Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 360 matching terms. Narrow the search to reduce the list.
Containers
premium
Kubernetes Deployment
A Kubernetes Deployment is a workload controller that declaratively manages ReplicaSets and pods for stateless applications.
Kubernetes workloads
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes DaemonSet
A Kubernetes DaemonSet is a workload controller that ensures a copy of a pod runs on selected nodes, commonly for logging agents, monitoring collectors, security agents, and node-level services.
Kubernetes workloads
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StatefulSet
A Kubernetes StatefulSet is a workload controller for stateful applications that require stable network identities, ordered deployment or scaling, and persistent storage per replica.
Kubernetes workloads
Advanced
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Federated credential
A Federated credential is a Microsoft Entra trust configuration that allows a workload to exchange a token from an external identity provider for an Entra access token without using a stored secret. Teams use it to let approved external workloads such as pipelines, automation systems, or Kubernetes workloads authenticate to Azure using signed tokens instead of long-lived client secrets. It is not a user password, general RBAC grant, certificate, managed identity by itself, or permission to access Azure resources without matching issuer, subject, audience, and role assignment controls.
Workload identity
intermediate
6 commands
Aliases: workload federated credential, OIDC credential, external identity federation credential, federated trust credential
Quick peek
Open full term page
Containers
premium
AKS Linux node pool
An AKS Linux node pool is a group of Linux-based nodes with shared configuration that runs Kubernetes workloads in an AKS cluster. Node pools let teams separate system components, application workloads, VM sizes, zones, scaling behavior, taints, labels, and upgrade settings.
AKS compute
Intermediate
5 commands
Aliases: Azure Kubernetes Service Linux node pool, aks linux node pool
Quick peek
Open full term page
Containers
premium
AKS network policy
An AKS network policy is a Kubernetes traffic-control policy used to restrict pod communication in Azure Kubernetes Service.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network policy, aks network policy
Quick peek
Open full term page
Storage
premium
Azure Container Storage
A cloud-based volume management, deployment, and orchestration service built natively for containers and integrated with Kubernetes persistent volumes.
Container storage
intermediate
4 commands
Aliases: ACS for containers
Quick peek
Open full term page
Containers
premium
AKS Azure Policy add-on
The AKS Azure Policy add-on integrates Azure Policy with an AKS cluster so policy assignments can audit or enforce Kubernetes rules through in-cluster policy components and report compliance back to Azure Policy.
Azure Kubernetes Service
intermediate
3 commands
Aliases: Azure Policy add-on for AKS, AKS policy add-on, Gatekeeper add-on, Azure Policy for Kubernetes
Quick peek
Open full term page
Containers
field-manual-complete
AKS workload identity
AKS workload identity lets a pod sign in to Azure as an approved identity without storing a password, client secret, or long-lived key inside the container. You connect a Kubernetes service account to a Microsoft Entra application or managed identity through federation. When the pod runs, Azure trusts the service account token from the cluster OIDC issuer and issues access tokens for allowed resources. The result is cleaner secret handling for applications running in AKS.
AKS Identity
intermediate
5 commands
Aliases: Microsoft Entra Workload ID for AKS, pod workload identity, AKS OIDC federation
Quick peek
Open full term page
DevOps
verified
OIDC federation
OIDC federation in Azure uses workload identity federation to let external workloads exchange trusted identity-provider tokens for Microsoft identity platform access tokens. It removes long-lived secrets for supported scenarios such as GitHub Actions, Kubernetes workloads, Azure Pipelines, and other external compute platforms.
CI/CD security
fundamentals
5 commands
Aliases: OpenID Connect federation, workload identity federation, federated identity credential, secretless CI/CD authentication
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Containers
premium
Kubernetes Persistent Volume
A Kubernetes Persistent Volume is cluster storage provisioned for pods and bound through persistent volume claims so data can outlive individual pod restarts, rescheduling, or replacements.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes StorageClass
A Kubernetes StorageClass defines how persistent storage is dynamically provisioned for persistent volume claims, including the driver, performance tier, reclaim policy, and binding behavior.
Kubernetes storage
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
Kubernetes Version
Kubernetes Version is the control plane and node version level that determines supported Kubernetes APIs, feature availability, security patches, and upgrade requirements for a cluster.
AKS lifecycle
Intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Namespace
A Kubernetes Namespace is a logical boundary used to organize namespaced resources, separate teams or environments, and apply scoped policy, access, and quota controls inside a cluster.
Kubernetes organization
Beginner
5 commands
Aliases: Kubernetes Namespace, kubernetes-namespace, azure-kubernetes-service, kubernetes-deployment, kubernetes-service, aks-network-policy, rbac, image-pull-secret, pod, kubeconfig, node-pool, resource-group, aks-cluster
Quick peek
Open full term page
Containers
field-manual-complete
Kubernetes Service
Microsoft Learn explains that Kubernetes Services in AKS expose applications through service types such as ClusterIP, NodePort, LoadBalancer, and ExternalName. LoadBalancer Services can create Azure load balancer resources, while internal load balancers use private IP addresses for restricted access. in production AKS clusters.
Kubernetes networking
intermediate
5 commands
Aliases: Kubernetes Service, aks-cluster, aks-ingress-controller, aks-network-policy, azure-kubernetes-service, ingress, kubernetes service, kubernetes-deployment, kubernetes-namespace, kubernetes-service, load-balancer, load-balancer-backend-pool, node-pool
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Containers
learning-path-anchor
System node pool
A system node pool is the AKS worker pool that keeps the cluster itself functioning. It hosts core Kubernetes and AKS add-on pods such as DNS, networking agents, metrics, and connectivity components. You can technically run application pods there, but experienced teams avoid that because noisy workloads can starve the services that make the...
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS system pool, system mode node pool, AKS platform node pool, kube-system node pool
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Local
Azure Local is Microsoft’s distributed infrastructure solution that extends Azure capabilities to customer-owned environments for local VMs, containers, and selected Azure services through Azure Arc.
Distributed infrastructure
advanced
6 commands
Aliases: Azure Stack HCI, Azure Local infrastructure, Arc-enabled local infrastructure
Quick peek
Open full term page
Containers
premium
AKS node
Microsoft Learn explains that AKS nodes are the virtual machines that run your containerized applications, grouped into node pools with the same configuration. System node pools host core cluster pods, while user node pools typically host application workloads and can differ by size, operating system, taints, or purpose.
AKS compute
intermediate
5 commands
Aliases: AKS cluster node, Kubernetes node in AKS, AKS VM node
Quick peek
Open full term page
Containers
premium
AKS private cluster
Microsoft Learn describes a private AKS cluster as an Azure Kubernetes Service cluster whose API server uses internal IP addresses and Private Link-based connectivity. The design keeps control-plane traffic between the API server and node pools on private networking, with DNS configuration required for administrators and automation.
AKS networking
advanced
5 commands
Aliases: Azure Kubernetes Service private cluster, aks private cluster
Quick peek
Open full term page
Containers
premium
Container Apps
A serverless Azure service for running containerized apps and jobs without directly operating Kubernetes clusters.
Serverless containers
fundamentals
5 commands
Aliases: Azure Container Apps
Quick peek
Open full term page
Containers
premium
Internal ingress
Internal ingress controls whether a Container Apps workload can receive traffic only from internal callers such as APIs, jobs, service meshes, or workloads on connected networks. Teams see it in container apps ingress settings, managed environments. It is not external ingress, private endpoint for another service, App Service VNet integration, Kubernetes ingress, or an Azure Firewall rule; confusing them can create public exposure of internal services, unreachable APIs. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Container Apps
Intermediate
5 commands
Aliases: Container Apps internal ingress, private ingress, internal-only ingress, VNet ingress
Quick peek
Open full term page
Containers
premium
KEDA
KEDA is the Kubernetes Event-driven Autoscaling component that scales workloads based on external event sources and metrics, including scale-to-zero scenarios.
Autoscaling
intermediate
5 commands
Aliases: Kubernetes Event-driven Autoscaling, event-driven autoscaler, KEDA scaler, scaled object
Quick peek
Open full term page
Containers
premium
Node label
A node label is a key-value marker placed on Kubernetes nodes. In AKS, labels are commonly applied at the node pool level so every node in that pool carries the same scheduling signal. Applications can then ask Kubernetes to run certain pods on nodes with matching labels. Plainly,.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS node label, Kubernetes node label, node selector label
Quick peek
Open full term page
Containers
premium
Node pool
A node pool is a set of AKS worker nodes that share the same basic configuration. Think of it as a lane of machines inside one Kubernetes cluster. One pool might run system components, another might run user applications, and another might use GPU or high-memory machines. By.
Kubernetes
fundamentals
5 commands
Aliases: AKS node pool, Kubernetes node pool, worker node pool
Quick peek
Open full term page
Storage
learning-path-anchor
Sync group
A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business...
Files, queues, and tables
fundamentals
6 commands
Aliases: Azure File Sync group, file sync group, sync topology, storage sync group
Quick peek
Open full term page
Integration
premium
API Management self-hosted gateway
An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability..
Application delivery and API edge
intermediate
4 commands
Aliases: APIM self-hosted gateway, self-hosted API gateway
Quick peek
Open full term page
Web
premium
App Service
Azure App Service is a managed HTTP-based platform for hosting web apps, REST APIs, and mobile back ends without managing the underlying servers. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
4 commands
Aliases: App Service, app service
Quick peek
Open full term page
Containers
premium
Azure CNI
An AKS networking approach where CNI plugins assign pod addresses, route pod traffic, and integrate Kubernetes networking with Azure virtual networks.
Kubernetes networking
fundamentals
4 commands
Aliases: Azure Container Networking Interface
Quick peek
Open full term page
Containers
premium
Azure CNI Overlay
An AKS networking mode that assigns pods private overlay CIDR addresses while nodes use VNet IPs, conserving subnet address space.
Azure Kubernetes Service
intermediate
4 commands
Aliases: AKS overlay networking
Quick peek
Open full term page
Containers
premium
Defender for Containers
Microsoft Defender for Containers is a Defender for Cloud plan that provides security posture, vulnerability assessment, and threat protection for containerized assets such as Kubernetes clusters, workloads, registries, and images.
Azure Kubernetes Service
intermediate
4 commands
Aliases: Microsoft Defender for Containers, container protection plan, Defender container security
Quick peek
Open full term page
Containers
premium
Helm
Helm is a Kubernetes package manager that deploys applications using charts, values files, and release history, including workloads running on AKS.
AKS
beginner
4 commands
Aliases: Helm charts, Kubernetes Helm, Helm
Quick peek
Open full term page
Containers
premium
Node taint
A node taint is a scheduling rule placed on Kubernetes nodes. It tells the scheduler, do not put ordinary pods here unless they explicitly tolerate this condition. In AKS, taints are often applied at the node pool level so every node in that pool inherits the same placement rule. They are useful for keeping system workloads, GPU jobs, noisy batch work, or sensitive workloads away from general application pods. Taints do not move running pods by magic; they shape where new scheduling decisions are allowed.
AKS scheduling
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
AKS add-on
An AKS add-on is a Microsoft-supported capability that can be enabled on an Azure Kubernetes Service cluster to add functionality such as monitoring, policy, ingress, or security integration, with installation and lifecycle managed through AKS.
Azure Kubernetes Service
fundamentals
3 commands
Aliases: AKS addon, Azure Kubernetes Service add-on, managed AKS integration, AKS integration
Quick peek
Open full term page
Containers
premium
AKS cluster upgrade
An AKS cluster upgrade moves an AKS cluster and its node pools to a newer supported Kubernetes version or updates node images after checking available versions, planning surge capacity, and validating workload readiness.
Azure Kubernetes Service
intermediate
3 commands
Aliases: AKS upgrade, Kubernetes version upgrade, AKS node upgrade, cluster version upgrade
Quick peek
Open full term page
Containers
premium
AKS Windows node pool
An AKS Windows node pool is a group of Windows Server worker nodes in an AKS cluster, used to run Windows container workloads while Linux pools continue to host core Kubernetes system components.
AKS
intermediate
3 commands
Aliases: Windows node pool, Windows Server node pool, AKS Windows containers
Quick peek
Open full term page
Containers
premium
Container group
the Azure Container Instances unit where containers share scheduling, lifecycle, local network, exposed endpoints, resources, and storage volumes
Serverless containers
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks model serving
A managed serving endpoint pattern for exposing Databricks models or AI workloads for online inference with operational controls.
Databricks
intermediate
4 commands
Aliases: Databricks Model Serving, serving endpoint, model serving endpoint
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks Photon
The native vectorized Azure Databricks engine for accelerating eligible SQL, DataFrame, ETL, and streaming workloads.
Databricks
intermediate
4 commands
Aliases: Photon engine, Photon acceleration, Databricks vectorized engine
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks secret scope
A named Databricks collection of secrets used to store credentials and grant controlled read or manage access to workloads.
Databricks
fundamentals
4 commands
Aliases: Databricks secrets scope, secret scope, Azure Databricks secrets
Quick peek
Open full term page
Analytics
learning-path-anchor
Databricks SQL warehouse
A Databricks SQL compute resource for interactive queries, dashboards, BI tools, and governed analytics workloads.
Databricks
intermediate
4 commands
Aliases: SQL warehouse, Databricks SQL compute, serverless SQL warehouse
Quick peek
Open full term page
Databases
learning-path-anchor
Cosmos DB dedicated gateway
Azure Cosmos DB dedicated gateway is provisioned server-side compute that fronts an account and enables the integrated cache for supported NoSQL workloads.
Azure Cosmos DB
fundamentals
3 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workload classifier
A Synapse workload classifier is a dedicated SQL pool workload management rule that assigns incoming requests to a workload group and importance level. It can classify by user or role, query label, session context, and time window so different workloads receive different resource behavior.
Synapse Analytics
fundamentals
3 commands
Aliases: workload classifier in Synapse, dedicated SQL pool classifier, CREATE WORKLOAD CLASSIFIER, Synapse classification rule
Quick peek
Open full term page
DevOps
template-specs-upgraded
Rolling upgrade
AKS node-pool upgrade pattern that drains and replaces nodes in controlled batches to protect workload availability.
Deployment workflows
intermediate
6 commands
Aliases: AKS rolling upgrade, node pool rolling upgrade, rolling node upgrade, AKS node pool upgrade, Kubernetes rolling upgrade
Quick peek
Open full term page
Containers
field-manual-complete
AKS cluster autoscaler
The AKS cluster autoscaler changes how many Kubernetes nodes are available in an Azure Kubernetes Service cluster. When pods are waiting because there is not enough room, it can add nodes to a node pool. When nodes sit underused, it can remove them safely after checks. It is not the same as scaling application replicas; it scales the infrastructure those replicas land on. Good settings keep workloads moving without leaving expensive virtual machines idle all week.
Azure Kubernetes Service
intermediate
5 commands
Aliases: cluster autoscaler, AKS node autoscaler, node pool autoscaler, CA on AKS
Quick peek
Open full term page
Containers
field-manual-complete
AKS network plugin
An AKS network plugin is the networking choice that decides how Kubernetes pods get IP addresses and how traffic moves inside an Azure Kubernetes Service cluster.
AKS networking
Intermediate
5 commands
Aliases: Azure Kubernetes Service network plugin, aks network plugin
Quick peek
Open full term page
Containers
field-manual-complete
Container App environment
Microsoft Learn describes a Container Apps environment as a secure boundary around one or more container apps and jobs. The runtime manages the environment by handling OS upgrades, scale operations, failover procedures, resource balancing, shared networking, and observability settings for the workloads that run inside it.
Serverless containers
fundamentals
5 commands
Aliases: Container App environment, app-service-plan, azure-kubernetes-service, azure-monitor, container app environment, container-app-environment, container-apps, container-apps-ingress, container-apps-managed-environment, container-apps-revision, container-apps-secret, container-apps-workload-profile, managed-identity
Quick peek
Open full term page
Containers
verified
Registry private endpoint
A registry private endpoint lets workloads reach Azure Container Registry through private network addressing instead of the public registry endpoint. Your registry remains a managed Azure service, but clients such as AKS nodes, self-hosted build agents, virtual machines, or container platforms connect
Azure Container Registry
intermediate
5 commands
Aliases: ACR private endpoint, Azure Container Registry Private Link, private registry endpoint, container registry private endpoint
Quick peek
Open full term page
Containers
field-manual-complete
User node pool
An AKS node pool intended to host user application workloads.
Azure Kubernetes Service
intermediate
5 commands
Aliases: AKS user pool, application node pool, user mode node pool
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search