菜单
Architect an Internal Developer Platform (IDP) with golden paths, Backstage, Score, and Crossplane. Use when establishing platform-as-product, paved roads, or replacing ticket-driven ops with self-service for stream-aligned teams.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Build production integrations with Anthropic Claude (Claude 4.5 Sonnet, Claude Opus 4, Claude Haiku 4) via the Messages API — system prompts, multi-turn conversations, tool use (function calling), prompt caching, extended thinking, vision, batched requests, and streaming. Use when wiring Claude into backends, agentic workflows, or evaluating it against other foundation models. Requires ANTHROPIC_API_KEY.
Deploy Cloudflare Workers, Pages, and Workers-with-static-assets safely using Wrangler 4.x with versioned uploads, gradual deployments, preview/production environments, secret bindings, observability, and one-command rollback. Use when shipping edge workloads, API routes, or full-stack apps to Cloudflare. Requires CLOUDFLARE_API_TOKEN with scoped permissions or an authenticated Wrangler session.
Deploy static sites, framework apps (Next.js, Astro, Remix, SvelteKit, Nuxt), Edge Functions, and serverless Functions to Netlify with deploy previews, branch deploys, atomic production promotion, scoped env vars, and instant rollback. Use when releasing on Netlify via CLI, API, or Git-triggered builds. Requires NETLIFY_AUTH_TOKEN (PAT) and NETLIFY_SITE_ID.
Transcribe audio with OpenAI speech-to-text models (gpt-4o-transcribe, gpt-4o-mini-transcribe, whisper-1) using prompt-guided terminology, segment-level timestamps, optional diarization via post-processing, and reliable artifact delivery. Use when converting interviews, calls, podcasts, or meeting recordings into reviewable text. Requires OPENAI_API_KEY.
Deploy Web Services, Private Services, Background Workers, Cron Jobs, Static Sites, PostgreSQL, and Key-Value (Redis-compatible) on Render via Blueprints (`render.yaml`) or the Render API with preview environments, zero-downtime rolling deploys, health checks, env-group secret scoping, and one-click rollback. Use when releasing services, applying schema migrations, or syncing infra-as-code on Render. Requires RENDER_API_KEY (owner- or workspace-scoped).
Operate Sentry end-to-end — error monitoring, performance tracing, session replay, profiling, release health, source-map upload, ownership routing, alert tuning, issue triage, and CI integration via sentry-cli — across web, mobile, and backend stacks. Use when instrumenting an app, wiring releases into deploy pipelines, or running incident-grade triage. Requires SENTRY_AUTH_TOKEN (org-scoped, `project:releases project:write`), project DSN, and (for source maps) `org` + `project` slugs.
| name | platform-engineering |
| description | Architect an Internal Developer Platform (IDP) with golden paths, Backstage, Score, and Crossplane. Use when establishing platform-as-product, paved roads, or replacing ticket-driven ops with self-service for stream-aligned teams. |
An Internal Developer Platform reduces cognitive load for stream-aligned teams by curating a thin, opinionated layer over cloud and tooling. Treat it as a product: real users, a roadmap, SLAs, and adoption metrics, not a side project of the ops team.
| Concern | Recommended |
|---|---|
| Developer portal | Backstage 1.30+ (CNCF incubating), Port, Cortex |
| Workload spec | Score (score.dev), OAM, Radius |
| Control plane | Crossplane v2, Kratix, Humanitec, Upbound |
| GitOps | Argo CD, Flux 2; Argo Workflows / Tekton |
| Runtime | Kubernetes + service mesh (Istio ambient, Linkerd) |
| Policy | OPA Gatekeeper, Kyverno, Conftest |
| Secrets / identity | External Secrets, SPIFFE/SPIRE, Workload Identity |
| Observability | OpenTelemetry, Prometheus, Grafana, Tempo, Loki |
| Org model | Team Topologies (stream-aligned + platform team) |
| Reference | CNCF Platforms WG, "Platforms White Paper" v2 (2024) |
flowchart LR
U[Stream-aligned teams] -->|Score / templates| P[Backstage portal]
P --> G[GitOps repos]
G --> CP[Crossplane / Kratix control plane]
CP --> K[Kubernetes + cloud APIs]
K --> O[OTel telemetry]
O --> P
Pol[OPA / Kyverno policies] --> CP
Pol --> K
# score.yaml - developer-authored
apiVersion: score.dev/v1b1
metadata: { name: orders-api }
containers:
api:
image: ghcr.io/acme/orders-api:1.4.2
variables: { DB_URL: "${resources.db.uri}" }
resources:
db: { type: postgres }
queue: { type: amqp }
route: { type: route, params: { host: orders.acme.com } }
# Crossplane Composition fragment - platform-owned
apiVersion: apiextensions.crossplane.io/v2
kind: Composition
metadata: { name: postgres.acme.platform }
spec:
compositeTypeRef: { apiVersion: platform.acme/v1, kind: XPostgres }
mode: Pipeline
pipeline:
- step: render
functionRef: { name: function-kcl }
| Pitfall | Mitigation |
|---|---|
| Platform built without users | Co-design with one stream-aligned team first |
| YAML-as-API leaks K8s complexity | Use Score / OAM / Radius abstractions |
| Mandate before product readiness | Earn adoption; mandates only after parity |
| One golden path forced on all | Offer 3-5 archetypes; allow exception paths |
| Platform team becomes ticket queue | Self-service via portal; office hours, not tickets |
| No deprecation strategy | Versioned templates with EOL dates and migration tooling |