Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 80 matching terms. Narrow the search to reduce the list.
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes DaemonSet
A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services.
Kubernetes workloads
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Persistent Volume
A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StatefulSet
A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica.
Kubernetes workloads
Advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Version
Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster.
AKS lifecycle
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Namespace
A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster.
Kubernetes organization
Beginner
5 commands
Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Service
Microsoft Learn explains that Kubernetes Services in AKS expose applications through service types such as ClusterIP, NodePort, LoadBalancer, and ExternalName. LoadBalancer Services can create Azure load balancer resources, while internal load balancers use private IP addresses for restricted access. in production AKS clusters.
Kubernetes networking
intermediate
5 commands
Aliases: Kubernetes Service, aks-cluster, aks-ingress-controller, aks-network-policy, azure-kubernetes-service, ingress, kubernetes service, kubernetes-deployment, kubernetes-namespace, kubernetes-service, load-balancer, load-balancer-backend-pool, node-pool
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
Containers
premium
Event-driven job
An Event-driven job in Azure Container Apps starts job executions when a configured scale rule detects work from an event source. Teams use it to run finite container work such as queue processing, batch enrichment, report generation, or cleanup only when events or messages are waiting. It is not a continuously running container app, an AKS deployment, a scheduled job, or a guarantee that every event is processed exactly once. In production, confirm job trigger type, scale rule, minimum and maximum executions, polling interval, image version, secret references, managed identity, execution status, logs, retries, and queue depth before treating the.
Azure Container Apps
intermediate
6 commands
Aliases: Container Apps event-driven job, KEDA job, event-triggered container job
Quick peek
Open full term page
Containers
premium
Event-driven scale rule
An Event-driven scale rule is a Container Apps scaling configuration that uses event-source metrics to decide how many replicas or job executions to run. Teams use it to connect queue length, event backlog, HTTP load, Kafka lag, or other scaler metadata to automatic scaling decisions. It is not the event source itself, a Kubernetes HPA object, a fixed replica count, or a complete guarantee that the application processes events correctly. In production, confirm scaler type, metadata names, authentication method, min and max replicas, polling interval, cooldown behavior, event source metrics, container revision, and downstream capacity before treating the design as.
Azure Container Apps
intermediate
6 commands
Aliases: KEDA scale rule, Container Apps event scale rule, custom scale rule
Quick peek
Open full term page
Identity
premium
Federated credential
A Federated credential is a Microsoft Entra trust configuration that allows a workload to exchange a token from an external identity provider for an Entra access token without using a stored secret. Teams use it to let approved external workloads such as pipelines, automation systems, or Kubernetes workloads authenticate to Azure using signed tokens instead of long-lived client secrets. It is not a user password, general RBAC grant, certificate, managed identity by itself, or permission to access Azure resources without matching issuer, subject, audience, and role assignment controls.
Workload identity
intermediate
6 commands
Aliases: workload federated credential, OIDC credential, external identity federation credential, federated trust credential
Quick peek
Open full term page
Containers
premium
Flux extension
The Flux extension is the microsoft.flux Kubernetes cluster extension for Azure Kubernetes Service or Azure Arc-enabled Kubernetes that installs Flux v2 controllers for GitOps reconciliation. Teams use it to sync Git, OCI, Helm, or Kustomize sources to Kubernetes clusters so desired configuration is versioned, reconciled, audited, and applied consistently across AKS and Arc-enabled environments. It is not a CI pipeline by itself, a replacement for cluster security, a guarantee that every manifest is safe, or a reason to let unreviewed repository changes modify production clusters.
Kubernetes GitOps
intermediate
6 commands
Aliases: microsoft.flux extension, GitOps Flux extension, AKS Flux extension, Azure Arc Flux extension
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
Containers
premium
ACR manifest
An ACR manifest is the record behind an image tag. It describes the image layers and configuration, and its digest is the exact content identity. Tags can move, but a manifest digest is what proves the precise image version.
Azure Container Registry
intermediate
5 commands
Aliases: ACR
Quick peek
Open full term page
Containers
premium
ACR repository
An ACR repository is the named place inside Azure Container Registry where related container images or OCI artifacts live. A repository is not the whole registry; it is one lane inside it, such as payments-api or base/python. Each.
Azure Container Registry
fundamentals
5 commands
Aliases: Azure Container Registry repository, container registry repository, image repository
Quick peek
Open full term page
Containers
premium
AKS cluster
Microsoft Learn describes Azure Kubernetes Service as a managed Kubernetes service for deploying and managing containerized applications. An AKS cluster provides the managed Kubernetes control plane, node pools, networking, identity, scaling, and Azure integration points for running containers in Azure production environments.
Azure Kubernetes Service
fundamentals
5 commands
Aliases: Azure Kubernetes cluster, AKS managed cluster, Kubernetes cluster in Azure
Quick peek
Open full term page
Containers
premium
AKS ingress controller
Microsoft Learn explains AKS ingress through Kubernetes ingress resources and controllers that route HTTP or HTTPS traffic to services in a cluster. AKS application routing options can configure ingress controllers, DNS integration, TLS handling, and related networking components for production applications.
AKS networking
intermediate
5 commands
Aliases: AKS ingress, Ingress controller for AKS, Kubernetes ingress controller
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS maintenance window
An AKS maintenance window is a planned maintenance configuration that controls when AKS starts certain cluster and node image upgrade operations. It helps teams align automatic upgrades and maintenance-sensitive changes with approved business windows, while Azure platform maintenance for underlying infrastructure remains separate.
AKS operations
Intermediate
5 commands
Aliases: Azure Kubernetes Service maintenance window, aks maintenance window
Quick peek
Open full term page
Containers
premium
AKS managed identity
An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets.
AKS identity
Intermediate
5 commands
Aliases: Azure Kubernetes Service managed identity, aks managed identity
Quick peek
Open full term page
Containers
premium
AKS network policy
An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network policy, aks network policy
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Containers
premium
API server authorized IP ranges
API server authorized IP ranges are an AKS security setting that limits who can reach the Kubernetes control-plane endpoint. Instead of letting any public IP attempt a connection to the API server, the cluster allows only specified public CIDR ranges, such as corporate VPN, jump-host, automation,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS API server authorized IP ranges, authorized API server IP ranges
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
Containers
premium
Image pull secret
Image pull secret is a Kubernetes secret that stores registry credentials so pods can pull private container images at deployment time.
Azure Container Registry
intermediate
5 commands
Aliases: Image pull secret, image pull secret, image-pull-secret
Quick peek
Open full term page
Networking
premium
Ingress
Ingress controls how users, APIs, partners, and internal services can reach a workload and which network controls protect that entry point. Teams see it in container apps ingress settings, kubernetes ingress controllers. It is not egress, a firewall rule alone, a load balancer backend pool, or an application route inside code; confusing them can create public exposure, unreachable apps. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Application Networking
Fundamentals
5 commands
Aliases: incoming application traffic, inbound app traffic, Container Apps ingress, external ingress, internal ingress
Quick peek
Open full term page
Containers
premium
Internal ingress
Internal ingress controls whether a Container Apps workload can receive traffic only from internal callers such as APIs, jobs, service meshes, or workloads on connected networks. Teams see it in container apps ingress settings, managed environments. It is not external ingress, private endpoint for another service, App Service VNet integration, Kubernetes ingress, or an Azure Firewall rule; confusing them can create public exposure of internal services, unreachable APIs. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Container Apps
Intermediate
5 commands
Aliases: Container Apps internal ingress, private ingress, internal-only ingress, VNet ingress
Quick peek
Open full term page
Internet of Things
premium
IoT Edge
IoT Edge is the Azure IoT runtime and deployment pattern that runs cloud-managed container modules on local edge devices while communicating with IoT Hub.
Edge computing
intermediate
5 commands
Aliases: Azure IoT Edge, IoT Edge runtime, edge modules, edgeAgent, edgeHub, edge device
Quick peek
Open full term page
Containers
premium
KEDA
KEDA is the Kubernetes Event-driven Autoscaling component that scales workloads based on external event sources and metrics, including scale-to-zero scenarios.
Autoscaling
intermediate
5 commands
Aliases: Kubernetes Event-driven Autoscaling, event-driven autoscaler, KEDA scaler, scaled object
Quick peek
Open full term page
Containers
premium
kubeconfig
kubeconfig is the client configuration that tells kubectl and related tools which Kubernetes cluster, user credential, context, and namespace to use. Microsoft Learn describes AKS access through credentials retrieved with az aks get-credentials, where context selection determines which cluster receives operational commands.
AKS access and administration
Intermediate
5 commands
Aliases: Kubernetes config file, AKS kubeconfig, kubectl configuration, cluster credentials
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
Containers
premium
Kubenet
Kubenet is an AKS network plugin where nodes receive virtual network IP addresses and pods receive IP addresses from a separate pod CIDR, with routing handled through user-defined routes.
AKS networking
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Node label
A node label is a key-value marker placed on Kubernetes nodes. In AKS, labels are commonly applied at the node pool level so every node in that pool carries the same scheduling signal. Applications can then ask Kubernetes to run certain pods on nodes with matching labels. Plainly,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS node label, Kubernetes node label, node selector label
Quick peek
Open full term page
Containers
premium
Node pool
A node pool is a set of AKS worker nodes that share the same basic configuration. Think of it as a lane of machines inside one Kubernetes cluster. One pool might run system components, another might run user applications, and another might use GPU or high-memory machines. By.
Kubernetes
fundamentals
5 commands
Aliases: AKS node pool, Kubernetes node pool, worker node pool
Quick peek
Open full term page
Containers
premium
Pod
A pod is the smallest deployable unit in Kubernetes. In AKS, a pod runs one or more containers that share network identity, storage volumes, lifecycle, and scheduling context on a node, while higher-level controllers manage creation, replacement, scaling, and recovery behavior.
Kubernetes
fundamentals
5 commands
Aliases: Kubernetes pod, AKS pod, container pod
Quick peek
Open full term page
Containers
premium
Pod disruption budget
A pod disruption budget is a Kubernetes policy that limits how many matching pods can be voluntarily disrupted at one time. In AKS, it helps preserve availability during node drains, upgrades, and planned maintenance by enforcing minAvailable or maxUnavailable rules.
Azure Kubernetes Service
intermediate
5 commands
Aliases: PDB, Kubernetes pod disruption budget, AKS pod disruption budget
Quick peek
Open full term page
Management and Governance
premium
Policy definition mode
Policy definition mode tells Azure Policy what kind of resources the policy should evaluate. The all mode evaluates resource groups, subscriptions, and resource types. The indexed mode focuses on resource types that support tags and location, which is useful for tag and location policies. Some built-in policies use resource provider modes for deeper surfaces such as Kubernetes or Key Vault data. Choosing the wrong mode can make a policy miss resources, mark the wrong resources non-compliant, or fail to behave the way authors expect.
Azure Policy
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Integration
premium
API Management self-hosted gateway
An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability..
Application delivery and API edge
intermediate
4 commands
Aliases: APIM self-hosted gateway, self-hosted API gateway
Quick peek
Open full term page
Web
premium
App Service
Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
4 commands
Aliases: App Service, app service
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc
A hybrid and multicloud management platform that extends Azure governance, security, operations, and services to resources running outside Azure.
Hybrid management
fundamentals
4 commands
Aliases: Arc, Arc-enabled infrastructure, Azure Arc hybrid management
Quick peek
Open full term page
Containers
premium
Azure CNI
An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks.
Kubernetes networking
fundamentals
4 commands
Aliases: Azure Container Networking Interface
Quick peek
Open full term page
Containers
premium
Azure CNI Overlay
An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space.
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS overlay networking
Quick peek
Open full term page
Storage
premium
Azure Container Storage
A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes.
Container storage
intermediate
4 commands
Aliases: ACS for containers
Quick peek
Open full term page
Containers
premium
Dapr
Dapr is a distributed application runtime that gives microservices common building-block APIs for service invocation, pub/sub, bindings, state, workflows, and observability.
Distributed applications
intermediate
4 commands
Aliases: Dapr, DAPR
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search