing platforms or services.

  Many cloud providers offer managed infrastructure (also called Infrastructure as a Service or IaaS). With managed infrastructure the cloud provider is responsible for servers, storage, and networking while you manage layers on top of that such as running a Kubernetes cluster.

  You can also find Kubernetes as a managed service; sometimes called Platform as a Service, or PaaS. With managed Kubernetes, your cloud provider is responsible for the Kubernetes control plane as well as the nodes and the infrastructure they rely on: networking, storage, and possibly other elements such as load balancers.

• Cluster Architect

  A person who designs infrastructure that involves one or more Kubernetes clusters.

  [+]

  Cluster architects are concerned with best practices for distributed systems, for example: high availability and security.

• Cluster Infrastructure
  The infrastructure layer provides and maintains VMs, networking, security groups and others. [+]

  The infrastructure layer provides and maintains VMs, networking, security groups and others.

• Cluster Operations

  The work involved in managing a Kubernetes cluster: managing day-to-day operations, and co-ordinating upgrades.

  [+]

  Examples of cluster operations work include: deploying new Nodes to scale the cluster; performing software upgrades; implementing security controls; adding or removing storage; configuring cluster networking; managing cluster-wide observability; and responding to events.

• Code Contributor

  A person who develops and contributes code to the Kubernetes open source codebase.

  [+]

  They are also an active community member who participates in one or more Special Interest Groups (SIGs).

• ConfigMap

  Sebuah objek API yang digunakan untuk menyimpan data nonkonfidensial sebagai pasangan kunci-nilai (key-value). Pod dapat menggunakan ConfigMap sebagai variabel lingkungan, argumen baris perintah (command-line), atau berkas konfigurasi dalam sebuah volume.

  [+]

  Sebuah ConfigMap memungkinkanmu untuk memisahkan konfigurasi lingkungan tertentu dari image Container, sehingga aplikasimu menjadi lebih portabel.

• Container

  Sebuah image yang ringan dan dapat dijalankan yang mengandung perangkat lunak and segala dependensi yang dibutuhkan.

  [+]

  Container memisahkan aplikasi dari infrastruktur hos yang digunakan untuk mempermudah penggelaran pada berbagai lingkungan cloud atau OS, dan juga untuk mempermudah penyekalaan.

• Container Inisialisasi
  Dikenal juga sebagai: Init Container
  

  Satu atau beberapa Container inisialisasi yang harus berjalan hingga selesai sebelum Container aplikasi apapun dijalankan.

  [+]

  Container inisialisasi mirip seperti Container aplikasi biasa, dengan satu perbedaan: Container inisialisasi harus berjalan sampai selesai sebelum Container aplikasi lainnya dijalankan. Container inisialisasi dijalankan secara seri: setiap Container inisialisasi harus berjalan sampai selesai sebelum Container inisialisasi berikutnya dijalankan.

• Container Lifecycle Hooks

  The lifecycle hooks expose events in the Container management lifecycle and let the user run code when the events occur.

  [+]

  Two hooks are exposed to Containers: PostStart which executes immediately after a container is created and PreStop which is blocking and is called immediately before a container is terminated.

• Container network interface (CNI)

  Container network interface (CNI) plugins are a type of Network plugin that adheres to the appc/CNI specification.

  [+]

  • For information on Kubernetes and CNI, see Network Plugins.
• Container Sementara
  Dikenal juga sebagai: Ephemeral Container
  

  Jenis tipe Container yang dapat kamu jalankan sementara di dalam sebuah Pod.

  [+]

  Jika kamu ingin menyelidiki sebuah Pod yang bermasalah, kamu dapat menambahkan Container sementara ke Pod tersebut dan menjalankan diagnosis. Container sementara tidak memiliki jaminan sumber daya atau penjadwalan, dan kamu tidak boleh menggunakannya untuk menjalankan bagian mana pun dari beban kerja.

• Container Storage Interface (CSI)

  The Container Storage Interface (CSI) defines a standard interface to expose storage systems to containers.

  [+]

  CSI allows vendors to create custom storage plugins for Kubernetes without adding them to the Kubernetes repository (out-of-tree plugins). To use a CSI driver from a storage provider, you must first deploy it to your cluster. You will then be able to create a Storage Class that uses that CSI driver.

  • CSI in the Kubernetes documentation
  • List of available CSI drivers
• containerd

  A container runtime with an emphasis on simplicity, robustness and portability

  [+]

  containerd is a container runtime that runs as a daemon on Linux or Windows. containerd takes care of fetching and storing container images, executing containers, providing network access, and more.

• Contributor

  Seseorang yang menyumbangkan kode, dokumentasi, atau waktu mereka untuk membantu proyek atau komunitas Kubernetes.

  [+]

  Kontribusi termasuk pull request (PR), masalah, umpan balik, partisipasi special interest groups (SIG), atau mengorganisir acara komunitas.

• Control Plane

  Merupakan lapisan orkestrasi Container yang mengekspos API dan antarmuka untuk mendefinisikan, menggelar, dan mengelola siklus hidup suatu Container.

  [+]

  Lapisan ini terdiri dari beragam komponen, seperti (tapi tidak terbatas pada):

  • etcd
  • Server API
  • Penjadwal
  • Manajer Pengontrol
  • Manajer Pengontrol Cloud

  Komponen-komponen tersebut dapat dijalankan sebagai layanan sistem operasi tradisional (daemon) atau sebagai Container. Hos yang menjalankan komponen-komponen tersebut secara historis dikenal sebagai master.

• CRI-O

  A tool that lets you use OCI container runtimes with Kubernetes CRI.

  [+]

  CRI-O is an implementation of the Container Runtime Interface (CRI) to enable using container runtimes that are compatible with the Open Container Initiative (OCI) runtime spec.

  Deploying CRI-O allows Kubernetes to use any OCI-compliant runtime as the container runtime for running Pods, and to fetch OCI container images from remote registries.

• CronJob

  Manages a Job that runs on a periodic schedule.

  [+]

  Similar to a line in a crontab file, a CronJob object specifies a schedule using the cron format.

• CustomResourceDefinition (CRD)

  Kode khusus yang mendefinisikan sebuah sumber daya untuk ditambahkan ke server API Kubernetes-mu tanpa membangun server khusus tersendiri.

  [+]

  CRD memungkinkanmu untuk memperluas API Kubernetes untuk lingkunganmu jika sumber daya API yang didukung secara publik tidak dapat memenuhi kebutuhanmu.

• DaemonSet

  Memastikan salinan Pod dijalankan pada sekumpulan Node dalam satu klaster.

  [+]

  Digunakan untuk menggelar daemon sistem sebagai kolektor log dan memonitor agen yang biasanya harus dijalankan di setiap Node.

• Data Plane
  Lapisan yang menyediakan kapasitas seperti CPU, memori, jaringan, dan penyimpanan sehingga Container dapat dijalankan dan terhubung ke suatu jaringan. [+]

  Lapisan yang menyediakan kapasitas seperti CPU, memori, jaringan, dan penyimpanan sehingga Container dapat dijalankan dan terhubung ke suatu jaringan.

• Deployment

  Sebuah objek API yang mengelola aplikasi yang direplikasi, biasanya dengan menjalankan Pod tanpa keadaan (state) lokal.

  [+]

  Setiap replika direpresentasikan oleh sebuah Pod, dan Pod tersebut didistribusikan di antara Node dari suatu klaster. Untuk beban kerja yang membutuhkan keadaan lokal, pertimbangkan untuk menggunakan StatefulSet.

• Developer (disambiguation)

  May refer to: Application Developer, Code Contributor, or Platform Developer.

  [+]

  This overloaded term may have different meanings depending on the context

• Disrupsi

  Disrupsi merupakan kejadian yang menyebabkan hilangnya satu atau beberapa Pod. Suatu disrupsi memiliki konsekuensi terhadap sumber daya beban kerja, seperti Deployment, yang bergantung pada Pod yang terpengaruh.

  [+]

  Jika kamu, sebagai operator klaster, menghancurkan sebuah Pod milik suatu aplikasi, maka hal ini dalam Kubernetes dikenal sebagai disrupsi disengaja (voluntary disruption). Jika sebuah Pod menghilang karena kegagalan Node, atau pemadaman yang mempengaruhi zona kegagalan yang lebih luas, maka dalam Kubernetes dikenal dengan istilah disrupsi tidak disengaja (involuntary disruption).

  Lihat Disrupsi untuk informasi lebih lanjut.

• Docker

  Docker (secara spesifik, Docker Engine) merupakan suatu teknologi perangkat lunak yang menyediakan virtualisasi pada level sistem operasi yang juga dikenal sebagai Container.

  [+]

  Docker menggunakan fitur isolasi sumber daya pada kernel Linux seperti cgroup dan namespace, dan UnionFS seperti OverlayFS dan lainnya untuk memungkinkan masing-masing Container dijalankan pada satu instans Linux, menghindari beban tambahan (overhead) saat memulai dan menjalankan VM.

• Dockershim

  The dockershim is a component of Kubernetes version 1.23 and earlier. It allows the kubelet to communicate with Docker Engine.

  [+]

  Starting with version 1.24, dockershim has been removed from Kubernetes. For more information, see Dockershim FAQ.

• Downstream (disambiguation)

  May refer to: code in the Kubernetes ecosystem that depends upon the core Kubernetes codebase or a forked repo.

  [+]

  • In the Kubernetes Community: Conversations often use downstream to mean the ecosystem, code, or third-party tools that rely on the core Kubernetes codebase. For example, a new feature in Kubernetes may be adopted by applications downstream to improve their functionality.
  • In GitHub or git: The convention is to refer to a forked repo as downstream, whereas the source repo is considered upstream.
• Downward API

  Kubernetes' mechanism to expose Pod and container field values to code running in a container.

  [+]

  It is sometimes useful for a container to have information about itself, without needing to make changes to the container code that directly couple it to Kubernetes.

  The Kubernetes downward API allows containers to consume information about themselves or their context in a Kubernetes cluster. Applications in containers can have access to that information, without the application needing to act as a client of the Kubernetes API.

  There are two ways to expose Pod and container fields to a running container:

  • using environment variables
  • using a downwardAPI volume

  Together, these two ways of exposing Pod and container fields are called the downward API.

• Drain

  The process of safely evicting Pods from a Node to prepare it for maintenance or removal from a cluster.

  [+]

  The kubectl drain command is used to mark a Node as going out of service. When executed, it evicts all Pods from the Node. If an eviction request is temporarily rejected, kubectl drain retries until all Pods are terminated or a configurable timeout is reached.

• Duration

  A string value representing an amount of time.

  [+]

  The format of a (Kubernetes) duration is based on the time.Duration type from the Go programming language.

  In Kubernetes APIs that use durations, the value is expressed as series of a non-negative integers combined with a time unit suffix. You can have more than one time quantity and the duration is the sum of those time quantities. The valid time units are "ns", "µs" (or "us"), "ms", "s", "m", and "h".

  For example: 5s represents a duration of five seconds, and 1m30s represents a duration of one minute and thirty seconds.

• Dynamic Volume Provisioning

  Allows users to request automatic creation of storage Volumes.

  [+]

  Dynamic provisioning eliminates the need for cluster administrators to pre-provision storage. Instead, it automatically provisions storage by user request. Dynamic volume provisioning is based on an API object, StorageClass, referring to a Volume Plugin that provisions a Volume and the set of parameters to pass to the Volume Plugin.

• Ekstensi

  Ekstensi adalah komponen perangkat lunak yang memperluas dan terintegrasi secara mendalam dengan Kubernetes untuk mendukung perangkat keras baru.

  [+]

  Sebagian besar admin klaster akan menggunakan instans Kubernetes yang dihoskan (hosted) atau didistribusikan. Akibatnya, hampir semua pengguna Kubernetes perlu menginstal ekstensi dan sedikit pengguna yang perlu membuat ekstensi baru.

• Endpoints

  Endpoints track the IP addresses of Pods with matching selectors.

  [+]

  Endpoints can be configured manually for Services without selectors specified. The EndpointSlice resource provides a scalable and extensible alternative to Endpoints.

• EndpointSlice

  A way to group network endpoints together with Kubernetes resources.

  [+]

  A scalable and extensible way to group network endpoints together. These can be used by kube-proxy to establish network routes on each node.

• etcd

  Penyimpanan key value konsisten yang digunakan sebagai penyimpanan data klaster Kubernetes.

  [+]

  Selalu perhatikan mekanisme untuk mem-backup data etcd pada klaster Kubernetes kamu. Untuk informasi lebih lanjut tentang etcd, lihat dokumentasi etcd.

• Event

  Event is a Kubernetes object that describes state change/notable occurrences in the system.

  [+]

  Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given reason reflecting a consistent underlying trigger, or the continued existence of events with that reason.

  Events should be treated as informative, best-effort, supplemental data.

  In Kubernetes, auditing generates a different kind of Event record (API group audit.k8s.io).

• Eviction

  Eviction is the process of terminating one or more Pods on Nodes.

  [+]

  There are two kinds of eviction:

  • Node-pressure eviction
  • API-initiated eviction
• Feature gate

  Feature gates are a set of keys (opaque string values) that you can use to control which Kubernetes features are enabled in your cluster.

  [+]

  You can turn these features on or off using the --feature-gates command line flag on each Kubernetes component. Each Kubernetes component lets you enable or disable a set of feature gates that are relevant to that component. The Kubernetes documentation lists all current feature gates and what they control.

• Finalizer

  Finalizers are namespaced keys that tell Kubernetes to wait until specific conditions are met before it fully deletes resources marked for deletion. Finalizers alert controllers to clean up resources the deleted object owned.

  [+]

  When you tell Kubernetes to delete an object that has finalizers specified for it, the Kubernetes API marks the object for deletion by populating .metadata.deletionTimestamp, and returns a 202 status code (HTTP "Accepted"). The target object remains in a terminating state while the control plane, or other components, take the actions defined by the finalizers. After these actions are complete, the controller removes the relevant finalizers from the target object. When the metadata.finalizers field is empty, Kubernetes considers the deletion complete and deletes the object.

  You can use finalizers to control garbage collection of resources. For example, you can define a finalizer to clean up related resources or infrastructure before the controller deletes the target resource.

• FlexVolume

  FlexVolume is a deprecated interface for creating out-of-tree volume plugins. The Container Storage Interface is a newer interface that addresses several problems with FlexVolume.

  [+]

  FlexVolumes enable users to write their own drivers and add support for their volumes in Kubernetes. FlexVolume driver binaries and dependencies must be installed on host machines. This requires root access. The Storage SIG suggests implementing a CSI driver if possible since it addresses the limitations with FlexVolumes.

  • FlexVolume in the Kubernetes documentation
  • More information on FlexVolumes
  • Volume Plugin FAQ for Storage Vendors
• Garbage Collection

  Garbage collection is a collective term for the various mechanisms Kubernetes uses to clean up cluster resources.

  [+]

  Kubernetes uses garbage collection to clean up resources like unused containers and images, failed Pods, objects owned by the targeted resource, completed Jobs, and resources that have expired or failed.

• Gateway API

  A family of API kinds for modeling service networking in Kubernetes.

  [+]

  Gateway API provides a family of extensible, role-oriented, protocol-aware API kinds for modeling service networking in Kubernetes.

• Group Version Resource
  Dikenal juga sebagai: GVR
  

  Means of representing unique Kubernetes API resource.

  [+]

  Group Version Resources (GVRs) specify the API group, API version, and resource (name for the object kind as it appears in the URI) associated with accessing a particular id of object in Kubernetes. GVRs let you define and distinguish different Kubernetes objects, and to specify a way of accessing objects that is stable even as APIs change.

• Grup API

  Sekumpulan path terkait pada API Kubernetes.

  [+]

  Kamu dapat mengaktifkan atau menonaktifkan setiap grup API dengan mengubah konfigurasi server API-mu. Kamu juga dapat menonaktifkan atau mengaktifkan path untuk sumber daya tertentu. Grup API memudahkan penambahan ekstensi dari API Kubernetes. Grup API ditentukan di dalam path REST dan field apiVersion dari objek terserialisasi.

  • Baca Grup API untuk informasi lebih lanjut.
• Helm Chart

  A package of pre-configured Kubernetes resources that can be managed with the Helm tool.

  [+]

  Charts provide a reproducible way of creating and sharing Kubernetes applications. A single chart can be used to deploy something simple, like a memcached Pod, or something complex, like a full web app stack with HTTP servers, databases, caches, and so on.

• Horizontal Pod Autoscaler
  Dikenal juga sebagai: HPA
  

  An API resource that automatically scales the number of Pod replicas based on targeted CPU utilization or custom metric targets.

  [+]

  HPA is typically used with ReplicationControllers, Deployments, or ReplicaSets. It cannot be applied to objects that cannot be scaled, for example DaemonSets.

• HostAliases

  A HostAliases is a mapping between the IP address and hostname to be injected into a Pod's hosts file.

  [+]

  HostAliases is an optional list of hostnames and IP addresses that will be injected into the Pod's hosts file if specified. This is only valid for non-hostNetwork Pods.

• Image

  Instans yang disimpan dari sebuah Container yang memuat seperangkat perangkat lunak yang dibutuhkan untuk menjalankan sebuah aplikasi.

  [+]

  Sebuah mekanisme untuk mengemas perangkat lunak yang memungkinkan perangkat lunak tersebut untuk disimpan di dalam register Container, ditarik ke dalam sistem lokal, dan dijalankan sebagai suatu aplikasi. Metadata disertakan di dalam image yang mengindikasikan executable apa saja yang perlu dijalankan, siapa yang membuatnya, dan informasi lainnya.

• Immutable Infrastructure

  Immutable Infrastructure refers to computer infrastructure (virtual machines, containers, network appliances) that cannot be changed once deployed.

  [+]

  Immutability can be enforced by an automated process that overwrites unauthorized changes or through a system that won’t allow changes in the first place. Containers are a good example of immutable infrastructure because persistent changes to containers can only be made by creating a new version of the container or recreating the existing container from its image.

  By preventing or identifying unauthorized changes, immutable infrastructures make it easier to identify and mitigate security risks. Operating such a system becomes a lot more straightforward because administrators can make assumptions about it. After all, they know no one made mistakes or changes they forgot to communicate. Immutable infrastructure goes hand-in-hand with infrastructure as code where all automation needed to create infrastructure is stored in version control (such as Git). This combination of immutability and version control means that there is a durable audit log of every authorized change to a system.

• Ingress

  Sebuah obyek API yang mengatur akses eksternal terhadap Service yang ada di dalam klaster, biasanya dalam bentuk request HTTP.

  [+]

  Ingress juga menyediakan load balancing, terminasi SSL, serta name-based virtual hosting.

• Istio

  An open platform (not Kubernetes-specific) that provides a uniform way to integrate microservices, manage traffic flow, enforce policies, and aggregate telemetry data.

  [+]

  Adding Istio does not require changing application code. It is a layer of infrastructure between a service and the network, which when combined with service deployments, is commonly referred to as a service mesh. Istio's control plane abstracts away the underlying cluster management platform, which may be Kubernetes, Mesosphere, etc.

• Job

  Tugas terbatas atau bertumpuk (batch) yang berjalan sampai selesai.

  [+]

  Membuat satu atau beberapa objek Pod dan memastikan bahwa sejumlah objek tersebut berhasil dihentikan. Saat Pod berhasil diselesaikan (complete), maka Job melacak keberhasilan penyelesaian tersebut.

• JSON Web Token (JWT)

  A means of representing claims to be transferred between two parties.

  [+]

  JWTs can be digitally signed and encrypted. Kubernetes uses JWTs as authentication tokens to verify the identity of entities that want to perform actions in a cluster.

• Katalog Servis

  Sebuah ekstensi API yang memungkinkan aplikasi berjalan pada klaster Kubernetes untuk mempermudah penggunaan perangkat lunak yang dikelola eksternal, seperti servis penyimpanan data yang ditawarkan oleh penyedia layanan komputasi awan.

  [+]

  Ini menyediakan cara untuk membuat daftar, melakukan pembuatan, dan mengikat dengan servis terkelola eksternal dari makelar servis tanpa membutuhkan pengetahuan mendalam mengenai cara servis tersebut dibuat dan diatur.

• Kelas QoS
  Dikenal juga sebagai: QoS Class
  

  Kelas QoS (Kelas Kualitas Layanan) menyediakan cara bagi Kubernetes untuk mengklasifikasikan Pod dalam klaster ke dalam beberapa kelas dan membuat keputusan tentang penjadwalan dan pengusiran.

  [+]

  Kelas QoS Pod ditetapkan pada waktu pembuatan berdasarkan permintaan sumber daya komputasi dan pengaturan batasannya. Kelas QoS digunakan untuk membuat keputusan tentang penjadwalan dan pengusiran Pod. Kubernetes dapat menetapkan salah satu kelas QoS berikut ke Pod: Guaranteed, Burstable atau BestEffort.

• Klaster

  Sekumpulan mesin pekerja, yang dikenal sebagai Node, yang menjalankan aplikasi dalam Container. Setiap klaster setidaknya mempunyai satu Node pekerja.

  [+]

  Node pekerja menjalankan Pod yang merupakan komponen dari beban kerja aplikasi. Control Plane mengelola Node pekerja dan Pod di dalam klaster. Pada lingkungan produksi, control plane biasanya berjalan di beberapa komputer dan suatu klaster pada umumnya menjalankan beberapa Node, hal ini akan memberikan toleransi kesalahan (fault-tolerance) dan ketersediaan tinggi (high availability).

• Kontrol Akses Berbasis Rol
  Dikenal juga sebagai: Role-Based Access Control (RBAC)
  

  Mengelola keputusan otorisasi, memungkinkan admin untuk mengonfigurasi kebijakan akses secara dinamis melalui API Kubernetes.

  [+]

  RBAC menggunakan Role yang memuat aturan perizinan, dan RoleBinding yang memberikan izin sebagaimana telah ditentukan di dalam Role untuk sekumpulan pengguna.

• kOps (Kubernetes Operations)

  kOps will not only help you create, destroy, upgrade and maintain production-grade, highly available, Kubernetes cluster, but it will also provision the necessary cloud infrastructure.

  [+]

  Note:

  AWS (Amazon Web Services) is currently officially supported, with DigitalOcean, GCE and OpenStack in beta support, and Azure in alpha.

  kOps is an automated provisioning system:

  • Fully automated installation
  • Uses DNS to identify clusters
  • Self-healing: everything runs in Auto-Scaling Groups
  • Multiple OS support (Amazon Linux, Debian, Flatcar, RHEL, Rocky and Ubuntu)
  • High-Availability support
  • Can directly provision, or generate terraform manifests
• Kuantitas

  Representasi bilangan bulat dari bilangan kecil atau besar menggunakan sufiks SI.

  [+]

  Kuantitas adalah representasi dari bilangan kecil atau besar menggunakan notasi bilangan bulat kompak dengan sufiks SI. Bilangan pecahan direpresentasikan dengan satuan mili, sedangkan bilangan besar direpresentasikan dengan satuan kilo, mega, atau giga.

  Misalnya, angka 1,5 direpresentasikan sebagai 1500m, sedangkan angka 1000 dapat direpresentasikan sebagai 1k, dan 1000000 sebagai 1M. Kamu juga dapat menentukan sufiks notasi biner; angka 2048 dapat ditulis sebagai 2Ki.

  Satuan desimal yang diterima (pangkat 10) adalah m (mili), k (kilo, sengaja huruf kecil), M (mega), G (giga), T (tera), P (peta), E (exa).

  Unit biner (pangkat 2) yang diterima adalah Ki (kibi), Mi (mebi), Gi (gibi), Ti (tebi), Pi (pebi), Ei (exbi).

• kube-apiserver

  Komponen control plane yang mengekspos API Kubernetes. Merupakan front-end dari control plane Kubernetes.

  [+]

  Komponen ini didesain agar dapat diskalakan secara horizontal. Lihat Membangun Klaster HA.

• kube-controller-manager

  Komponen control plane yang menjalankan pengontrol.

  [+]

  Secara logis, setiap pengontrol adalah sebuah proses yang berbeda, tetapi untuk mengurangi kompleksitas, kesemuanya dikompilasi menjadi sebuah biner (binary) yang dijalankan sebagai satu proses.

• kube-proxy

  kube-proxy merupakan proksi jaringan yang berjalan pada setiap Node di dalam klastermu, yang mengimplementasikan bagian dari konsep layanan Kubernetes.

  [+]

  kube-proxy mengelola aturan jaringan pada node. Aturan jaringan tersebut memungkinkan komunikasi jaringan ke Pod-mu melalui sesi jaringan dari dalam ataupun luar klaster.

  kube-proxy menggunakan lapisan pemfilteran paket sistem operasi jika ada dan tersedia. Jika tidak, maka kube-proxy akan meneruskan lalu lintas jaringan itu sendiri.

• kube-scheduler

  Komponen control plane yang bertugas mengamati Pod baru yang belum ditempatkan di node manapun dan kemudian memilihkan Node di mana Pod baru tersebut akan dijalankan.

  [+]

  Faktor-faktor yang dipertimbangkan untuk keputusan penjadwalan termasuk: kebutuhan sumber daya secara individual dan kolektif, batasan perangkat keras/perangkat lunak/peraturan, spesifikasi afinitas dan nonafinitas, lokalisasi data, interferensi antar beban kerja dan tenggat waktu.

• Kubeadm

  A tool for quickly installing Kubernetes and setting up a secure cluster.

  [+]

  You can use kubeadm to install both the control plane and the worker node components.

• Kubectl

  Sebuah utilitas baris perintah untuk berkomunikasi dengan suatu server Kubernetes API.

  [+]

  Kamu dapat menggunakan kubectl untuk membuat, memeriksa, memperbarui, dan menghapus objek Kubernetes.

• Kubelet
  Agen yang dijalankan pada setiap node di klaster yang bertugas untuk memastikan kontainer dijalankan di dalam Pod. [+]

  Agen yang dijalankan pada setiap node di klaster yang bertugas untuk memastikan kontainer dijalankan di dalam Pod.

• Kubernetes API

  The application that serves Kubernetes functionality through a RESTful interface and stores the state of the cluster.

  [+]

  Kubernetes resources and "records of intent" are all stored as API objects, and modified via RESTful calls to the API. The API allows configuration to be managed in a declarative way. Users can interact with the Kubernetes API directly, or via tools like kubectl. The core Kubernetes API is flexible and can also be extended to support custom resources.

• Label

  Tags objects with identifying attributes that are meaningful and relevant to users.

  [+]

  Labels are key/value pairs that are attached to objects such as Pods. They are used to organize and to select subsets of objects.

• Layanan Terkelola

  Sebuah perangkat lunak yang dikelola oleh penyedia layanan pihak ketiga.

  [+]

  Beberapa contoh dari servis terkelola adalah Microsoft Azure Cloud Queue, Amazon Simple Queue Service, and Google Cloud Pub/Sub, selain itu, bisa juga penawaran perangkat lunak apa pun yang dapat digunakan oleh suatu aplikasi.