Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 100 of 114 containers terms. Narrow the search to reduce the list.
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Containers
learning-path-anchor
Target port
A target port tells Azure Container Apps where to deliver traffic inside your container. Public or internal ingress may expose an endpoint, but the app still has to listen on a specific port. If the container listens on 8080 and ingress targets 80, users may see timeouts, failed probes, or gateway errors. The setting is small, but it is often the difference between the app being deployed and the app being reachable. It should match the application startup command, Dockerfile, framework port, and health probes.
Azure Container Apps
intermediate
5 commands
Aliases: container target port, Container Apps target port, ingress targetPort, container ingress port
Quick peek
Open full term page
Containers
premium
ACR admin user
The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR build
ACR build lets Azure Container Registry build an image in the cloud from source context or a Dockerfile. It is handy when you do not want a local Docker engine or want a pipeline to build and push directly in Azure.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR geo-replication
ACR geo-replication keeps container images closer to workloads in multiple regions. Developers push to one registry, and Azure replicates content so regional clusters can pull faster and more reliably, assuming the registry uses the Premium tier.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR import
ACR import is a server-side image copy. Instead of pulling an image to your machine and pushing it back, Azure copies it into your registry directly. It is useful for migration, mirroring, controlled base images, and pipeline cleanup.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR manifest
An ACR manifest is the record behind an image tag. It describes the image layers and configuration, and its digest is the exact content identity. Tags can move, but a manifest digest is what proves the precise image version.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR quarantine policy
ACR quarantine policy is a safety gate for images. Newly pushed images can be hidden from normal users until security scanning or approval clears them, reducing the chance that unreviewed images are pulled into workloads.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
ACR retention policy
An ACR retention policy is a registry-level cleanup rule for untagged manifests in Azure Container Registry. When enabled on a supported registry, it schedules untagged manifests for deletion after the configured number of days, helping control storage growth while requiring care because deleted image data cannot be recovered.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry retention policy, ACR untagged manifest retention, registry retention policy
Quick peek
Open full term page
Containers
premium
ACR scope map
An ACR scope map is a reusable set of repository permissions in Azure Container Registry. It groups actions such as content read, content write, delete, and metadata access, then applies that permission boundary to one or more non-Microsoft Entra registry tokens.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry scope map, repository scope map, registry token scope map
Quick peek
Open full term page
Containers
premium
ACR Task
An ACR Task is automation inside Azure Container Registry for building, testing, patching, or maintaining container images. Instead of relying only on a developer laptop or separate build server, the registry can run a build from source, a.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry Task, ACR Tasks, registry task
Quick peek
Open full term page
Containers
premium
ACR webhook
An ACR webhook is an Azure Container Registry event notification that sends an HTTP or HTTPS request to a configured endpoint when registry actions occur, such as image push or delete. It can be registry-wide or scoped to a repository or tag, including regional replicas.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry webhook, registry webhook, ACR event webhook
Quick peek
Open full term page
Containers
premium
Active revision
Active revision is the Container Apps revision that is allowed to receive traffic. In everyday Azure work, teams use it to roll out a new container image, keep a rollback candidate warm, or split traffic between versions. The useful evidence is revision mode, active state, replica health, labels, and traffic weight. Treat the term as
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps active revision, revision activation, active Container Apps revision
Quick peek
Open full term page
Containers
premium
AKS add-on
An AKS add-on is a Microsoft-supported capability that can be enabled on an Azure Kubernetes Service cluster to add functionality such as monitoring, policy, ingress, or security integration, with installation and lifecycle managed through AKS.
Azure Kubernetes Service
fundamentals
3 commands
Aliases: AKS addon, Azure Kubernetes Service add-on, managed AKS integration, AKS integration
Quick peek
Open full term page
Containers
premium
AKS Azure Policy add-on
The AKS Azure Policy add-on integrates Azure Policy with an AKS cluster so policy assignments can audit or enforce Kubernetes rules through in-cluster policy components and report compliance back to Azure Policy.
Azure Kubernetes Service
intermediate
3 commands
Aliases: Azure Policy add-on for AKS, AKS policy add-on, Gatekeeper add-on, Azure Policy for Kubernetes
Quick peek
Open full term page
Containers
premium
AKS cluster
Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments.
Azure Kubernetes Service
fundamentals
5 commands
Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure
Quick peek
Open full term page
Containers
premium
AKS cluster upgrade
An AKS cluster upgrade moves an AKS cluster and its node pools to a newer supported Kubernetes version or updates node images after checking available versions, planning surge capacity, and validating workload readiness.
Azure Kubernetes Service
intermediate
3 commands
Aliases: AKS upgrade, Kubernetes version upgrade, AKS node upgrade, cluster version upgrade
Quick peek
Open full term page
Containers
premium
AKS GitOps
AKS GitOps uses Git as the source of truth for Kubernetes configuration and application deployment, commonly through the Microsoft Flux extension, so AKS clusters continuously reconcile to the desired state declared in a repository.
Azure Kubernetes Service
intermediate
3 commands
Aliases: GitOps for AKS, Flux on AKS, microsoft.flux extension, AKS Flux configuration
Quick peek
Open full term page
Containers
premium
AKS horizontal pod autoscaler
The AKS Horizontal Pod Autoscaler is the Kubernetes HPA capability used in AKS to automatically change the number of pod replicas for a workload based on observed metrics such as CPU, memory, or custom metrics.
Azure Kubernetes Service scaling
intermediate
3 commands
Aliases: HPA on AKS, horizontal pod autoscaler, Kubernetes HPA, pod autoscaling
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS maintenance window
An AKS maintenance window is a planned maintenance configuration that controls when AKS starts certain cluster and node image upgrade operations. It helps teams align automatic upgrades and maintenance-sensitive changes with approved business windows, while Azure platform maintenance for underlying infrastructure remains separate.
AKS operations
Intermediate
5 commands
Aliases: Azure Kubernetes Service maintenance window, aks maintenance window
Quick peek
Open full term page
Containers
premium
AKS managed identity
An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets.
AKS identity
Intermediate
5 commands
Aliases: Azure Kubernetes Service managed identity, aks managed identity
Quick peek
Open full term page
Containers
premium
AKS network policy
An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network policy, aks network policy
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Containers
premium
AKS Windows node pool
An AKS Windows node pool is a group of Windows Server worker nodes in an AKS cluster, used to run Windows container workloads while Linux pools continue to host core Kubernetes system components.
AKS
intermediate
3 commands
Aliases: Windows node pool, Windows Server node pool, AKS Windows containers
Quick peek
Open full term page
Containers
premium
API server authorized IP ranges
API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS API server authorized IP ranges, authorized API server IP ranges
Quick peek
Open full term page
Containers
premium
Azure CNI
An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks.
Kubernetes networking
fundamentals
4 commands
Aliases: Azure Container Networking Interface
Quick peek
Open full term page
Containers
premium
Azure CNI Overlay
An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space.
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS overlay networking
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Containers
premium
Cluster autoscaler
The cluster autoscaler changes AKS node count based on pending pods and scheduling needs.
Kubernetes
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Connected registry
an Azure Container Registry capability that keeps container images available in remote, edge, or intermittently connected environments by syncing with a parent registry
Azure Container Registry
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Consumption workload profile
the Azure Container Apps workload profile for serverless container workloads that should scale based on demand and incur cost only while running
Azure Container Apps
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
Containers
premium
Container Apps custom domain
A custom hostname assigned to a Container App ingress endpoint.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps environment variable
An environment variable passed into a Container Apps container.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps ingress
The Container Apps setting that controls whether and how HTTP or TCP traffic reaches a container app.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps job
A Container Apps resource for running scheduled, event-driven, or manual containerized tasks to completion.
Azure Container Apps
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps replica
a running instance of a Container Apps revision that is added or removed as Azure Container Apps scales the workload
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps session
an isolated, short-lived execution environment from a Container Apps dynamic session pool, often used for sandboxed code or custom runtime tasks
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps traffic split
percentage-based Container Apps ingress routing that sends traffic to active revisions or labels for canary, blue-green, or A/B releases
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Apps workload profile
the Container Apps environment compute profile that controls resource size, scaling model, isolation, and billing behavior for deployed apps
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container group
the Azure Container Instances unit where containers share scheduling, lifecycle, local network, exposed endpoints, resources, and storage volumes
Serverless containers
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image digest
the immutable sha256 reference that identifies the exact container image manifest Azure pulls during deployment
Container images
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container image tag
the human-readable label teams use to version, promote, and find container images in a registry
Container images
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Insights
Azure Monitor views and data collection used to understand Kubernetes cluster and workload health
Monitoring
intermediate
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Container Instances
Azure serverless container compute for running container groups without managing virtual machines or a full orchestrator
Serverless containers
fundamentals
3 commands
Aliases: ACI
Quick peek
Open full term page
Containers
premium
CPU scale rule
an autoscale rule that adds or removes running instances when CPU usage crosses a defined threshold for a sustained window.
Autoscale
intermediate
4 commands
Aliases: CPU autoscale rule, Percentage CPU scale rule, Autoscale CPU rule
Quick peek
Open full term page
Containers
premium
Dapr
Dapr is a distributed application runtime that gives microservices common building-block APIs for service invocation, pub/sub, bindings, state, workflows, and observability.
Distributed applications
intermediate
4 commands
Aliases: Dapr, DAPR
Quick peek
Open full term page
Containers
premium
Dapr binding
Dapr binding is a Dapr building block that lets an application trigger from or send data to external systems through configured input and output components.
Azure Container Apps
intermediate
4 commands
Aliases: Dapr binding, DAPR binding
Quick peek
Open full term page
Containers
premium
Dapr pub/sub
Dapr pub/sub is a Dapr building block that lets services publish messages to topics and subscribe to them through a configured broker component.
Azure Container Apps
intermediate
4 commands
Aliases: Dapr pub/sub, DAPR pub/sub
Quick peek
Open full term page
Containers
premium
Dapr service invocation
Dapr service invocation is a Dapr building block for calling another application by Dapr app ID instead of hard-coding its network address in the caller.
Azure Container Apps
intermediate
4 commands
Aliases: Dapr service invocation, DAPR service invocation
Quick peek
Open full term page
Containers
premium
Dapr sidecar
Dapr sidecar is a production Azure concept tied to Azure Container Apps.
Azure Container Apps
intermediate
4 commands
Aliases: Dapr sidecar, DAPR sidecar
Quick peek
Open full term page
Containers
premium
Dedicated workload profile
A dedicated workload profile in Azure Container Apps provides dedicated compute resources in a workload profiles environment, with billing based on profile instances rather than only per-app consumption.
Azure Container Apps
intermediate
4 commands
Aliases: Container Apps dedicated workload profile, dedicated profile, workload profile dedicated plan
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
Containers
premium
Event-driven job
An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the.
Azure Container Apps
intermediate
6 commands
Aliases: Container Apps event-driven job, KEDA job, event-triggered container job
Quick peek
Open full term page
Containers
premium
Event-driven scale rule
An Event-driven scale rule is a Container Apps scaling configuration that uses event-source metrics to decide how many replicas or job executions to run. Teams use it to connect queue length, event backlog, HTTP load, Kafka lag, or other scaler metadata to automatic scaling decisions. It is not the event source itself, a Kubernetes HPA object, a fixed replica count, or a complete guarantee that the application processes events correctly. In production, confirm scaler type, metadata names, authentication method, min and max replicas, polling interval, cooldown behavior, event source metrics, container revision, and downstream capacity before treating the design as.
Azure Container Apps
intermediate
6 commands
Aliases: KEDA scale rule, Container Apps event scale rule, custom scale rule
Quick peek
Open full term page
Containers
premium
External ingress
External ingress in Azure Container Apps allows traffic from outside the Container Apps environment to reach a container app endpoint. Teams use it to publish a container app to callers outside the environment, including users, APIs, webhooks, partners, or front-end gateways that need a reachable HTTPS or TCP endpoint. It is not internal-only ingress, a custom domain certificate, a network security guarantee, or proof that authentication, authorization, rate limits, and backend health are configured correctly.
Azure Container Apps
intermediate
6 commands
Aliases: external Container Apps ingress, public ingress, internet-facing ingress
Quick peek
Open full term page
Containers
premium
Flux extension
The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters.
Kubernetes GitOps
intermediate
6 commands
Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension
Quick peek
Open full term page
Containers
premium
Helm
Helm is a Kubernetes package manager that deploys applications using charts, values files, and release history, including workloads running on AKS.
AKS
beginner
4 commands
Aliases: Helm charts, Kubernetes Helm, Helm
Quick peek
Open full term page
Containers
premium
HTTP scale rule
An HTTP scale rule is an Azure Container Apps scaling rule that scales replicas based on concurrent HTTP requests.
Azure Container Apps
intermediate
5 commands
Aliases: HTTP scale rule, http scale rule
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Containers
premium
Inactive revision
Inactive revision is an Azure Container Apps revision that remains in the revision list but is not actively serving traffic or running replicas.
Azure Container Apps
intermediate
5 commands
Aliases: Inactive revision, inactive revision, inactive-revision
Quick peek
Open full term page
Containers
premium
Internal ingress
Internal ingress controls whether a Container Apps workload can receive traffic only from internal callers such as APIs, jobs, service meshes, or workloads on connected networks. Teams see it in container apps ingress settings, managed environments. It is not external ingress, private endpoint for another service, App Service VNet integration, Kubernetes ingress, or an Azure Firewall rule; confusing them can create public exposure of internal services, unreachable APIs. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Container Apps
Intermediate
5 commands
Aliases: Container Apps internal ingress, private ingress, internal-only ingress, VNet ingress
Quick peek
Open full term page
Containers
premium
KEDA
KEDA is the Kubernetes Event-driven Autoscaling component that scales workloads based on external event sources and metrics, including scale-to-zero scenarios.
Autoscaling
intermediate
5 commands
Aliases: Kubernetes Event-driven Autoscaling, event-driven autoscaler, KEDA scaler, scaled object
Quick peek
Open full term page
Containers
premium
kubeconfig
kubeconfig is the client configuration that tells kubectl and related tools which Kubernetes cluster, user credential, context, and namespace to use. Microsoft Learn describes AKS access through credentials retrieved with az aks get-credentials, where context selection determines which cluster receives operational commands.
AKS access and administration
Intermediate
5 commands
Aliases: Kubernetes config file, AKS kubeconfig, kubectl configuration, cluster credentials
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
Containers
premium
Kubenet
Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes.
AKS networking
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes DaemonSet
A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services.
Kubernetes workloads
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Persistent Volume
A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StatefulSet
A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica.
Kubernetes workloads
Advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Version
Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster.
AKS lifecycle
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Minimum replicas
Minimum replicas is the lowest number of running replicas a scale controller or platform should maintain for a workload. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Azure Container Apps
intermediate
4 commands
Aliases: Container Apps minimum replicas, min replicas, minReplicas, scale floor
Quick peek
Open full term page
Containers
premium
Node label
A node label is a key-value marker placed on Kubernetes nodes. In AKS, labels are commonly applied at the node pool level so every node in that pool carries the same scheduling signal. Applications can then ask Kubernetes to run certain pods on nodes with matching labels. Plainly,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS node label, Kubernetes node label, node selector label
Quick peek
Open full term page
Containers
premium
Node pool
A node pool is a set of AKS worker nodes that share the same basic configuration. Think of it as a lane of machines inside one Kubernetes cluster. One pool might run system components, another might run user applications, and another might use GPU or high-memory machines. By.
Kubernetes
fundamentals
5 commands
Aliases: AKS node pool, Kubernetes node pool, worker node pool
Quick peek
Open full term page
Containers
premium
Node taint
A node taint is a scheduling rule placed on Kubernetes nodes. It tells the scheduler, do not put ordinary pods here unless they explicitly tolerate this condition. In AKS, taints are often applied at the node pool level so every node in that pool inherits the same placement rule. They are useful for keeping system workloads, GPU jobs, noisy batch work, or sensitive workloads away from general application pods. Taints do not move running pods by magic; they shape where new scheduling decisions are allowed.
AKS scheduling
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Pod
A pod is the smallest deployable unit in Kubernetes. In AKS, a pod runs one or more containers that share network identity, storage volumes, lifecycle, and scheduling context on a node, while higher-level controllers manage creation, replacement, scaling, and recovery behavior.
Kubernetes
fundamentals
5 commands
Aliases: Kubernetes pod, AKS pod, container pod
Quick peek
Open full term page
Containers
premium
Pod disruption budget
A pod disruption budget is a Kubernetes policy that limits how many matching pods can be voluntarily disrupted at one time. In AKS, it helps preserve availability during node drains, upgrades, and planned maintenance by enforcing minAvailable or maxUnavailable rules.
Azure Kubernetes Service
intermediate
5 commands
Aliases: PDB, Kubernetes pod disruption budget, AKS pod disruption budget
Quick peek
Open full term page
Containers
field-manual-complete
ACR token
An ACR token is a registry-scoped credential tied to a scope map, used when a non-Entra client needs limited access to selected repositories.
Azure Container Registry
intermediate
5 commands
Aliases: Azure Container Registry token, registry token, repository-scoped token
Quick peek
Open full term page
Containers
field-manual-complete
AKS cluster autoscaler
The AKS cluster autoscaler changes how many Kubernetes nodes are available in an Azure Kubernetes Service cluster. When pods are waiting because there is not enough room, it can add nodes to a node pool. When nodes sit underused, it can remove them safely after checks. It is not the same as scaling application replicas; it scales the infrastructure those replicas land on. Good settings keep workloads moving without leaving expensive virtual machines idle all week.
Azure Kubernetes Service
intermediate
5 commands
Aliases: cluster autoscaler, AKS node autoscaler, node pool autoscaler, CA on AKS
Quick peek
Open full term page
Containers
field-manual-complete
AKS egress
AKS egress is outbound network traffic from AKS nodes or workloads to destinations outside the pod or cluster network. AKS egress behavior is shaped by outbound type choices such as load balancer, NAT Gateway, or user-defined routes.
Azure Kubernetes Service networking
intermediate
3 commands
Aliases: AKS outbound traffic, cluster egress, AKS outbound type, pod egress
Quick peek
Open full term page
Containers
field-manual-complete
AKS network plugin
An AKS network plugin is the networking choice that decides how Kubernetes pods get IP addresses and how traffic moves inside an Azure Kubernetes Service cluster.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network plugin, aks network plugin
Quick peek
Open full term page
Containers
field-manual-complete
AKS node image
An AKS node image is the AKS-tested operating system image used by cluster nodes. Microsoft regularly publishes updated node images with security fixes, component updates, and bug fixes, and teams can upgrade node images separately from Kubernetes minor version upgrades.
AKS operations
Intermediate
5 commands
Aliases: AKS node image, aks-node-image, aks-cluster, aks-node, node-pool, aks-cluster-upgrade, aks-maintenance-window, kubernetes-version, aks-linux-node-pool, aks-windows-node-pool, node-image-upgrade, automatic-os-image-upgrade
Quick peek
Open full term page
Containers
field-manual-complete
AKS workload identity
AKS workload identity lets a pod sign in to Azure as an approved identity without storing a password, client secret, or long-lived key inside the container. You connect a Kubernetes service account to a Microsoft Entra application or managed identity through federation. When the pod runs, Azure trusts the service account token from the cluster OIDC issuer and issues access tokens for allowed resources. The result is cleaner secret handling for applications running in AKS.
AKS Identity
intermediate
5 commands
Aliases: Microsoft Entra Workload ID for AKS, pod workload identity, AKS OIDC federation
Quick peek
Open full term page
Containers
field-manual-complete
Container App environment
Microsoft Learn describes a Container Apps environment as a secure boundary around one or more container apps and jobs. The runtime manages the environment by handling OS upgrades, scale operations, failover procedures, resource balancing, shared networking, and observability settings for the workloads that run inside it.
Serverless containers
fundamentals
5 commands
Aliases: Container App environment, app-service-plan, azure-kubernetes-service, azure-monitor, container app environment, container-app-environment, container-apps, container-apps-ingress, container-apps-managed-environment, container-apps-revision, container-apps-secret, container-apps-workload-profile, managed-identity
Quick peek
Open full term page
Containers
verified
Container Apps certificate
A certificate used for TLS on a Container Apps custom domain.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
verified
Container Apps exec
An interactive command execution feature for a running Container App replica.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
verified
Container Apps log stream
A live log stream for a Container App replica or revision.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps managed environment
A Container Apps managed environment is the shared home where one or more Azure Container Apps and jobs run. It is not your container image or one app instance; it is the boundary around the runtime, networking, logging, certificates, Dapr settings, and workload profile capacity that those apps use. Teams choose an environment before creating.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps revision
Microsoft Learn explains that a Container Apps revision is created at first deployment and whenever revision-scope settings change. Revision mode controls whether one or multiple revisions stay active, enabling traffic splitting, labels, rollbacks, and safer updates without changing the whole container app resource. in controlled production releases.
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps revision, active-revision, container apps revision, container-app-environment, container-apps, container-apps-ingress, container-apps-revision, container-apps-traffic-split, container-image, container-image-digest, deployment-labels, deployment-slot, inactive-revision, keda
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps scale rule
A Container Apps scale rule tells Azure Container Apps when to run more or fewer replicas of an app revision. Instead of guessing capacity manually, you define a trigger such as HTTP concurrency, CPU, memory, Service Bus messages, Kafka lag, or another KEDA-supported event source. The rule works with minimum and maximum replica limits, so.
Azure Container Apps
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container Apps secret
Microsoft Learn describes Container Apps secrets as application-scoped values that can be stored directly or referenced from Azure Key Vault. Revisions can use them through environment variables, registry credentials, or scale rules, while managed identity controls access to Key Vault references. during application configuration and rotation.
Azure Container Apps
intermediate
5 commands
Aliases: Container Apps secret, app-service-app-setting, client-secret, container apps secret, container-apps, container-apps-environment-variable, container-apps-revision, container-apps-secret, container-registry, keda, key-vault, key-vault-access-policy, managed-identity, secret
Quick peek
Open full term page
Containers
field-manual-complete
Container image
A container image is the sealed package that a container runtime starts. It contains the application, runtime, libraries, filesystem layers, and metadata needed to create containers the same way each time. Teams push images to a registry and then reference them from.
Container images
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Container registry
A container registry is the place where teams keep the container images they build and deploy. In Azure, this usually means Azure Container Registry, a private service that stores repositories, tags, image manifests, Helm charts, and other OCI artifacts. Developers push images.
Container registry
fundamentals
5 commands
Aliases: ACR, Azure Container Registry
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Namespace
A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster.
Kubernetes organization
Beginner
5 commands
Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search