Roadmap des talents
DevOps
Profil Delivery Engineer — livraison continue.
Persona Delivery Engineer — flux de livraison continu : pipelines, trunk-based, déploiements sûrs et mesurés.
Dépendances (cœur P0–P1)
flowchart TB
classDef existing fill:#eee,stroke:#999,color:#555;
classDef composite fill:#e7e3ff,stroke:#6d5ef6,color:#3a2f9e;
classDef atomic fill:#fff,stroke:#6d5ef6,color:#3a2f9e;
slog["observability.structured-logging"]:::existing
cicd["ci-cd"]:::composite
trunk["trunk-based"]:::atomic
obs["observability"]:::composite
deploy["deployment-strategy"]:::atomic
flags["feature-flags"]:::atomic
secrets["secret-management"]:::atomic
release["release-management"]:::atomic
dora["dora-metrics"]:::atomic
trunk -.-> cicd
cicd --> deploy
flags -.-> deploy
trunk -.-> flags
slog -.-> obs
obs -.-> dora
cicd --> releaseTalents
P0 → P2 = à développer. Dans « Dépend de » :
→requires ·≈recommends ·⊃inclut (composite).
Pipeline & livraison
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
devops.ci-cd | composite | P0 | ≈ trunk-based | Pipelines : stages, artifacts, gates qualité. |
devops.trunk-based | atomic | P0 | ≈ feature-flags | Branches courtes, merge fréquent, pas de GitFlow. |
devops.deployment-strategy | atomic | P1 | → ci-cd · ≈ feature-flags | Blue/green, canary, rolling, rollback. |
devops.feature-flags | atomic | P1 | ≈ trunk-based | Rollout progressif, kill switch. |
devops.release-management | atomic | P1 | → ci-cd | Semver, changelogs automatisés, hotfix, semantic-release. |
devops.git-workflow | atomic | P1 | ≈ trunk-based · ≈ release-management | Normes Git : squash/rebase/merge, conventions de commit, profondeur des PR. |
devops.artifact-management | atomic | P2 | → ci-cd | Registries, versioning d'artefacts, provenance / SLSA. |
Observabilité & fiabilité
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
devops.observability | composite | P0 | ≈ observability.structured-logging | Logs, métriques RED/USE, traces, OpenTelemetry. |
devops.dora-metrics | atomic | P1 | ≈ observability | Lead Time, Deploy Frequency, MTTR, CFR. |
devops.alerting | atomic | P2 | ≈ observability | Règles d'alerte, on-call, lutte contre la fatigue d'alerte. |
devops.incident-management | atomic | P2 | ≈ observability | Runbooks, post-mortems, SLO/SLI, error budgets. |
devops.chaos-engineering | atomic | P2 | ≈ incident-management | Steady-state, blast radius, game days. |
Sécurité
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
devops.secret-management | atomic | P1 | — | Secrets hors du code, Vault, rotation. |
devops.container-security | atomic | P1 | ≈ ci-cd | Scan, hardening, rootless, signing, supply-chain. |
devops.supply-chain | atomic | P2 | ≈ devsecops | SBOM, signature Sigstore/cosign, dépendances vérifiées (SLSA). |
devops.devsecops | composite | P2 | → ci-cd · ≈ container-security | Shift-left : SAST/DAST/SCA, SBOM, zero-trust. |
Infra & données
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
devops.db-migrations | atomic | P1 | → ci-cd | Migrations en CI, zero-downtime, rollback. |
devops.ansible | atomic | P2 | — | Rôles Ansible, Molecule, idempotence. |