[zh] Add glossary: cel, device, and dra

Author: windsonsea

content/zh-cn/docs/reference/glossary/cel.md

@@ -0,0 +1,47 @@
+---
+title: 通用表达式语言（CEL）
+id: cel
+date: 2025-06-04
+full_link: https://cel.dev
+short_description: >
+  一种为安全执行用户代码而设计的表达式语言。
+tags:
+- extension
+- fundamental
+aka:
+- CEL
+---
+<!--
+title: Common Expression Language
+id: cel
+date: 2025-06-04
+full_link: https://cel.dev
+short_description: >
+  An expression language that's designed to be safe for executing user code.
+tags:
+- extension
+- fundamental
+aka:
+- CEL
+-->
+
+<!--
+A general-purpose expression language that's designed to be fast, portable, and
+safe to execute.
+-->
+一种通用的表达式语言，其设计目标是快速执行、可移植，并且具备安全性。
+
+<!--more-->
+
+<!--
+In Kubernetes, CEL can be used to run queries and perform fine-grained
+filtering. For example, you can use CEL expressions with
+[dynamic admission control](/docs/reference/access-authn-authz/extensible-admission-controllers/)
+to filter for specific fields in requests, and with
+[dynamic resource allocation (DRA)](/docs/concepts/scheduling-eviction/dynamic-resource-allocation)
+to select resources based on specific attributes.
+-->
+在 Kubernetes 中，CEL 可用于运行查询并进行细粒度的筛选。例如，你可以将 CEL
+表达式用于[动态准入控制](/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers/)，  
+以筛选请求中的特定字段；也可以与[动态资源分配（DRA）](/zh-cn/docs/concepts/scheduling-eviction/dynamic-resource-allocation)结合使用，
+基于特定属性选择资源。

content/zh-cn/docs/reference/glossary/device.md

@@ -0,0 +1,45 @@
+---
+title: 设备
+id: device
+date: 2025-05-13
+short_description: >
+  直接或间接挂接到集群节点上的所有资源，例如 GPU 或电路板。
+
+tags:
+- extension
+- fundamental
+---
+<!--
+title: Device
+id: device
+date: 2025-05-13
+short_description: >
+  Any resource that's directly or indirectly attached your cluster's nodes, like
+  GPUs or circuit boards.
+
+tags:
+- extension
+- fundamental
+-->
+
+<!--
+One or more
+{{< glossary_tooltip text="infrastructure resources" term_id="infrastructure-resource" >}}
+that are directly or indirectly attached to your
+{{< glossary_tooltip text="nodes" term_id="node" >}}.
+-->
+一个或多个直接或间接挂接到{{< glossary_tooltip text="节点" term_id="node" >}}上的{{< glossary_tooltip text="基础设施资源" term_id="infrastructure-resource" >}}。
+
+<!--more-->
+
+<!--
+Devices might be commercial products like GPUs, or custom hardware like
+[ASIC boards](https://en.wikipedia.org/wiki/Application-specific_integrated_circuit).
+Attached devices usually require device drivers that let Kubernetes
+{{< glossary_tooltip text="Pods" term_id="pod" >}} access the devices.
+-->
+设备可以是如 GPU 等商业产品，也可以是如
+[ASIC 板卡](https://zh.wikipedia.org/zh-cn/%E7%89%B9%E5%AE%9A%E6%87%89%E7%94%A8%E7%A9%8D%E9%AB%94%E9%9B%BB%E8%B7%AF)  
+等定制硬件。
+挂接的设备通常需要相应的设备驱动，才能让 Kubernetes 中的
+{{< glossary_tooltip text="Pod" term_id="pod" >}} 访问这些设备。

content/zh-cn/docs/reference/glossary/dra.md

@@ -0,0 +1,47 @@
+---
+title: 动态资源分配
+id: dra
+date: 2025-05-13
+full_link: /docs/concepts/scheduling-eviction/dynamic-resource-allocation/
+short_description: >
+  Kubernetes 提供的一项特性，用于在 Pod 之间请求和共享资源，例如硬件加速器。
+
+aka:
+- DRA
+tags:
+- extension
+---
+<!--
+title: Dynamic Resource Allocation
+id: dra
+date: 2025-05-13
+full_link: /docs/concepts/scheduling-eviction/dynamic-resource-allocation/
+short_description: >
+  A Kubernetes feature for requesting and sharing resources, like hardware
+  accelerators, among Pods.
+
+aka:
+- DRA
+tags:
+- extension
+-->
+
+<!--
+A Kubernetes feature that lets you request and share resources among Pods.
+These resources are often attached
+{{< glossary_tooltip text="devices" term_id="device" >}} like hardware
+accelerators.
+-->
+Kubernetes 提供的一项特性，允许你在多个 Pod 之间请求和共享资源。  
+这些资源通常是挂接的{{< glossary_tooltip text="设备" term_id="device" >}}，例如硬件加速器。
+
+<!--more-->
+
+<!--
+With DRA, device drivers and cluster admins define device _classes_ that are
+available to _claim_ in workloads. Kubernetes allocates matching devices to
+specific claims and places the corresponding Pods on nodes that can access the
+allocated devices.
+-->
+借助 DRA，设备驱动和集群管理员可以定义设备的**类别**，这些类别可供工作负载中的 Pod 申领。
+Kubernetes 会将匹配的设备分配给特定的申领，并将相应的 Pod 调度到能够访问这些已分配设备的节点上。