Glossary

This glossary clarifies the common terms you’ll find while reviewing our docs, managing deployments, and operating production services on Diploi.

A · B · C · D · E · F · G · H · I · J · K · L · M · N · O · P · Q · R · S · T · U · V · W · X · Y · Z

A

Add-on

A managed service that can run databases, caches, or message brokers. In Diploi, users can attach add-ons to projects within the private network of the project and exposes credentials to components through the console.

Access Token

A short-lived credential that grants programmatic access to APIs or CLIs without sharing a human password.

See also: Project, User Role

Astro

A static-first web framework built for content-driven sites with selective hydration.

See also: More about components, Component

Audit Log

A chronological record of operational and security events across your systems.

See also: Project, Owner Role

B

Backup Policy

A set of rules defining how and when data snapshots are retained.

See also: Add-on, Failover Plan

Base Image

A foundational filesystem layer used to build container images. Diploi creates and maintains base images for components and add-ons to ensure consistent environments.

See also: Container Image

Build Pipeline

An automated sequence that compiles, tests, and packages your code. Diploi automatically generates a pipeline, through GitHub Actions when a new project is created.

See also: CI/CD, GitHub Actions

Branch Protection

Repository rules that restrict who can push or merge into specific branches.

C

Component

In Diploi, Components are services that execute code programmatically using a specific framework or runtime. Components are run as pods within an app cluster deployment.

See also: More about components, Stack, Pod, Cluster

Container Image

An immutable package containing application code, runtime, and dependencies. Diploi builds container images via GitHub Actions and stores them in an image registry.

See also: Image Registry, GitHub Actions

CI/CD

Continuous integration and delivery practices that automate testing and deployment. Diploi creates a default CI/CD workflows that run on GitHub Actions for all projects hosted.

CNAME

A DNS record that aliases one domain name to another host. In Diploi, custom domains use a CNAME pointing to edge.diploi.com for Diploi-managed endpoints.

See also: How to add a custom domain, DNS

Custom Domain

A human-friendly address that you configure to serve your application. Diploi provisions certificates and routing once you map a custom domain to the deployment’s endpoint.

See also: CNAME, SSL/TLS

Cluster

A coordinated set of compute resources managed by Kubernetes. In Diploi, each deployment runs on its own single-node Kubernetes cluster managed by Diploi.

D

Deployment

A released instance of your application that users can access. A deployment contains every component, add-on, and environment for a project stage. In Diploi, the components that are part of a deployment are always accessible online via its endpoints.

Deployment Stage (Development/Staging/Production)

A lifecycle progression that separates code promotion into Development, Staging, and Production environments.

See also: Deployment, Repository Launch

Development Container

Also known as Dev Container, is a container configured to run a development environment to work with a specific codebase. It can be configured with Docker or config files. In Diploi, Dev Containers are used to allow users to connect to code directly from their browser or connecting to the dev container via SSH with their local IDE.

diploi.yaml

A declarative manifest that defines project components, add-ons, environments, and automation. In Diploi, diploi.yaml drives provisioning, stack composition, and env import rules for every deployment.

See also: More about diploi.yaml, Stack

DNS

The system that translates domain names into IP addresses.

See also: CNAME, Endpoint

Drift Detection

The process of spotting differences between declared infrastructure and the actual runtime state.

See also: Status Tree, Deployment

E

Endpoint

A network-accessible URL or socket where a service listens for requests. Diploi assigns endpoints per component and deployment, with the option of assigning a custom domain to each component’s endpoint.

Environment Variable Import

Also known as ENV Variable Import, it is a configuration pattern that pulls environment values from an external source into your application. In Diploi, ENV variables can be shared between components and add-ons by declaring it on the diploi.yaml file.

Error Budget

The acceptable amount of downtime or failures within a service-level objective.

See also: Metric, Status Tree

F

Feature Flag

A runtime switch that toggles features on or off without redeploying.

Failover Plan

A documented strategy for restoring service after infrastructure failure.

Front-end Component

A component dedicated to serving web assets or UI logic. In Diploi, front-end components supported include frameworks like Astro, React and SvelteKit.

See also: Component

G

GitHub Actions

GitHub’s automation platform for running workflows triggered by repository events.

Git Repository

A version-controlled store containing your project’s source history.

See also: Project, GitHub Actions

Global Configuration

Shared settings applied across multiple components or environments. In Diploi, the global configuration for a project lives in diploi.yaml.

See also: More about diploi.yaml, Stack

H

Helm Chart

A templated bundle of Kubernetes manifests used to install applications. In Diploi, Helm charts are used along with diploi.yaml files to build and host deployments for a project.

Health Check

A programmatic test that inspects the current state of a service, to determine if it is ready, shutdown or in a error state.

See also: Component, Status Tree

High Availability

An architecture that tolerates failures without noticeable downtime.

I

Identifier

A unique, stable value used to reference a resource or configuration entry. Identifiers are used in the diploi.yaml file, to name components and add-ons.

See also: Stack, More about diploi.yaml

Image Registry

A service that stores and distributes container images.

See also: Container Image, CI/CD

Infrastructure Secret

Sensitive credentials required to provision or connect infrastructure.

J

Job Runner

A worker process designed for asynchronous or scheduled tasks.

See also: Component, Stack

JSON Schema

A specification describing the structure and validation rules for JSON documents.

K

Kubernetes

An orchestration platform for deploying and managing containerized workloads. Diploi provisions dedicated Kubernetes clusters per deployment and manages them.

Kubeconfig

A configuration file that stores cluster access credentials and contexts.

See also: Kubernetes, User Role

Key Rotation

Regularly replacing secrets or cryptographic keys to reduce compromise risk.

L

Load Balancer

A network component that distributes traffic across service instances.

See also: Endpoint, Kubernetes

Log Stream

A continuous feed of application or system logs. in Diploi, you can access the log stream of each component and add-on of a active deployment from the deployment dashboard.

See also: Component, Remote Development

Lifecycle Hook

A script or automation triggered at a specific phase in the deployment lifecycle.

M

Monorepo

A repository that stores multiple services or libraries in a single codebase. Diploi scaffolds projects as monorepos so components share tooling while deploying independently as containers.

See also: Project, Component

Managed Service

An infrastructure capability operated by a provider instead of your team. Diploi-managed services include cluster provisioning, certificates, and deployment lifecycle.

Metric

A measurable value that helps observe system performance. Diploi shows the CPU load and memory usage, alongside health status signals for components and add-ons.

See also: Status Tree, Observability Stack

N

Namespace

A Kubernetes partition that scopes resources within a cluster. In Diploi, each project deployment lives in its own namespace to isolate workloads.

See also: Kubernetes, Project

Network Policy

Rules that control how pods communicate within a cluster. Diploi applies restrictive network policy, so add-ons in a deployment are only exposed to the components that belong to the same deployment.

See also: Add-on, Component

Node

A compute instance that runs Kubernetes pods.

O

Observability Stack

The tooling used to collect logs, metrics, and traces.

See also: Metric, Add-on

Owner Role

A permission level with full administrative control over a project.

See also: Project, User Role

P

Package (Component Package URL)

A reference to a component’s template package hosted at a URL.

See also: More about diploi.yaml, Component

Parent Domain

The apex domain under which subdomains are delegated.

See also: Custom Domain, DNS

Project

The top-level grouping of components, add-ons, and environments for an application. In Diploi, a project governs repositories, deployments, permissions, and billing across all stages.

Pod

The smallest deployable unit in Kubernetes containing one or more containers. Diploi hosts each component and add-on as pods, managed by Helm chart inside the deployment.

See also: Kubernetes, Helm Chart

Q

Queue Worker

A service dedicated to processing asynchronous tasks from a queue.

See also: Component, Job Runner

R

Remote Development

A way to develop applications and sevices using cloud-hosted environments to code, instead of developing locally. In Diploi, users get a Remote Development environment that uses Dev Containers to enable remote access from Cursor and VS Code, using SSH, or directly from the browser, using Diploi’s cloud IDE.

Repository Launch

In Diploi, it is the process of connecting a repository and enabling automated deployments for it.

See also: Project, CI/CD

Resource Quota

Limits that cap CPU, memory, or storage usage for workloads.

Rollback

Restoring a system to a previous known-good state.

See also: Container Image, Deployment

S

Stack

A set of components and add-ons that are part of a project.

See also: Project, Component

Secrets Manager

A system for securely storing and distributing sensitive values.

Service Account

A machine identity used by services to authenticate with APIs.

Single-node Kubernetes Cluster

A Kubernetes environment where control plane and workloads run on one node. In Diploi, every deployment operates as a single-node Kubernetes cluster.

SSL/TLS

Protocols that encrypt data in transit between clients and servers. In Diploi, all SSL/TLS certificates are issued and renewed automatically for all endpoints exposed by a deployment.

See also: Custom Domain, Endpoint

Status Tree

A hierarchical view that summarizes the health of related resources.

See also: Deployment, Metric

T

Template Project

A preconfigured project layout that accelerates new application setups.

Test Pipeline

Automated checks that validate code before deployment.

See also: Build Pipeline, CI/CD

U

Upgrade Window

A scheduled period reserved for applying updates.

See also: Failover Plan, Zero Downtime

User Role

A permission level that defines what actions a user can perform.

See also: Owner Role, Project

V

Version Pinning

Is a way to locking dependencies or images to specific versions using package config files.

Volume

Within the context of Infrastructure-as-Code, a Volume is a storage unit, that can be persistent or shared, used to provide storage to containers. In Diploi, Volumes are persistent, and are provisioned dynamically based on the storage required by a deployment.

See also: Helm Chart, Component

W

Workspace

The collaborative area where teams plan, build, and deploy applications. A workspace groups multiple projects and members under one organizational umbrella.

See also: Project, User Role

Webhook

An HTTP callback triggered by events to notify external systems. In Diploi, you can setup custom Webhooks using any of the backend or fullstack components available, eg. FastAPI, Bun, Node.

See also: Repository Launch, Deployment

X

X-Forwarded-For Header

A proxy header that preserves the original client IP address.

See also: Endpoint, Load Balancer

Y

YAML Schema

Rules that describe the allowed structure of YAML files.

Z

Zero Downtime

Deployments that avoid noticeable service interruption..

See also: Helm Chart, Failover Plan