Skip to main content

Glossary

A fast reference. Deeper explanations live in Concepts and Architecture.

Product & brand​

  • DevsPortal — the white-label internal developer platform product.
  • Control Plane Operator — the engine DevsPortal is built on. You'll see openchoreo.* names in Kubernetes resources, the API, and the CLI; they are unchanged internals.
  • Fedshi — customer #1 and the reference instance used throughout these docs.
  • White-label — the capability to brand the same engine differently per customer (logo, colors, domain, identity, social previews). See White-label model.

Core abstractions​

  • Project — a team's bounded context; a logical group of related components. Becomes an isolated runtime cell.
  • Component — a deployable unit of software; references a ComponentType.
  • Workload — a component's runtime contract: image, endpoints, dependencies.
  • Endpoint — a network interface a component exposes, with a visibility level.
  • Dependency — a declared link to another Endpoint or a Resource.
  • Resource — a declared dependency on managed infrastructure (DB, queue, cache…).
  • ComponentType — a template governing how components deploy.
  • Trait — a composable capability attached to a component.
  • ResourceType — a template for provisioning managed infrastructure.
  • Workflow / WorkflowRun — a CI/automation template and a single execution of it.
  • Environment — a delivery stage (dev/staging/prod) mapped to a Data plane.
  • DeploymentPipeline — the promotion paths across environments.
  • ComponentRelease / ResourceRelease — immutable snapshots of a component/resource.
  • ReleaseBinding / ResourceReleaseBinding — binds a release to an environment with overrides.
  • RenderedRelease — the final Kubernetes resources applied to a Data plane.
  • AuthzRole / AuthzRoleBinding — role-based access control definitions.

The planes​

  • Control plane — the orchestration core (API, controllers, cluster gateway, CRDs).
  • Data plane — where workloads run.
  • Workflow plane — where CI/builds execute (Argo Workflows by default).
  • Observability plane — collects logs/metrics/traces; exposes the Observer API.
  • Cluster gateway — the control-plane hub other planes dial into over mTLS.
  • Cluster agent — the outbound connector running on each non-control plane.
  • Cell — a Project's isolated runtime boundary (namespace + network policies).

Supporting infrastructure (reference instance)​

  • Backstage — the developer portal the console is built on.
  • ThunderID — the OAuth2/OIDC identity provider.
  • Harbor — the container registry.
  • OpenBao — the secret backend (synced into the cluster via External Secrets).
  • cert-manager — issues TLS certificates (Let's Encrypt via Cloudflare DNS-01).
  • kgateway — the Kubernetes Gateway API implementation used by the gateways.
  • occ — the Control Plane Operator command-line interface.