Glossary¶

Definitions of platform-specific terms used throughout this documentation.

Account : A person's identity on the platform. Has a login (email), a display name, and belongs to one or more organizations.

Admin (role) : An organization member role that bypasses all per-category permission checks. Every organization must have at least one admin.

API token (static) : A long-lived bearer token scoped to an organization. Used for machine-to-machine authentication (Terraform, CI/CD, scripts). Does not expire automatically.

DPF : Deployment Platform Framework — the service catalog layer for managed applications (see Apps / Service Catalog).

Gardener : The open-source Kubernetes-as-a-service project used as the managed Kubernetes control plane on b'nerd Cloud. gardener.cloud

JWT : JSON Web Token. Short-lived bearer token issued on login. Used for interactive sessions in the CLI and dashboard.

Membership : The link between an account and an organization. Carries the account's role and per-category permissions within that organization.

Organization : The top-level billing and access boundary. All resources, projects, and members belong to an organization.

Preset : A named set of permissions applied to a membership in one operation. Built-in presets: admin, developer, operator, viewer, billing_manager. See Roles & RBAC.

Project : A namespace within an organization that groups resources (servers, DNS zones, Kubernetes clusters, object storage users).

RGW : RADOS Gateway — the S3-compatible object storage gateway in the Ceph cluster. b'nerd exposes a control-plane API over RGW for user, quota, and key management.

RGW user : An object storage identity. Has an access key / secret key pair, a storage quota, and owns its buckets. Maps one-to-one with a b'nerd project's object storage allocation.

S3 operator (bnerd-s3-operator) : A Kubernetes operator that manages RGW users and buckets via CRDs, using the b'nerd control-plane API. See S3 Operator.

Stack version : The umbrella version tag (e.g. v0.5) that describes a known-compatible set of component versions: HQ API, CLI, Terraform provider, Dashboard, S3 operator. See Release Notes — v0.5.