Orchestration icons

The 61 orchestration icons in DevOps, described

Admission controladmission-control

Admission control — the barrier stays down until there is room for more.

Admission webhookadmission-webhook

A gate with a bolt beside its arm — the hook that inspects each object before it is admitted.

Affinityaffinity

Affinity — schedule these two workloads together on the same machine.

Anti-affinityanti-affinity

Anti-affinity — never these two on the same box, kept apart for resilience.

Horizontal autoscalerautoscaler-hpa

A pod with an arrow pointing sideways — more pods added as the load climbs.

Vertical autoscalerautoscaler-vpa

A pod with an arrow pointing up — the same pod given more cpu and memory.

Batch windowbatch-window

A batch window — the hours when the heavy work is allowed to run.

Canary deploycanary-deploy

One pod shaped differently from the other — a new version tried on a slice of traffic.

Clustercluster

A cluster — many machines or nodes behaving as one system, a fleet under one control plane.

Cluster autoscalercluster-autoscaler

A cluster grid with a new node arriving in its last cell — nodes added when pods cannot fit.

Cluster rolecluster-role

A cluster grid with a shield in its last cell — permissions that reach across every namespace.

Cluster upgradecluster-upgrade

A cluster grid with an arrow rising in its last cell — the whole cluster moved to a newer version.

ConfigMapconfigmap

Key and value rows on a screen — plain settings handed to pods without rebuilding them.

Continuous batchingcontinuous-batch

Continuous batching — new requests board the moving train while others are still being served.

Control planecontrol-plane

One hub on a wire above the node line — the plane that decides where every pod goes.

Custom resourcecrd

A document with a type node below its title — a new kind of object the cluster learns to keep.

DaemonSetdaemonset

One pod on every node along the line — the workload that runs everywhere, once each.

Deploymentdeployment-k8s

A capsule with three replicas inside — the workload that keeps that many pods running.

Draindrain

A node emptying downward — every pod moved off before the node is taken away.

Dynamic batchingdynamic-batch

Dynamic batching — requests that arrive together ride through the model together.

Ephemeral volumeephemeral-volume

A cylinder with a bolt on it — storage that lives as long as the pod and no longer.

Fleetfleet-cluster

A cluster grid whose last cell trails off — many more clusters, managed as one fleet.

GPU nodegpu-node

A node with two pins rising from it — a node that carries accelerators for the pods that need them.

Helm charthelm-chart

A ship's wheel — the packaged chart that installs a whole application at once.

Ingressingress-k8s

An arrow coming down into a box of pods — outside traffic routed in by host and path.

Init containerinit-container

A square container before the round one — the container that runs first and then steps aside.

Kube contextkube-context

A cluster grid with a pin in its last cell — the cluster your commands are pointed at.

Secret mountkube-secret-mount

A pod with a masked value in its second slot — a secret mounted into the container.

Kubeletkubelet

A node with the agent at its centre — the daemon on every node that runs the pods it is given.

Limit rangelimit-range

A box with a floor, a ceiling and the span between — the least and most a pod may ask for.

Liveness probeliveness-probe

A pod with a pulse in its second slot — the check that says the container is still alive.

Namespacenamespace

A namespace — a named scope things belong to, isolated from the rest.

Kubernetes namespacenamespace-k8s

A Kubernetes namespace — a fenced part of the cluster, one tenant's scope.

Namespace quotanamespace-quota

A namespace with a level gauge at its side — how much one namespace may spend.

Node poolnode-pool

A node pool — interchangeable worker machines managed as one group that scales.

Node selectornode-selector

A chevron picking one node out of three — the label that says which nodes a pod may use.

Remove taintnode-taint-remove

A node with its taint crossed out — the node open again to ordinary pods.

Operatoroperator-k8s

A check inside the loop — a controller that keeps reconciling until the state matches.

Volume claimpersistent-volume-claim

A cylinder with a check on it — storage a pod asked for and was granted.

Disruption budgetpod-disruption-budget

A pod with a shield in its second slot — how many pods may be down at once.

Pod evictpod-evict

A pod leaving its capsule at an angle — a pod pushed off a node under pressure.

Pod templatepod-template

A document with a two-dot pod below its title — the spec every pod is stamped from.

Priority classpriority-class

A document with a double chevron rising — the class that says which pods go first.

Readiness probereadiness-probe

A pod with a check in its second slot — the container is ready to take traffic.

Recreate strategyrecreate-strategy

An X before a fresh pod — every old pod stopped, then the new ones started.

ReplicaSetreplicaset

Two pods with a plus between them — the set that makes more of the same pod on demand.

Resource quotaresource-quota

A box with a quota bar and what is used — the ceiling on cpu and memory a team may claim.

Role bindingrole-binding

A person card with a check beside them — who is bound to which permissions in a namespace.

Rollback deployrollback-deploy

An arrow pointing back beside a pod — the deployment returned to its previous revision.

Rolling updaterolling-update

Two pods inside the loop — pods swapped a few at a time until all are new.

Schedulerscheduler-k8s

A pod placed onto a node from above — the scheduler picking where work lands.

Secretsecret-k8s

A padlock with a masked value on its body — a credential the cluster keeps and pods read.

Serviceservice-k8s

One address above a box of pods — the stable name that fronts whichever pods are alive.

Service meshservice-mesh

A service mesh — every service talking through the same sidecar layer.

Startup probestartup-probe

A pod with a play in its second slot — the check that waits for a slow container to start.

StatefulSetstatefulset

Three replicas standing on a shared base — pods with a fixed order and their own storage.

Storage classstorage-class

A cylinder with a label on it — the kind of disk a claim gets, fast or cheap or replicated.

Max surgesurge-limit

Pods up to a bar — how many extra pods a rollout may run above the desired count.

Tolerationtoleration

A pod carrying the taint's own mark — a pod that accepts a node others are kept off.

Max unavailableunavailable-limit

One pod crossed out beside a bar — how many pods a rollout may take down at once.

Workload identityworkload-identity

An identity card whose face is a container — a pod's own identity to the cloud, no key file.

In code, each is one import — import { AdmissionControl } from "@iconmind/react/icons/admission-control" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Narrow it by tag