Roadmap des talents
Platform
Profil Platform Engineer · SRE — runtime applicatif.
Persona Platform Engineer · SRE — runtime applicatif et fiabilité : Kubernetes, GitOps, durcissement, observabilité.
Dépendances
flowchart TB
classDef existing fill:#eee,stroke:#999,color:#555;
classDef composite fill:#e7e3ff,stroke:#6d5ef6,color:#3a2f9e;
classDef atomic fill:#fff,stroke:#6d5ef6,color:#3a2f9e;
csec["devops.container-security"]:::existing
deploy["devops.deployment-strategy"]:::existing
k8s["kubernetes-workloads"]:::composite
helm["helm"]:::atomic
gitops["gitops"]:::composite
hard["cluster-hardening"]:::atomic
obs["observability"]:::atomic
img["image-standards"]:::atomic
prog["progressive-delivery"]:::atomic
k8s --> helm
helm --> gitops
k8s --> hard
k8s --> obs
csec -.-> img
gitops --> prog
deploy -.-> progTalents
P0 → P2 = à développer. Dans « Dépend de » :
→requires ·≈recommends ·⊃inclut (composite).
Workloads & packaging
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
platform.kubernetes-workloads | composite | P1 | — | Probes, resource limits, PSS, NetworkPolicy, RBAC. |
platform.helm | atomic | P1 | → kubernetes-workloads | Charts Helm, templating, values par environnement. |
platform.config-secrets | atomic | P1 | → kubernetes-workloads | ConfigMaps & Secrets : External Secrets, sealed-secrets, rotation. |
platform.image-standards | atomic | P1 | ≈ devops.container-security | Multi-stage, distroless, labels OCI. |
platform.storage | atomic | P2 | → kubernetes-workloads | PV/PVC, StorageClasses, CSI, backup Velero. |
GitOps, delivery & DX
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
platform.gitops | composite | P1 | → helm | Argo CD, ApplicationSet, sync waves. |
platform.progressive-delivery | atomic | P2 | → gitops · ≈ devops.deployment-strategy | Argo Rollouts / Flagger, canary, traffic splitting. |
platform.multi-cluster | atomic | P2 | → gitops | Fédération GitOps, lifecycle, migrations. |
platform.developer-dx | atomic | P2 | ≈ gitops | Backstage, self-service, golden paths. |
Sécurité & réseau
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
platform.cluster-hardening | atomic | P1 | → kubernetes-workloads | Pod Security Standards, OPA / Kyverno, Falco. |
platform.runtime-security | atomic | P2 | → cluster-hardening | Détection runtime (Falco / Tetragon), réponse aux menaces. |
platform.networking | atomic | P2 | → kubernetes-workloads | CNI (Cilium/Calico), Ingress, Gateway API. |
platform.service-mesh | atomic | P2 | → kubernetes-workloads | Istio/Linkerd, mTLS, traffic management. |
Observabilité & scalabilité
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
platform.observability | atomic | P1 | → kubernetes-workloads | Prometheus, Grafana, Loki, Tempo. |
platform.autoscaling | atomic | P2 | → kubernetes-workloads | HPA, VPA, Karpenter, Cluster Autoscaler. |
platform.slo-monitoring | atomic | P2 | → observability | SLO / SLI, error budgets, alerting côté runtime. |
platform.cost-visibility | atomic | P2 | ≈ observability | FinOps cluster : Kubecost, allocation, rightsizing. |