Markdown Editor

Internal Developer Platform Charter Template (CNCF Platforms)

Mission and outcomes, personas and job stories, scope on 13 CNCF capabilities, 7 attributes, interfaces, RACI, funding, SLOs, metrics, roadmap

架构完整CNCF Platforms White Paper v1.0CC BY 4.0internaldeveloperplatformcharter

使用方法: Use it when you set up or re-charter a platform team and its internal developer platform. Fill the mission, personas and job stories first and test them with partner product teams before committing scope against the 13 CNCF capabilities. The main pitfall is a charter that lists tools instead of user outcomes and measurable adoption and developer experience metrics.

预览

Internal Developer Platform Charter: [Platform name]

Charter for a platform team and the internal developer platform (IDP) it builds and runs: mission and outcomes, users and their jobs to be done, the platform-as-a-product operating model, scope mapped to the 13 platform capabilities and 7 platform attributes of the CNCF Platforms White Paper (v1.0, TAG App Delivery, April 2023), the interfaces users touch (portal, API, CLI, golden paths), team topology and funding, platform SLOs, adoption and developer experience metrics, roadmap, governance and review. Structure aligned with the CNCF Platforms White Paper, published under CC BY 4.0. Replace every [bracketed] value and every row marked Example. Worked examples use the fictional SaaS company "Corvid Commerce" and its platform "Nest".

Document control

FieldValue
Document ID[IDP-CH-001]
Platform name[Nest internal developer platform]
Platform team(s)[@platform-runtime], [@platform-delivery], [@platform-data]
Executive sponsor[@vp-engineering]
Platform product manager[@platform-pm]
Version[0.1]
Status[Draft / In review / Approved / Superseded]
Owner[@head-of-platform]
Approvers/reviewers[@vp-engineering], [@cto], [@ciso], [@finops-lead], [@product-team-representatives]
Last updatedYYYY-MM-DD
Classification[Internal]
Charter period[YYYY-MM-DD to YYYY-MM-DD]
Next review[YYYY-MM-DD]
Related documents[Engineering strategy], [Maturity assessment], [Golden path specs], [Team APIs]

Approvals

RoleNameDecisionDate
Executive sponsor[@name][Approve / Approve with conditions / Reject]YYYY-MM-DD
Chief technology officer[@name][Decision]YYYY-MM-DD
Chief information security officer[@name][Decision]YYYY-MM-DD
FinOps lead (funding model)[@name][Decision]YYYY-MM-DD
Product engineering representative[@name][Decision]YYYY-MM-DD

Revision history

VersionDateAuthorChange summary
0.1YYYY-MM-DD[@name]First draft
1.0YYYY-MM-DD[@name]Example: Approved at the engineering leadership review
1.1YYYY-MM-DD[@name]Example: Data services moved from planned to provided after the maturity re-assessment

Contents

1. Mission, outcomes and boundaries

Mission: [Example: Nest lets Corvid Commerce product teams take a change from idea to production safely and quickly, without tickets, by offering self-service capabilities that are secure and compliant by default.]

Problem statement: [Example: In the last engineering survey, product teams reported that 30% of their time goes to infrastructure, pipeline and access work that is repeated in every team. Creating a new service takes four weeks and nine tickets. Security findings recur across services because each team configures its own baseline.]

The platform exists to reduce the cognitive load that product teams carry, to make the secure and compliant way the easiest way, and to let the organisation make consistent investments once instead of many times. It is an internal product: product teams are its customers and choose to use it because it serves them better than the alternatives.

1.1 Outcomes

IDOutcomeMeasureBaselineTarget (charter period)
OUT-001 (Example)Faster path to production for new servicesDays from service request to first production deploy28 days2 days
OUT-002 (Example)Less time on undifferentiated infrastructure workShare of product engineering time on infrastructure (survey)30%15%
OUT-003 (Example)Secure by defaultRepeat security findings per service per quarter5.2below 1
OUT-004 (Example)Consistent cost visibilityShare of cloud cost allocated to an owning team71%98%
[OUT-NNN][Outcome][Measure][Baseline][Target]

1.2 Boundaries

The platform doesThe platform does not
Example: Provide self-service infrastructure, delivery and observability capabilitiesWrite or operate product teams' application code
Example: Curate approved third-party services behind one interfaceReplace the cloud provider's console for platform engineers
Example: Own the guardrails that make the default path compliantApprove product architecture (the architecture review board does)
Example: Run on call for the platform capabilities it providesRun on call for product services
[Does][Does not]

2. Users and jobs to be done

Describe each user group, what it is trying to get done and the pain it reports today. Platform features are justified by these jobs, and the metrics in section 9 test whether the jobs got easier.

Persona IDUser groupSizePrimary jobs to be doneCurrent painEvidence
PER-01 (Example)Stream-aligned product engineer240Create a service, ship a change, debug productionTickets for databases and access, slow pipelinesSurvey Q2, 18 interviews
PER-02 (Example)Data engineer35Provision pipelines and stores, schedule jobsNo standard data stack, manual credentials6 interviews
PER-03 (Example)Machine learning engineer12Get GPU capacity, serve modelsCapacity requests by email4 interviews
PER-04 (Example)Engineering manager30See cost, reliability and delivery of the teamData spread over five toolsLeadership workshop
PER-05 (Example)Security and compliance engineer8Prove controls across all servicesEvidence collected by handAudit retrospective
PER-06 (Example)Other engineers (QA, mobile, site reliability)125Run test environments, build mobile releases, operate shared servicesEnvironments requested by ticket, separate mobile pipelineSurvey Q2, 5 interviews
[PER-NN][Group][Number][Jobs][Pain][Source]

2.1 Job stories

Write each job as a short job story: when [situation], I want to [motivation], so I can [expected outcome]. Keep a register and link each roadmap item in section 10 to at least one job.

Job IDPersonaJob storyPlatform capabilityPriority
JOB-001 (Example)PER-01When I start a new service, I want a production-ready repository and pipeline in minutes, so I can ship the first feature the same dayGolden path templates, delivery automationMust
JOB-002 (Example)PER-01When an alert fires, I want traces, logs and recent deploys in one view, so I can find the cause without switching toolsApplication observabilityMust
JOB-003 (Example)PER-04When I plan the quarter, I want my team's cost and reliability on one page, so I can trade features against debtWeb portalShould
JOB-004 (Example)PER-05When an auditor asks, I want control evidence per service exported automatically, so I can answer in hours, not weeksSecurity services, portalShould
[JOB-NNN][PER-NN][Job story][Capability][Must / Should / Could]

3. Platform as a product

The CNCF Platforms White Paper names platform as a product as the first platform attribute, and lists developing the platform together with its users as one of the main challenges of platform work. This charter commits the platform team to the following product practices.

PracticeCommitmentOwner
Product managementA named platform product manager owns the roadmap, prioritisation and user research[@platform-pm]
User researchExample: At least six user interviews per quarter and a twice-yearly developer experience survey[@platform-pm]
Early adoptersExample: Two partner product teams co-design every new capability before general availability[@platform-lead]
Feedback channelsPortal feedback button, #nest-help, quarterly user forum[@platform-pm]
Release stagesAlpha (partner teams only), beta (opt-in, no SLO), generally available (SLO and support), deprecated (end date published)[@platform-lead]
Optional adoptionGolden paths are recommended, not mandatory, except where section 11 lists an enforced guardrail[@head-of-platform]
Product metricsSection 9 metrics reviewed monthly by the platform leadership[@platform-pm]
DocumentationEvery generally available capability has a getting started guide and reference documentationCapability owner

Treat adoption as a signal of value, not as an objective in itself. When a team chooses not to use a capability, record why in the feedback register: it is often the cheapest source of roadmap input.

4. Scope: platform capabilities

The CNCF Platforms White Paper lists 13 capability areas that a platform may offer. The table maps each one to this platform. The capability names follow the white paper as published; check the current version at tag-app-delivery.cncf.io before relying on them.

Cap. IDCNCF capabilityStatusWhat the platform offersOwning teamRelated specification
CAP-01Web portals for provisioning and observing capabilitiesExample: ProvidedDeveloper portal with service catalogue, scaffolding and scorecards[@platform-delivery][Portal spec]
CAP-02APIs for automatically provisioning capabilitiesExample: ProvidedDeclarative resource API (claims) for databases, queues and buckets[@platform-runtime]Infrastructure as Code Module Specification (ops/iac-module-specification)
CAP-03Golden path templates and docsExample: ProvidedThree golden paths: HTTP service, event consumer, batch job[@platform-delivery]Platform Golden Path (architecture/platform-golden-path)
CAP-04Automation for building and testing productsExample: ProvidedShared pipeline library with build, test, scan, SBOM and signing stages[@platform-delivery][Pipeline spec]
CAP-05Automation for delivering and verifying servicesExample: ProvidedProgressive delivery with automated canary analysis[@platform-delivery][Delivery spec]
CAP-06Development environmentsExample: Planned (Q3)Per-branch preview environments[@platform-runtime][Spec]
CAP-07Application observabilityExample: ProvidedOpenTelemetry collection, dashboards and SLO alerting as code[@platform-runtime]Observability Specification (ops/observability-spec)
CAP-08Infrastructure servicesExample: ProvidedShared Kubernetes clusters, managed compute, networking[@platform-runtime]Kubernetes Cluster Design (ops/kubernetes-cluster-design)
CAP-09Data servicesExample: CuratedManaged PostgreSQL and Redis from the cloud provider, exposed through the resource API[@platform-data][Spec]
CAP-10Messaging and event servicesExample: CuratedManaged message broker with topic provisioning[@platform-data][Spec]
CAP-11Identity and secret servicesExample: ProvidedWorkload identity and a central secrets store[@platform-runtime]Secrets Management Standard (security/secrets-management-standard)
CAP-12Security servicesExample: CuratedImage scanning, policy enforcement, runtime detection run with the security team[@security-engineering][Spec]
CAP-13Artifact storageExample: ProvidedContainer and package registry with retention and signing[@platform-delivery][Spec]

Status values: Provided (built and run by the platform team), Curated (a third-party or provider service offered through platform interfaces with platform defaults), Planned (on the roadmap with a quarter), Out of scope (teams use another route, named in the notes).

4.1 Foundations the platform builds on

List what the platform depends on but does not own, so that ownership gaps are visible.

FoundationOwnerDocument
Example: Cloud accounts, network and guardrailsCloud foundation teamLanding Zone Design (architecture/landing-zone-design)
Example: Cost allocation tags and showbackFinOps teamCost Allocation and Tagging Standard (ops/cost-allocation-tagging-standard)
Example: Identity provider and single sign-onIT identity team[Identity standard]
[Foundation][Owner][Document]

5. Platform attributes as design principles

The white paper describes 7 attributes of a successful platform. The platform team adopts them as design principles and checks every new capability against the test in the last column.

Attribute (CNCF)Principle for this platformDesign review test
Platform as a productWe build for named users and measure valueIs there a job story and a partner team for this capability?
User experienceEvery capability is usable through the portal, API and CLI with the same conceptsCan a new engineer complete the getting started guide in under [30 minutes]?
Documentation and onboardingNo capability reaches general availability without documentation and an onboarding pathDo getting started, reference and troubleshooting pages exist?
Self-serviceUsers get capabilities without a ticket or a human approval on the default pathDoes the default path need any manual step from the platform team?
Reduced cognitive load for usersUsers declare intent; the platform handles the detailHow many settings must a user change from the default to reach production? Target: [3 or fewer]
Optional and composableTeams can use one capability without adopting all of themCan the capability be used outside the golden path through its API?
Secure by defaultThe default configuration meets the security baseline without extra workDoes the default pass policy checks with zero exceptions?

6. Interfaces

The API is the source of truth. The portal and CLI are clients of the same API, so that anything a user can do by hand can also be automated.

InterfacePurposeTechnologyVersioning and change policyOwner
Developer portalDiscover, provision and observe capabilities; service catalogue; scorecardsExample: Portal framework with catalogue plug-insContinuous; UI changes announced in release notes[@platform-delivery]
Platform APIDeclarative provisioning of resourcesExample: Kubernetes custom resources (claims)Versioned; breaking change only in a new version with [6 months] overlap[@platform-runtime]
CLILocal workflows and scriptingExample: nest CLISemantic versioning; deprecations warned for two minor releases[@platform-delivery]
Golden pathsOpinionated end-to-end routesTemplates per pathEach path versioned in its own specificationPath owner
Infrastructure as code modulesReusable building blocks for teams who need more controlExample: Module registryVersioned per module specification[@platform-runtime]
DocumentationGetting started, reference, troubleshootingDocs as code in the portalReviewed with each releaseCapability owner
Support channelsQuestions and incidents#nest-help, platform on callSection 8[@platform-lead]

The sequence below shows the default self-service flow for a new database, with no ticket and no manual approval.

7. Team topology, responsibilities and funding

7.1 Team structure and interaction modes

Team types and interaction modes below use the vocabulary of the book Team Topologies (Skelton and Pais). Each platform team also publishes a Team API (architecture/team-api).

TeamTypeCapabilities ownedSizeMain interaction with product teams
Example: platform-runtimePlatformCAP-02, CAP-06, CAP-07, CAP-08, CAP-117X-as-a-Service; collaboration with partner teams during alpha
Example: platform-deliveryPlatformCAP-01, CAP-03, CAP-04, CAP-05, CAP-136X-as-a-Service
Example: platform-dataPlatformCAP-09, CAP-104Collaboration until general availability
Example: developer-enablementEnablingOnboarding, training, migration help3Facilitating
[Team][Type][Capabilities][Size][Mode]

7.2 Responsibilities (RACI)

R = responsible, A = accountable, C = consulted, I = informed.

ActivityPlatform teamProduct teamSecurityFinOpsEngineering leadership
Platform roadmap and prioritisationA, RCCCI
Capability operation and on callA, RIIII
Application code, data and service on callIA, RIII
Security baseline and guardrail policyRCAII
Cost allocation of platform spendRIIAI
Exceptions to enforced guardrailsCRAII
Adoption of golden pathsRAIIC
Funding decisionCIICA

7.3 Funding model

ItemDecision
Funding modelExample: Central funding for the platform team and shared capabilities; consumption of dedicated resources shown back to product teams
Budget owner[@vp-engineering]
Annual run cost[Amount and currency]
Headcount[Number] FTE (Example: 20, of which 17 in the three platform teams and 3 in developer-enablement, funded separately)
Shared cost allocationPer the Cost Allocation and Tagging Standard (ops/cost-allocation-tagging-standard)
Investment case[Link to business case or TCO Analysis (architecture/tco-analysis)]
ReviewFunding reviewed yearly against section 9 outcomes

Choose central funding while adoption is growing, so that teams are not discouraged from using the platform by a charge. Move to showback once allocation is reliable and to chargeback only when finance requires it and teams can influence their consumption.

8. Platform SLOs and support

Each generally available capability has an SLO. Beta and alpha capabilities have no SLO and say so in the portal. Full SLO documents follow the SLO Document template (dev/slo-doc).

SLO IDCapabilityUser journeySLIObjectiveWindow
PSLO-01 (Example)CAP-01 PortalOpen the catalogue and service pagesShare of successful page loads under 2 s99.5%28 days
PSLO-02 (Example)CAP-02 Platform APIProvision a database claimShare of claims ready within 15 min99.0%28 days
PSLO-03 (Example)CAP-04 Build automationStart a pipeline runp95 queue time under 2 min95% of days28 days
PSLO-04 (Example)CAP-08 ClustersServe workload traffic (control plane and nodes)Share of minutes with healthy API server and schedulable capacity99.95%28 days
PSLO-05 (Example)CAP-13 Artifact storagePull an image during deployShare of successful pulls99.9%28 days
[PSLO-NN][Capability][Journey][SLI][Objective][Window]

8.1 Support model

TopicCommitment
HoursExample: 24/7 on call for CAP-02, CAP-04, CAP-08, CAP-13; business hours for the rest
Incident severityPer the Incident Severity Matrix (ops/incident-severity-matrix)
On-call rotaPer the On-call Handbook (ops/on-call-handbook)
Questions#nest-help, first response within [4 business hours]
Feature requestsPortal intake, triaged weekly, decision published within [10 business days]
DeprecationsAnnounced at least [6 months] ahead with a migration guide
Maintenance windows[Day and time], announced [5 business days] ahead

9. Adoption and developer experience metrics

The white paper groups platform measurement into three areas: user satisfaction and productivity, organisational efficiency, and product and feature delivery. Use at least one metric in each area. Survey design follows the Developer Experience Survey (dev/developer-experience-survey); delivery metrics come from the Delivery Performance Report (dev/delivery-performance-report), which uses the five DORA software delivery metrics.

Metric IDAreaMetricFormula or sourceBaselineTargetCadence
MET-01 (Example)User satisfaction and productivityPlatform satisfactionMean of "Nest helps me deliver" on a 1 to 5 scale2.94.0Twice yearly
MET-02 (Example)User satisfaction and productivityTime to first production deploy for a new engineerMedian days from start date to first merged change in production143Monthly
MET-03 (Example)Organisational efficiencyGolden path adoptionServices created from a golden path / all services created in period35%80%Monthly
MET-04 (Example)Organisational efficiencyTickets to the platform team per 100 engineersTicket count / (engineers / 100)4210Monthly
MET-05 (Example)Organisational efficiencyAllocated cloud costAllocation coverage (KPI-02 of the tagging standard): allocated EffectiveCost / total EffectiveCost71%98%Monthly
MET-06 (Example)Product and feature deliveryChange lead time (DORA)Median time from commit to production3 days1 dayMonthly
MET-07 (Example)Product and feature deliveryChange fail rate (DORA)Deployments needing immediate intervention (rollback, hotfix) / deployments14%8%Monthly
MET-08 (Example)Product and feature deliveryFailed deployment recovery time (DORA)Median time to recover from a failed deployment6 h1 hMonthly
[MET-NN][Area][Metric][Formula][Baseline][Target][Cadence]

Example calculation for MET-04: 189 tickets in a month for 450 engineers (the user groups in section 2: 240 + 35 + 12 + 30 + 8 + 125, platform teams excluded) gives 189 / (450 / 100) = 42 tickets per 100 engineers.

Report these metrics by platform capability and by product team, never as individual developer performance. Treat a fall in satisfaction with a rise in adoption as a warning that adoption is being forced.

10. Roadmap

QuarterThemeRoadmap itemJobs servedOutcome or metric movedStatus
[Q1 YYYY]Example: Paved road for servicesEvent consumer golden path generally availableJOB-001OUT-001, MET-03In progress
[Q2 YYYY]Example: Debug fasterUnified trace, log and deploy view in the portalJOB-002MET-01, MET-08Planned
[Q3 YYYY]Example: Environments on demandPer-branch preview environments (CAP-06)JOB-001MET-06Planned
[Q4 YYYY]Example: Evidence as a productControl evidence export per serviceJOB-004OUT-003Discovery
[Quarter][Theme][Item][JOB-NNN][OUT or MET][Status]

Publish the roadmap in the portal and review it each quarter with the user forum. Strategic choices that affect the whole engineering organisation are recorded in the Engineering Strategy (dev/engineering-strategy) and in architecture decision records.

11. Governance and decision making

ForumMembersDecidesCadence
Platform steering groupVP engineering, head of platform, CISO delegate, FinOps lead, two product directorsFunding, charter scope, enforced guardrailsQuarterly
Platform product reviewPlatform PM, platform leads, partner team representativesRoadmap priorities, release stage changesMonthly
Platform user forumOpen to all engineersFeedback, demos, roadmap inputQuarterly
Request for commentsAnyone, using the RFC template (dev/rfc)Proposals for new capabilities or breaking changesAs needed

11.1 Guardrails versus defaults

CategoryExamplesChange authorityException route
Enforced guardrailExample: Image signing, no public buckets, mandatory cost tags, secrets in the secrets storeSteering group with securityTime-limited exception with compensating control, approved by the CISO delegate
Recommended defaultExample: Language runtime, database engine, deployment strategyPlatform product reviewTeam decision recorded in an ADR
Free choiceExample: Libraries and test tools inside a serviceProduct teamNone needed

11.2 Review of this charter

Review the charter at least yearly and after any change in funding, team structure or enforced guardrails. Use the Platform Maturity Assessment (architecture/platform-maturity-assessment) as input; it rates investment, adoption, interfaces, operations and measurement on the four levels of the CNCF maturity model.

12. Risks and dependencies

Risk IDRiskLikelihoodImpactResponseOwner
RSK-001 (Example)Product teams keep their own pipelines because migration costs them timeHighHighDeveloper enablement team migrates the first 20 services with them[@platform-pm]
RSK-002 (Example)The platform becomes a single point of failure for all deploysMediumHighPSLO-03 and PSLO-05, multi-zone runners, documented break-glass deploy[@platform-delivery]
RSK-003 (Example)Key engineers leave and capability knowledge is lostMediumMediumPairing, runbooks, two owners per capability[@head-of-platform]
RSK-004 (Example)Funding is cut before outcomes are visibleMediumHighQuarterly outcome report to the sponsor[@vp-engineering]
[RSK-NNN][Risk][L][I][Response][@name]
DependencyProviderNeeded forStatus
Example: Landing zone with account vendingCloud foundation teamCAP-02, CAP-08Available
Example: Tagging policy enforcementFinOps and cloud foundationMET-05In progress
[Dependency][Provider][Capability][Status]

13. Glossary and references

13.1 Glossary

TermMeaning
Internal developer platform (IDP)Integrated set of capabilities, interfaces and documentation that internal teams use to build and run software
Platform capabilityA function the platform offers, such as provisioning a database or running a pipeline
Golden pathSupported, opinionated route for a common type of work, also called a paved road
Platform as a productRunning the platform with product management, user research and value metrics
Self-serviceUsers obtain a capability without a ticket or manual approval on the default path
Cognitive loadMental effort a team spends on things outside its core domain
GuardrailEnforced control that keeps the default path secure and compliant
X-as-a-ServiceInteraction mode in which one team consumes another team's offer with minimal collaboration
SLOService level objective: target for a service level indicator over a window

13.2 References

ReferenceVersion or date checkedUse
CNCF TAG App Delivery, Platforms White Paper, tag-app-delivery.cncf.io/whitepapers/platformsv1.0 (April 2023), checked 2026-10-2413 capability areas, 7 attributes, measurement areas
CNCF TAG App Delivery, Platform Engineering Maturity Model, tag-app-delivery.cncf.io/whitepapers/platform-eng-maturity-modelv1.0 (announced 2023-11-20), checked 2026-10-24Re-assessment input
DORA, software delivery performance metrics guide, dora.dev/guides/dora-metricsPage dated 2026-01-05Delivery metric names in section 9
Skelton, M. and Pais, M., Team Topologies (book)Cite onlyTeam types and interaction modes
Platform Golden Path (architecture/platform-golden-path)CompanionOne document per golden path
Team API (architecture/team-api)CompanionOne per platform team
Platform Maturity Assessment (architecture/platform-maturity-assessment)CompanionYearly re-assessment
Cost Allocation and Tagging Standard (ops/cost-allocation-tagging-standard)CompanionFunding and showback of platform spend
Kubernetes Cluster Design (ops/kubernetes-cluster-design)CompanionInfrastructure services
Infrastructure as Code Module Specification (ops/iac-module-specification)CompanionProvisioning building blocks
Developer Experience Survey (dev/developer-experience-survey)CompanionSatisfaction metrics
Delivery Performance Report (dev/delivery-performance-report)CompanionDORA metrics

Standard and licence note

Structure aligned with the Platforms White Paper (v1.0) of the CNCF Technical Advisory Group for App Delivery, Platforms Working Group, https://tag-app-delivery.cncf.io/whitepapers/platforms/, © The CNCF Authors, licensed under Creative Commons Attribution 4.0 International (CC BY 4.0, https://creativecommons.org/licenses/by/4.0/). The 13 capability names and 7 attribute names are used with attribution; all descriptions, principles, tests and examples are original to this collection and are not the white paper's text. DORA metric names follow dora.dev. Team types and interaction modes are concepts from the book Team Topologies, cited only. Corvid Commerce and Nest are fictional. Check the current official version of each source before use. Template licence: MIT.

相关模板