Internal Glossary

Use this page when an internal docs page mentions a platform or infrastructure term you do not recognize.

The goal is not to replace the deeper reference docs. It is to give each unfamiliar term a short plain-language anchor and a stable link target.

AWS Secrets Manager

The AWS service that stores shared secret values before they are copied into Kubernetes.

ArgoCD

The GitOps deployment system that keeps the cluster aligned with what is committed in Git.

Application Resource

The Kubernetes object ArgoCD uses to describe how one deployable component should be synced.

cert-manager

The controller that requests, renews, and stores TLS certificates inside Kubernetes.

ClusterIP Service

A Kubernetes service that is reachable only from inside the cluster.

ClusterIssuer

The cluster-wide cert-manager object that knows how to obtain certificates.

CrashLoopBackOff

A Kubernetes restart state where a container keeps crashing and retries are spaced farther apart.

Cursor Pagination

A pagination style that returns opaque cursor tokens instead of page numbers.

DNS-01

A certificate-validation method that proves domain control by creating DNS records.

DOKS

DigitalOcean Kubernetes, the managed Kubernetes service used for the Crawbl cluster.

DOCR

DigitalOcean Container Registry, where Crawbl stores container images.

Envoy Gateway

The public gateway that receives incoming traffic and routes it to internal services.

External Secrets Operator

The controller that copies secrets from AWS Secrets Manager into Kubernetes Secrets.

external-dns

The controller that creates and updates DNS records from Kubernetes or gateway resources.

FCM

Firebase Cloud Messaging, used for device push notifications.

Firebase JWT

The signed Firebase identity token used to authenticate a user request.

GitOps

An operations model where Git is the source of truth for live cluster state.

Helm Chart

A packaged set of Kubernetes templates and values used to deploy an application.

HMAC

A shared-secret signature scheme used to prove a request came from a trusted client.

HTTPRoute

The routing rule that tells the gateway which hostname and path should reach which service.

JWKS

The public-key document a provider publishes so other systems can verify token signatures.

Metacontroller

A controller framework used to create and clean up user runtime resources from custom resources.

OAuth

The delegated login and consent flow used to connect external apps without storing user passwords.

Pulumi

The infrastructure-as-code tool that creates the cluster and foundational platform resources.

PVC

A PersistentVolumeClaim, which requests persistent storage for a workload.

SecurityPolicy

The gateway rule that validates bearer tokens before traffic reaches the backend.

Socket.IO

The realtime transport layer used to push events from the backend to connected clients.

StatefulSet

The Kubernetes workload type used when pods need stable identities and persistent storage.

Sync Wave

The deployment order number ArgoCD uses to make dependent apps start in sequence.

UserSwarm

The Crawbl custom resource that represents one user runtime and its lifecycle.