Glossary
Short definitions for the vocabulary used across these docs, alphabetised for lookup. For how these pieces fit together, see Core Concepts.
API Key: A tenant-scoped credential for machine-to-machine access to the Kupe API.AppProject: An Argo CD project that defines allowed repositories and destinations for a set of applications.Argo CD Application: A resource that defines where manifests come from and where they are deployed.Credit: An account balance applied automatically against an invoice subtotal, capped at what’s owed. Unused balance carries forward.Custom Domain: A tenant-owned domain name mapped to an application running on Kupe Cloud.Dedicated Cluster: A managed cluster with dedicated capacity for a single tenant. Reserved, not yet available. The platform currently rejects requests for dedicated clusters (CLUSTER_DEDICATED_UNSUPPORTED).Gateway: A Gateway API resource that provides ingress infrastructure.GitOps: An operating model where Git is the source of truth and a controller reconciles live state to match it.Grafana Explore: Grafana’s query interface for inspecting logs and metrics directly.Headlamp: The Kubernetes UI surfaced through the Kupe console for workload and cluster interaction.High Availability (HA): A replicated control-plane mode for a managed cluster, billed per hour while enabled.HTTPRoute: A Gateway API resource that defines hostname, path matching, and backend routing.Invoice: The billing record for one closed billing period, covering that period’s plan fee and metered usage.Managed Cluster: A Kupe cluster created and operated through the platform.Merchant of Record: Paddle’s role in Kupe Cloud billing: it processes payment, applies tax, and issues the tax invoice/receipt.OIDC kubeconfig: A kubeconfig that uses interactive login and short-lived tokens for CLI access.Overage: Observability usage beyond a plan’s included allowance, billed at flat rates when a tenant admin allows it.Plan: A tenant-level tier (Starter, Pro, Business, or Enterprise) that sets the monthly platform fee, resource pool, and observability allowance.Proration: Charging a plan fee only for the days it was active within a billing period, used when a plan changes mid-period.Secret: A platform-managed secret definition stored in the Kupe-managed vault.Shared Cluster: A managed cluster that runs on shared platform capacity.SLO: Service Level Objective, a measurable reliability target for a service.Sync Target: A cluster and namespace pair that a managed secret is delivered to.Tenant: The primary isolation boundary in Kupe Cloud. A tenant owns clusters, secrets, members, API keys, and billing.Token kubeconfig: A kubeconfig that uses a generated bearer token for automation.