azure-runtime-review
Review Azure Container Apps, Front Door, Key Vault, managed identity, and networking configuration for InsightPulseAI platform
Source facts
- Repository
- Insightpulseai/odoo
- Last source activity
- April 10, 2026 at 07:16
- Detected SKILL.md language
- English
- Stars
- 6
- Forks
- 2
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- Azure Runtime Review
- description
- Review Azure Container Apps, Front Door, Key Vault, managed identity, and networking configuration for InsightPulseAI platform
# Azure Runtime Review Skill
## When to use
When reviewing or modifying Azure infrastructure, deployment configs, or runtime architecture.
## Target architecture
- **Compute**: Azure Container Apps (`cae-ipai-dev` environment)
- **Edge**: Azure Front Door (`ipai-fd-dev`)
- **Database**: Azure Database for PostgreSQL (`ipai-odoo-dev-pg`)
- **Secrets**: Azure Key Vault (`kv-ipai-dev`)
- **Registry**: ACR (`cripaidev`, `ipaiodoodevacr`)
- **DNS**: Cloudflare → Azure Front Door
- **Identity**: Managed identity (transitional from Keycloak to Entra)
## Checks
1. All container apps run in `rg-ipai-dev` resource group
2. Public hostnames route through Azure Front Door, not direct IP
3. Secrets resolve from Key Vault via managed identity, never hardcoded
4. No DigitalOcean, Vercel, or deprecated provider references
5. DNS changes follow YAML-first workflow (`infra/dns/subdomain-registry.yaml`)
6. Container apps run as non-root
7. No public endpoints bypass Front Door WAF
## Reference docs
- `docs/architecture/ROADMAP_TARGET_STATE.md`
- `.Codex/rules/infrastructure.md` (global)
- `ssot/azure/resources.yaml`
View on GitHub