Coursera 笔记

Module 05 · Final Assignment

Glossary: Introduction to Containers with Docker, Kubernetes & OpenShift术语表：Docker、Kubernetes 和 OpenShift 容器技术入门

Coursera ↗

Welcome! This alphabetized glossary contains many of the terms you'll find within this course. This comprehensive glossary also includes additional industry-recognized terms not used in course videos. These terms are important for you to recognize when working in the industry, participating in user groups, and participating in other certificate programs.
欢迎！这个按字母顺序排列的术语表包含了您在本课程中会发现的大量术语。这个全面的术语表还包括了课程视频中未使用的行业认可术语。这些术语对于您在行业内工作、参与用户组以及参与其他认证项目时认识它们非常重要。

Container Basics  容器基础

Term  术语 Definition  定义
Agile  敏捷 An iterative approach to project management and software development that helps teams deliver value to their customers faster and with fewer issues.
一种迭代的项目管理和软件开发方法，帮助团队更快、更少问题地向客户交付价值。
Client-server architecture
客户端-服务器架构		 A distributed application structure that divides jobs or workloads between the providers of a resource or service, known as servers, and the users, known as clients.
一种分布式应用结构，将任务或工作负载分配给资源或服务的提供者（称为服务器）和用户（称为客户端）。
Container  容器 A standard unit of software, powered by a containerization engine, that encapsulates the application code, runtime, system tools, system libraries, and settings necessary for programmers to efficiently build, ship, and run applications.
一种由容器化引擎驱动的标准软件单元，封装了应用程序代码、运行时、系统工具、系统库和程序员为高效构建、分发和运行应用程序所需的设置。
Container Registry  容器注册中心 A system used for the storage and distribution of named container images. Its primary functions include storing images and enabling their retrieval.
一个用于存储和分发命名容器镜像的系统。其主要功能包括存储镜像和启用其检索。
CI/CD pipelines  持续集成/持续交付流水线 A sequence of automated steps designed to streamline the process of delivering new software versions. It enhances the software development life cycle by focusing on automation to improve software delivery efficiency and quality.
一系列旨在简化交付新软件版本过程的自动化步骤。它通过专注于自动化来增强软件开发生命周期，提高软件交付的效率和品质。
Cloud native  云原生 A type of application specifically designed for a cloud computing architecture. They operate directly in the cloud and take full advantage of cloud-based software delivery models.
一种专为云计算架构设计的应用程序。它们直接在云端运行，并充分利用基于云的软件交付模型。
Daemon-less  无守护进程 A container runtime that operates without running any specific background process (daemon) to create and manage objects such as images, containers, networks, and volumes.
一种容器运行时，无需运行任何特定的后台进程（守护进程）来创建和管理图像、容器、网络和卷等对象。
DevOps A set of practices, tools, and a cultural philosophy aimed at automating and integrating processes between software development and IT teams to improve efficiency and collaboration.
一套旨在自动化和集成软件开发与 IT 团队之间流程的实践、工具和文化理念，以提高效率和协作。
Docker An open container platform that enables the development, deployment, and execution of applications within containers.
一个开放的容器平台，能够使应用程序在容器内进行开发、部署和执行。
Dockerfile A configuration file with instructions for creating a Docker image. Docker can automatically build images by following the instructions specified in a Dockerfile.
一个包含创建 Docker 镜像指令的配置文件。Docker 可以通过遵循 Dockerfile 中指定的指令自动构建镜像。
Docker client  Docker 客户端 The Docker client is the main interface for many Docker users. When you issue commands like docker run, the client sends these instructions to the Docker daemon (dockerd), which executes them using the Docker API. The Docker client is capable of communicating with multiple Docker daemons.
Docker 客户端是许多 Docker 用户的主要接口。当你发出类似 docker run 的命令时，客户端会将这些指令发送给 Docker 守护进程（dockerd），该守护进程使用 Docker API 执行这些指令。Docker 客户端能够与多个 Docker 守护进程进行通信。
Docker Command Line Interface (CLI)
Docker 命令行界面（CLI）		 The Docker client provides a command line interface (CLI) that allows users to execute commands for building, running, and stopping applications through interaction with a Docker daemon.
Docker 客户端提供了一个命令行界面（CLI），允许用户通过与 Docker 守护进程交互来执行构建、运行和停止应用程序的命令。
Docker daemon (dockerd)  Docker 守护进程（dockerd） The core engine that is responsible for creating and managing Docker objects, such as images, containers, networks, and volumes.
负责创建和管理 Docker 对象（如图像、容器、网络和卷）的核心引擎。
Docker Hub Docker Hub is a cloud-based registry service that allows you to create, manage, and deliver containerized applications. It provides a centralized platform for storing, sharing, and deploying Docker images. With Docker Hub, you can easily collaborate with your team, automate your workflow, and ensure consistency across your environments.
Docker Hub 是一个基于云的注册服务，允许您创建、管理和交付容器化应用程序。它提供了一个集中的平台，用于存储、共享和部署 Docker 镜像。通过 Docker Hub，您可以轻松地与团队协作、自动化工作流程，并确保跨环境的一致性。
Docker localhost Docker offers a host network mode that allows containers to use the host's network stack. This means that a localhost in a container resolves to the physical host, instead of the container itself.
Docker 提供了一种主机网络模式，允许容器使用主机的网络栈。这意味着容器中的 localhost 将解析到物理主机，而不是容器本身。
Docker remote host  远程主机 Docker A Docker Engine operating on a machine, either on the local network or externally, that is accessible for managing Docker containers remotely. This remote host can be accessed via the Docker Engine API by exposing certain ports, enabling external queries.
在本地网络或外部运行的 Docker 引擎，可通过 Docker 引擎 API 远程管理 Docker 容器。该远程主机可通过公开特定端口来访问，从而实现外部查询。
Docker networks  Docker 网络 Docker networks provide a way to isolate container communications, allowing you to create separate networks for different groups of containers. This isolation ensures that containers can only communicate with each other if they are connected to the same network, improving security and reducing the risk of unauthorized access.
Docker 网络提供了一种隔离容器通信的方式，允许您为不同的容器组创建独立的网络。这种隔离确保只有连接到同一网络的容器之间才能相互通信，从而提高安全性并降低未经授权访问的风险。
Docker plugins  Docker 插件 Docker plugins are extensions that add functionality to Docker. For example, a storage plugin connects external storage platforms to your Docker environment, allowing you to keep data even after a container is stopped. Other plugins might provide features like networking, security, or logging.
Docker 插件是向 Docker 添加功能的扩展。例如，一个存储插件可以将外部存储平台连接到您的 Docker 环境，使您能够在容器停止后保留数据。其他插件可能提供网络、安全或日志记录等功能。
Docker storage  Docker 存储 The methods used to maintain data beyond the lifecycle of a container. It includes techniques like volumes and bind mounts. Volumes are shared directories between the host system and a container, providing a way to persist data. Bind mounts allows a directory on the host machine to be directly mounted into a container as if it were a volume that enables direct access to host files from within the container.
用于在容器生命周期之外维护数据的方法。它包括卷和绑定挂载等技术。卷是主机系统和容器之间的共享目录，提供了一种持久化数据的方式。绑定挂载允许将主机机器上的一个目录直接挂载到容器中，就像它是一个卷一样，从而能够从容器内部直接访问主机文件。
IBM Cloud Container Registry
IBM 云容器注册中心		 A fully managed private registry that stores and distributes container images​.
一个完全托管的私有注册中心，用于存储和分发容器镜像。
Image  镜像 A static file that includes all the source code, libraries, and dependencies needed to run an application. Images serve as a templates or blueprints for a container.
一个静态文件，包含运行应用程序所需的所有源代码、库和依赖项。镜像作为容器的模板或蓝图。
Immutability  不可变性 Refers to the read-only nature of images. Any modifications to an image result in the creation of a new image.
指图像的只读特性。对图像的任何修改都会创建一个新的图像。
LXC An OS-level virtualization technology that allows for the creation and management of isolated Linux virtual environments (VEs) on a single host system.
一种操作系统级别的虚拟化技术，允许在单个主机系统上创建和管理隔离的 Linux 虚拟环境（VE）。
Microservices  微服务 A cloud-native architectural approach in which a single application contains many loosely coupled and independently deployable smaller components or services.
一种云原生架构方法，其中单个应用程序包含许多松散耦合且可独立部署的小型组件或服务。
Namespace  命名空间 A Linux kernel feature that isolates and virtualizes system resources, ensuring that processes within a namespace can only interact with resources or other processes within the same namespace. Namespaces are fundamental to Docker's isolation model and exist for various resources, including networking, storage, and process management.
一种 Linux 内核特性，用于隔离和虚拟化系统资源，确保同一命名空间内的进程只能与该命名空间内的资源或其他进程交互。命名空间是 Docker 隔离模型的基础，并存在于各种资源中，包括网络、存储和进程管理。
Operating System Virtualization
操作系统虚拟化		 An OS-level technology that enables the kernel to support multiple isolated user space instances, often referred to as containers, zones, virtual private servers, partitions, virtual environments, virtual kernels, or jails.
一种操作系统级技术，使内核能够支持多个隔离的用户空间实例，这些实例通常被称为容器、区域、虚拟专用服务器、分区、虚拟环境、虚拟内核或监狱。
Private Registry  私有注册中心 A Private Registry is a registry that restricts access to images, allowing only authorized users to view and use them. This provides an additional layer of security and control over your containerized applications, ensuring that sensitive images are not exposed to unauthorized users.
私有注册中心是一种限制对镜像访问的注册中心，仅允许授权用户查看和使用这些镜像。这为您的容器化应用程序提供了额外的安全性和控制层，确保敏感镜像不会被未授权用户访问。
REST API A RESTful API conforms to the constraints of REST architectural style and allows for interaction with RESTful web services.
RESTful API 遵循 REST 架构风格的约束，并允许与 RESTful Web 服务进行交互。
Registry  注册表 A hosted service that stores repositories of Docker images and interacts with clients through the Registry API.
一个托管服务，用于存储 Docker 镜像仓库，并通过注册表 API 与客户端交互。
Repository  仓库 A collection of Docker images, which can be shared by uploading to a registry server. Each image within the repository can be labeled with tags to differentiate versions or configurations.
一组 Docker 镜像的集合，可以通过上传到注册表服务器进行共享。仓库中的每个镜像都可以使用标签进行标记，以区分不同的版本或配置。
Server Virtualization  服务器虚拟化 The process of dividing a physical server into multiple unique and isolated virtual servers by using a software application. Each virtual server operates independently, capable of running its own operating system.
通过使用软件应用程序将一台物理服务器划分为多个独特且隔离的虚拟服务器的过程。每个虚拟服务器独立运行，能够运行自己的操作系统。
Serverless  无服务器 A cloud-native development methodology that enables developers to create and deploy applications without needing to manage servers.
一种云原生开发方法，使开发者能够无需管理服务器即可创建和部署应用程序。
Tag  标签 A label that differentiates Docker images within a repository.
用于区分仓库中 Docker 镜像的标识符。

Kubernetes Basics  Kubernetes 基础

Term  术语 Definition  定义
Automated bin packing  自动二分装 A technique that increases resource utilization and cost savings using a mix of critical and best-effort workloads.
一种通过混合关键任务和尽力而为的工作负载来提高资源利用率和节省成本的技术。
Batch execution  批量执行 Handles batch and continuous integration workloads. If configured, it automatically replaces failed containers, ensuring continuous operation.
处理批量和持续集成工作负载。如果配置，它将自动替换失败的容器，确保持续运行。
Cloud Controller Manager
云控制器管理器		 A part of the Kubernetes control plane that handles cloud-specific control logic, integrating Kubernetes with various cloud provider services.
Kubernetes 控制平面中处理特定云控制逻辑的部分，将 Kubernetes 与各种云服务提供商服务集成。
Cluster  集群 A set of worker machines, known as nodes, that run and manage containerized applications in a coordinated manner.
一组运行和管理容器化应用程序的协调节点，称为节点。
Container Orchestration  容器编排 The process of automating the lifecycle management of containerized applications.
自动化容器化应用程序生命周期管理的过程。
Container Runtime  容器运行时 The software that executes and manages containers, ensuring they run as intended.
执行和管理容器的软件，确保其按预期运行。
Control Loop  控制循环 A continuous, non-terminating loop that maintains the desired state of a system by monitoring and adjusting as needed.
一个持续不断的、非终结的循环，通过监控和按需调整来维持系统的期望状态。
Control plane  控制平面 The core component of container orchestration that provides the API and interfaces for defining, deploying, and managing the lifecycle of containers.
容器编排的核心组件，提供 API 和接口，用于定义、部署和管理容器的生命周期。
Controller  控制器 Control loops in Kubernetes that watch the state of the cluster and make or request changes as necessary.
Kubernetes 中的控制循环监视集群状态并在必要时进行或请求更改。
Data (Worker) Plane  数据（工作）平面 The layer that provides the essential resources like CPU, memory, network bandwidth, and storage needed for containers to operate and interact within a network.
提供 CPU、内存、网络带宽和存储等必要资源以使容器在网络中运行和交互的层。
DaemonSet Within a Kubernetes cluster, a DaemonSet serves as a controller object that guarantees the scheduled execution of a Pod specification across a designated set of worker nodes. This construct is particularly well-suited for deploying essential system daemons, such as log collection agents or monitoring tools, that require ubiquitous presence on all cluster nodes.
在 Kubernetes 集群中，DaemonSet 是一种控制器对象，它确保在指定的 worker 节点集上按计划执行 Pod 规范。这种结构特别适用于部署需要在所有集群节点上普遍存在的关键系统守护进程，例如日志收集代理或监控工具。
Declarative Management  声明式管理 A Kubernetes approach where the desired state of the system is defined, and Kubernetes continuously monitors and adjusts to ensure the current state aligns with this predefined desired state.
Kubernetes 的一种方法，其中系统的期望状态被定义，Kubernetes 持续监控和调整以确保当前状态与预定义的期望状态一致。
Deployment  部署 A Kubernetes resource that manages updates and scaling for both Pods and their underlying ReplicaSets, facilitating the automated rollout and rollback of application versions.
一个 Kubernetes 资源，用于管理 Pods 及其底层 ReplicaSets 的更新和扩展，促进应用程序版本的自动发布和回滚。
Designed for extensibility
专为可扩展性设计		 Is the Kubernetes ability to add features to cluster without modifying source code.
是 Kubernetes 添加集群功能而不修改源代码的能力。
Docker Swarm Automates deployment of containerized applications, designed specifically to work with Docker Engine and tools.
自动化容器化应用程序的部署，专为与 Docker 引擎和工具协同工作而设计。
Ecosystem  生态系统 The array of services, support, and tools that are broadly available and compatible with Kubernetes.
一系列广泛可用且与 Kubernetes 兼容的服务、支持和工具。
etcd A key-value store that is used as a reliable and consistent data store for distributed systems.
一个用作分布式系统可靠且一致的数据存储的键值存储。
Eviction  驱逐 The process of terminating and removing one or more Pods from a Node.
终止并从节点中删除一个或多个 Pod 的过程。
Imperative commands  命令式指令 Commands that directly create, update, and delete live objects.
直接创建、更新和删除活对象的命令。
Imperative Management  命令式管理 An approach that defines steps and actions to reach a desired state.
一种定义步骤和动作以达成期望状态的方法。
Ingress  入口 Ingress is a Kubernetes component that manages external access to services in a cluster. It provides a single entry point for incoming traffic, allowing you to route requests to multiple services within the cluster.
Ingress 是 Kubernetes 组件，用于管理集群中服务的外部访问。它为传入流量提供了一个单一入口点，允许您将请求路由到集群内的多个服务。
IPv4/IPv6 dual stack  IPv4/IPv6 双栈 The IPv4/IPv6 dual stack feature assigns both IPv4 and IPv6 addresses to Pods and Services. This allows your cluster to support both IPv4 and IPv6 networks, ensuring compatibility with a wide range of environments.
IPv4/IPv6 双栈功能为 Pods 和 Services 分配 IPv4 和 IPv6 地址。这使您的集群能够支持 IPv4 和 IPv6 网络，确保与各种环境的兼容性。
Job  作业 A task with a defined start and end, commonly used for executing finite or batch operations within a Kubernetes cluster.
一个具有明确定义开始和结束的任务，通常用于在 Kubernetes 集群中执行有限或批处理操作。
Kubectl The command-line interface tool for interacting with the Kubernetes control plane allows you to manage clusters and their resources.
用于与 Kubernetes 控制平面交互的命令行界面工具，允许您管理集群及其资源。
Kubelet The primary "node agent" in Kubernetes operates on each node, managing containers, executing tasks, and facilitating communication with the control plane.
Kubernetes 中的主要"节点代理"在每个节点上运行，管理容器，执行任务，并促进与控制平面的通信。
Kubernetes The foremost open-source platform standard for container orchestration.
容器编排的首要开源平台标准。
Kubernetes API The Kubernetes API is a RESTful interface that serves Kubernetes functionality and stores the cluster state. It offers a programmatic method for interacting with the cluster, enabling task automation, the creation of custom tools, and integration with other systems.
Kubernetes API 是一个 RESTful 接口，提供 Kubernetes 功能并存储集群状态。它提供了一种程序化的方法来与集群交互，实现任务自动化、创建自定义工具以及与其他系统集成。
Kubernetes API Server The component in Kubernetes that validates and configures data for API objects in Kubernetes.
Kubernetes 中用于验证和配置 API 对象数据的组件。
Kubernetes Controller Manager This crucial component operates the various controller processes that continuously observe and regulate the Kubernetes cluster, ensuring that its actual state aligns with the desired configuration and settings.
这个关键组件运行各种控制器进程，持续监控和调节 Kubernetes 集群，确保其实际状态与期望的配置和设置一致。
Kubernetes Cloud Controller Manager
Kubernetes 云控制器管理器		 A Kubernetes component that embeds cloud-specific control logic in Kubernetes.
一个将特定云的控制逻辑嵌入 Kubernetes 的 Kubernetes 组件。
Kubernetes Proxy  Kubernetes 代理 A network proxy service within Kubernetes that handles network traffic rules, facilitating and managing communication between Pods and services within the cluster.
Kubernetes 内部的一个网络代理服务，处理网络流量规则，促进和管理集群内 Pod 和服务之间的通信。
kube-scheduler The Kubernetes component responsible for selecting the appropriate node on which newly created Pods will run.
负责选择新创建的 Pod 将运行在适当节点的 Kubernetes 组件。
Label Selector  标签选择器 In Kubernetes, a Label Selector functions as a filtering mechanism employed to identify resources based on assigned labels. These labels, key-value pairs attached to entities like Pods or Services, provide supplementary metadata for organizational purposes. By leveraging Label Selectors, users can precisely choose specific resources within the cluster, simplifying administration and resource management tasks.
在 Kubernetes 中，标签选择器作为一个过滤机制，用于根据分配的标签识别资源。这些标签是附加到 Pod 或 Service 等实体的键值对，为组织目的提供补充元数据。通过利用标签选择器，用户可以精确选择集群中的特定资源，简化管理和资源管理任务。
Labels  标签 Labels provide a way to attach metadata with Kubernetes objects such as Pods or Services, which simplifies the process of putting objects into user-defined groups based on characteristics. These are a pair of key values, the strings, and places that listen for string or integer values. Labels allow us to tag and group resources, which in turn makes managing and organizing your cluster much easier.
标签提供了一种将元数据附加到 Kubernetes 对象（如 Pod 或 Service）的方法，简化了根据用户定义的组将对象分类的过程。标签是一对键值，其中键是字符串，值可以是字符串或整数值。标签使我们能够标记和分组资源，从而简化了集群的管理和组织。
Load balancing  负载均衡 The practice of distributing network traffic evenly across multiple Pods to optimize performance and ensure availability within a Kubernetes cluster.
在 Kubernetes 集群中将网络流量均匀分配到多个 Pod 的做法，以优化性能并确保可用性。
Marathon  马拉松 An Apache Mesos framework for scaling container infrastructure.
一个用于扩展容器基础设施的 Apache Mesos 框架。
Namespace  命名空间 A feature in Kubernetes that supports isolation of resources within a single cluster.
Kubernetes 中的一个功能，支持在单个集群内隔离资源。
Node  节点 A worker machine within a Kubernetes cluster responsible for running containerized applications, managed by the control plane.
Kubernetes 集群中的一个工作机器，负责运行容器化应用程序，由控制平面管理。
Nomad A cluster management and scheduling tool supporting Docker and other apps.
一个支持 Docker 和其他应用程序的集群管理和调度工具。
Object  对象 Represents an entity in the Kubernetes system.
表示 Kubernetes 系统中的一个实体。
Persistence  持久性 The characteristic of an object in Kubernetes to exist until it is explicitly modified or removed, ensuring continuity and stability of resources.
Kubernetes 中对象的一种特性，即对象在未被显式修改或删除之前一直存在，确保资源的连续性和稳定性。
Preemption  抢占 Preemption is a mechanism that helps a pending Pod find a suitable Node by evicting low-priority Pods. This ensures that high-priority Pods are scheduled quickly, even if it means terminating lower-priority Pods.
抢占是一种机制，通过驱逐低优先级的 Pod，帮助待处理的 Pod 找到一个合适的节点。这确保了高优先级的 Pod 能够快速调度，即使这意味着终止低优先级的 Pod。
Pod The fundamental execution unit in Kubernetes, representing one or more containers running together on a cluster. A Pod provides a shared environment and resources for its containers, allowing them to work together closely.
Kubernetes 中的基本执行单元，代表在一个集群上一起运行的 一个或多个容器。Pod 为其容器提供共享的环境和资源，使它们能够紧密协作。
Proxy  代理 An intermediary server for remote services.
用于远程服务的中间服务器。
ReplicaSet  副本集 A Kubernetes resource designed to ensure that a specified number of identical Pods are running at all times, providing redundancy and scaling capabilities for applications.
一种 Kubernetes 资源，旨在确保指定数量的相同 Pod 始终运行，为应用程序提供冗余和扩展能力。
Self-healing  自愈 The capability of Kubernetes to automatically restart, replace, reschedule, and kill failing containers.
Kubernetes 自动重启、替换、重新调度和终止故障容器的功能。
Service  服务 A network abstraction that exposes a group of Pods as a single, consistent network endpoint. It provides a stable IP address and load-balancing capabilities, simplifying access and management of the underlying application.
一种网络抽象，将一组 Pod 作为单个、一致的网络端点公开。它提供稳定的 IP 地址和负载均衡功能，简化了对底层应用程序的访问和管理。
Service Discovery  服务发现 The process of discovering and connecting to Pods using their IP addresses or a single DNS name.
使用 Pod 的 IP 地址或单个 DNS 名称发现和连接 Pod 的过程。
StatefulSet  有状态集 A StatefulSet is a Kubernetes component that manages the deployment and scaling of Pods, ensuring ordering and uniqueness. It is used to deploy stateful applications, such as databases, that require a specific ordering and uniqueness of Pods.
有状态集是 Kubernetes 组件，用于管理 Pod 的部署和扩展，确保顺序和唯一性。它用于部署有状态应用程序，如数据库，这些应用程序需要 Pod 的特定顺序和唯一性。
Storage  存储 Storage refers to the mechanisms used to provide persistent and temporary storage for Pods. This includes Persistent Volumes, StorageClasses, and Volume Claims, which allow you to manage storage resources and provide persistent storage for your applications.
存储是指为 Pods 提供持久性和临时存储的机制。这包括持久卷（Persistent Volumes）、存储类（StorageClasses）和卷声明（Volume Claims），它们允许您管理存储资源并为您的应用程序提供持久存储。
Storage Orchestration  存储编排 Storage Orchestration is a mechanism that automatically mounts storage systems for Pods. It provides a way to manage storage resources and provide persistent storage for your applications, making it easier to deploy and manage stateful applications.
存储编排是一种自动为 Pods 挂载存储系统的机制。它提供了一种管理存储资源并为您的应用程序提供持久存储的方法，从而简化了有状态应用程序的部署和管理。
Workload  工作负载 An application running on Kubernetes.
在 Kubernetes 上运行的应用程序。

Managing Applications with Kubernetes
使用 Kubernetes 管理应用程序

Term  术语 Definition  定义
Cluster Autoscaler  集群自动扩展器 Also known as CA. An API resource that autoscales the cluster itself by increasing and decreasing the number of available nodes that pods can run on.
也称为 CA。一个 API 资源，通过增减可运行 Pod 的节点数量来自动扩展集群。
Config Map  配置映射 A Kubernetes object that allows to store configuration data as key-value pairs. It provides a way to manage and inject configuration settings into containers, decoupling configuration from application code.
一个 Kubernetes 对象，允许将配置数据存储为键值对。它提供了一种管理和注入容器配置设置的方式，将配置与应用程序代码解耦。
Horizontal Pod Autoscaler
水平 Pod 自动伸缩		 An API resource in Kubernetes that automatically adjusts the number of Pod replicas based on specified metrics like CPU utilization or custom metrics.
Kubernetes 中的一种 API 资源，根据 CPU 利用率或自定义指标等指定指标自动调整 Pod 副本的数量。
IBM Cloud catalog  IBM 云目录 A collection of various services provided by IBM, ranging from visual recognition and natural language processing to creating chatbots.
IBM 提供的一系列服务集合，涵盖从视觉识别和自然语言处理到创建聊天机器人的各种服务。
Linguistic Analysis  语言学分析 The process of detecting the tone in a given text.
检测给定文本中语调的过程。
Persistent Volume  持久卷 Within the Kubernetes API, a Persistent Volume acts as an abstraction for persistent storage. PVs offer flexible and pluggable storage options, existing independently of any Pod's lifecycle. This ensures enduring storage for applications running within the cluster.
在 Kubernetes API 中，持久卷充当持久存储的抽象。PV 提供灵活且可插拔的存储选项，独立于任何 Pod 的生命周期。这确保了集群内运行的应用程序具有持久的存储。
Persistent Volume Claim  持久卷声明 A Kubernetes API object representing storage that persists independently of any Pod's lifecycle, providing durable storage for applications within the cluster.
一个 Kubernetes API 对象，表示独立于任何 Pod 生命周期而持续存在的存储，为集群中的应用程序提供持久化存储。
Rolling Updates  滚动更新 A strategy that provides a way to roll out application changes in an automated and controlled fashion throughout your pods. Rolling updates work with pod templates such as deployments. Rolling updates allow for rollback if something goes wrong.
一种策略，提供了一种以自动化和受控的方式在整个 Pod 中推出应用程序更改的方法。滚动更新与部署等 Pod 模板协同工作。如果出现问题时，滚动更新允许回滚。
Secrets  秘密 Secrets are objects that store sensitive information, such as passwords, OAuth tokens, and ssh keys. They provide a secure way to manage sensitive data, making it easier to deploy and manage.
秘密是存储敏感信息的对象，例如密码、OAuth 令牌和 SSH 密钥。它们提供了一种安全的方式来管理敏感数据，从而简化了部署和管理。
Service binding  服务绑定 The process of establishing connections between applications and external or backing services, such as REST APIs, databases, and event buses.
应用程序与外部或支持服务（如 REST API、数据库和事件总线）之间建立连接的过程。
Tone Analyzer Service  情感分析服务 An IBM Cloud Service that uses linguistic analysis to detect tone in a given text.
一种使用语言分析技术检测给定文本情感的 IBM 云服务。
Vertical Pod Autoscaler (VPA)
垂直 Pod 自动伸缩 (VPA)		 Also known as VPA. An API resource that adjusts the CPU and memory resources allocated to an existing Pod, allowing a service to scale vertically within a cluster.
也称为 VPA。一种调整分配给现有 Pod 的 CPU 和内存资源的 API 资源，允许服务在集群内垂直扩展。
Volume  卷 A directory containing data, accessible to multiple containers in a Pod.
一个包含数据，可供 Pod 中的多个容器访问的目录。
Volume Mount  卷挂载 Mounting of the declared volume into a container in the same Pod.
将声明的卷挂载到同一 Pod 中的容器。
Volume Plugin  卷插件 Facilitates the integration of storage into a Pod within Kubernetes, enabling containers within the Pod to access and use persistent storage resources.
促进存储集成到 Kubernetes 中的 Pod 内，使 Pod 内的容器能够访问和使用持久化存储资源。

OpenShift Basics  OpenShift 基础

Term  术语 Definition  定义
A/B testing  A/B 测试 A strategy often used to test new features in front-end applications. It involves evaluating two versions, A and B, to determine which performs better in a controlled environment.
一种常用于测试前端应用新功能的策略。它涉及评估两个版本 A 和 B，以确定在受控环境中哪个表现更好。
Build  构建 The process of transforming inputs into a resultant object.
将输入转换为结果对象的过程。
BuildConfig  构建配置 An OpenShift-specific object that outlines the steps and strategy for executing a build. The BuildConfig serves as a blueprint for the build process, defining how input sources are utilized to generate the desired output.
OpenShift 特定的对象，概述了执行构建的步骤和策略。BuildConfig 作为构建过程的蓝图，定义了如何利用输入源来生成期望的输出。
Canary Deployments  金丝雀发布 A deployment strategy where a new version of an application is gradually rolled out to a subset of users or traffic, allowing real-world testing before a full deployment.
一种部署策略，新版本的应用程序逐渐推出到部分用户或流量中，允许在实际环境中进行测试，然后再进行完整部署。
Circuit breaking  断路器 A method to prevent errors in one microservice from cascading to other microservices.
一种防止一个微服务中的错误级联到其他微服务的方法。
Configuration Change  配置变更 A trigger that causes a new build to run when a new BuildConfig resource is created.
当创建新的 BuildConfig 资源时，触发新构建运行的触发器。
Control Plane  控制平面 The control plane takes the desired configuration and its view of the services and dynamically programs and updates the proxy servers as the environment changes.
控制平面获取所需的配置及其对服务器的视图，并根据环境变化动态编程和更新代理服务器。
Custom build strategy  自定义构建策略 In OpenShift, a build strategy that enables users to define and use their own custom builder image.
在 OpenShift 中，一种允许用户定义和使用自己的自定义构建镜像的构建策略。
Custom builder images  自定义构建镜像 Regular Docker images that contain the logic needed to transform the inputs into the expected output.
包含将输入转换为预期输出的所需逻辑的常规 Docker 镜像。
CRDs (Custom Resource Definitions)
自定义资源定义（CRDs）		 Custom code that defines a resource to add to your Kubernetes API server without building a complete custom server.
无需构建完整自定义服务器即可向您的 Kubernetes API 服务器添加资源的自定义代码。
Custom controllers  自定义控制器 Custom controllers manage Custom Resource Definitions (CRDs) by continuously reconciling their current state with the desired state specified in the CRD's definition, ensuring alignment and performing necessary actions to achieve consistency and functionality as intended.
自定义控制器通过持续地将其当前状态与 CRD（自定义资源定义）定义中指定的期望状态进行协调，来管理 CRDs，确保一致性并执行必要的操作以实现预期的一致性和功能。
Data plane  数据平面 The layer in a network architecture that handles communication between services. If a service mesh is absent, the network cannot identify the type of traffic that flows, the source, and the destination and make any necessary decisions.
网络架构中处理服务间通信的层。如果不存在服务网格，网络将无法识别流量类型、源地址和目标地址，也无法做出任何必要的决策。
Enforceability (Control)
可执行性（控制）		 Istio enforces policies across the system to ensure fair resource distribution among consumers, helping to manage and regulate the use of services.
Istio 在整个系统中执行策略，以确保在消费者之间公平分配资源，帮助管理和规范服务的使用。
Envoy proxy  Envoy 代理 A proxy used by Istio to intercept and manage all network traffic. Envoy provides features such as load balancing, observability, and security based on its configuration.
Istio 使用的代理，用于拦截和管理所有网络流量。Envoy 基于其配置提供负载均衡、可观察性和安全性等功能。
Human operators  人工操作员 Individuals who manage systems by deploying services, identifying issues, and implementing solutions to ensure smooth operations.
管理系统的个人，通过部署服务、识别问题以及实施解决方案来确保系统平稳运行。
Image Change  图像变更 A trigger to rebuild a containerized application when a new or updated version of an image is available. For example, if an application is based on a Node.js image, it will be rebuilt automatically when updates like security patches are released for Node.js.
当有新的或更新的图像版本可用时，用于重建容器化应用程序的触发器。例如，如果应用程序基于 Node.js 图像，则在为 Node.js 发布安全补丁等更新时，它将自动重建。
ImageStream  图像流 In OpenShift, an abstraction used to reference container images. Each ImageStream contains metadata such as image IDs or digests that uniquely identify them. ImageStreams themselves do not store image data but serve as pointers to specific image digests.
在 OpenShift 中，用于引用容器镜像的抽象概念。每个 ImageStream 包含诸如镜像 ID 或摘要等元数据，用于唯一标识它们。ImageStreams 本身不存储镜像数据，而是作为指向特定镜像摘要的指针。
ImageStream Tag  ImageStream 标签 An identifier within an ImageStream that points to a specific image in a registry. It represents a named reference to a particular version or variant of an image.
ImageStream 中的一个标识符，指向注册表中的特定镜像。它表示对镜像的特定版本或变体的命名引用。
Istio A popular, platform-independent service mesh that works with Kubernetes. Istio controls traffic and API calls between services, conducts tests, and simplifies network service management.
一个流行、跨平台的服务网格，可与 Kubernetes 一起使用。Istio 控制服务之间的流量和 API 调用，进行测试，并简化网络服务管理。
Man-in-the-middle attacks
中间人攻击		 The cyber-attack in which the attacker secretly intercepts and relays messages between two parties who believe they are communicating directly with each other.
一种网络攻击，攻击者秘密拦截并转发两个认为它们在直接通信的实体之间的消息。
Observability  可观察性 The ability to monitor and understand traffic flow within a service mesh, trace call flows and dependencies, and view metrics such as latency and errors.
监控和理解服务网格中的流量，追踪调用流程和依赖关系，以及查看延迟和错误等指标的能力。
OpenShift A hybrid cloud, enterprise Kubernetes platform that enables developers to build, deploy, and manage containerized applications efficiently.
一个混合云的企业级 Kubernetes 平台，使开发者能够高效地构建、部署和管理容器化应用程序。
OpenShift CI/CD process  OpenShift CI/CD 流程 A continuous integration and deployment process that automatically merges code changes, builds, tests, and deploys new versions to different environments.
一个持续集成和部署流程，自动合并代码变更、构建、测试并将新版本部署到不同环境。
Operators  操作员 Software extensions in Kubernetes that automate complex tasks and act as custom controllers to extend the Kubernetes API.
Kubernetes 中的软件扩展，可自动化复杂任务，并充当自定义控制器以扩展 Kubernetes API。
Operator Framework  操作员框架 A suite of tools and capabilities designed to enhance the development, testing, delivery, and updating of Operators in Kubernetes environments.
一套旨在增强在 Kubernetes 环境中 Operators 的开发、测试、交付和更新的工具与功能。
OperatorHub A web console in OpenShift that allows cluster administrators to discover and install Operators. It offers a variety of Operators, including Red Hat Certified, community, and custom-defined Operators.
OpenShift 中的一个 Web 控制台，允许集群管理员发现和安装 Operators。它提供多种 Operators，包括 Red Hat 认证、社区和自定义定义的 Operators。
Operator Lifecycle Manager (OLM) A component designed to handle the lifecycle management tasks such as installation, upgrades, and role-based access control (RBAC) for Operators within Kubernetes or OpenShift clusters.
一个组件，用于处理生命周期管理任务，例如在 Kubernetes 或 OpenShift 集群中对 Operator 进行安装、升级和基于角色的访问控制（RBAC）。
Operator maturity model  Operator 成熟度模型 A framework that defines stages of maturity for Operators, ranging from basic installation to fully automated operations (Auto Pilot).
一个定义 Operator 成熟度阶段的框架，范围从基本安装到完全自动化操作（Auto Pilot）。
Operator Pattern  Operator 模式 A system design that links a Controller to one or more custom resources.
一个将控制器连接到一个或多个自定义资源的系统设计。
Operator Registry  操作员注册表 A system that stores Custom Resource Definitions (CRDs), Cluster Service Versions (CSVs), and metadata about Operators and channels. It runs in Kubernetes or OpenShift clusters to provide the Operator catalog data to OLM.
一个存储自定义资源定义（CRDs）、集群服务版本（CSVs）以及操作员和通道元数据的系统。它在 Kubernetes 或 OpenShift 集群中运行，为 OLM 提供操作员目录数据。
Operator SDK  操作员 SDK A toolkit that helps authors build, test, and package their Operators without requiring knowledge of Kubernetes API complexities.
一个工具包，帮助作者构建、测试和打包他们的 Operators，而无需了解 Kubernetes API 的复杂性。
postCommit A section in a build configuration that defines an optional hook
构建配置中的一个部分，定义了一个可选的钩子
Retries  重试 A mechanism used in microservices to automatically reattempt a failed request to another service.
一种在微服务中用于自动重试对另一个服务失败请求的机制。
runPolicy A field within a BuildConfig object that dictates how builds are executed. It controls whether builds run sequentially (default: Serial) or concurrently.
BuildConfig 对象中的一个字段，用于规定构建的执行方式。它控制构建是按顺序执行（默认：Serial）还是并发执行。
Service Broker  服务代理 Provides a short-running process that cannot perform the consecutive day's operations such as upgrades, failover, or scaling.
提供一个短时运行的过程，无法执行连续几天的操作，例如升级、故障转移或扩展。
Service Mesh  服务网格 A layer dedicated to ensuring the security and reliability of service-to-service communication. It provides traffic management to control the flow of traffic between services, security to encrypt traffic between services, and observability of service behavior; so, you can troubleshoot and optimize applications.
一个专门用于确保服务间通信的安全性和可靠性的层。它提供流量管理来控制服务之间的流量，安全功能来加密服务之间的流量，以及服务行为的可观察性；因此，您可以进行故障排除和优化应用程序。
Software operators  软件运维人员 Try to capture the knowledge of human operators and automate the same processes.
尝试捕获人类操作员的知识，并自动化相同的过程。
Source-to-Image (S2i)  源到镜像（S2i） A tool used for building reproducible container images. It facilitates the process of creating ready-to-run container images by injecting application source code directly into a base container image.
一种用于构建可重复容器镜像的工具。它通过将应用程序源代码直接注入基础容器镜像中，简化了创建即用型容器镜像的过程。
Source strategy  源策略 The source strategy indicates how builds are executed, whether through handling source code directly (Source), utilizing containers (Docker), or custom configurations, optimizing deployment and environment management accordingly. Each approach offers unique benefits tailored to project needs.
源策略指示构建的执行方式，无论是直接处理源代码（源）、使用容器（Docker）还是自定义配置，从而优化部署和环境管理。每种方法都为项目需求提供了独特的优势。
Source type  源类型 The type of input that determines the primary input like a Git repository, an inline Dockerfile, or binary payloads.
决定主要输入的类型，如 Git 仓库、内联 Dockerfile 或二进制有效负载。
Webhook A trigger that sends a request to an OpenShift Container Platform API endpoint. Webhooks automate development flows so that builds can occur automatically as new code is developed.
一个向 OpenShift Container Platform API 端点发送请求的触发器。Webhooks 自动化开发流程，以便在开发新代码时自动进行构建。