skills/ render-oss/skills

render-blueprints

Authors and validates render.yaml Blueprints for Render infrastructure. Use when the user needs to write or edit a render.yaml, wire services together with fromDatabase/fromService/fromGroup, set up projects and environments for multi-service apps, configure preview environments, validate against th

0
Installs
—
Rating
—
Success rate
11
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

11 files scannedscanner v1.2.0Oct 10, 2026

Content sha256 d42606123d79c9af… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Render Blueprints (render.yaml)

Blueprints define Render infrastructure as YAML (commonly render.yaml at the repo root). This skill focuses on authoring, wiring, projects/environments, previews, validation, and immutable fields. Heavy detail lives under references/.

Before creating or modifying a Blueprint, read references/blueprints.md for the current specification-fetch, validation, repository-sync, and safety workflow.

For current compute-plan terminology, Plan IDs, and availability, use references/compute-plans.md instead of relying on plan catalogs embedded in examples.

Before adding or changing a service-attached disk, read references/persistent-disks.md for current architectural constraints and configuration workflow.

Before wiring private-network addresses, ports, or discovery hostnames, read references/private-networking.md.

Before choosing a service type or translating its Dashboard name to Blueprint structure, read references/service-types.md.

When to Use

Apply this skill when the user:

  • Creates or edits a render.yaml / Blueprint
  • Wires databases, private services, or Key Value into app env vars
  • Groups services with projects and environments
  • Configures preview environments for pull requests
  • Validates YAML against Render’s schema or CLI
  • Asks what can or cannot change after a resource is created

For end-to-end deploy flows and MCP/CLI operations, see render-deploy. For env var strategy outside Blueprint syntax, see render-env-vars. For Docker-specific Blueprint fields, see render-docker.

Blueprint Structure

Top-level keys

KeyPurpose
servicesWeb, worker, cron, private service, Key Value, static (via web + runtime: static)
databasesManaged PostgreSQL instances
envVarGroupsReusable env var sets attached to services
projectsOptional grouping; contains environments and service lists
previewsDefaults for PR preview environments

A Blueprint may also use patterns like ungrouped resources vs environment-scoped lists, depending on whether you adopt the projects model. See references/common-mistakes.md for duplication and naming pitfalls.

Minimal example: web + PostgreSQL

databases:
  - name: mydb
    plan: basic-256mb
    region: oregon

services:
  - type: web
    name: api
    runtime: node
    region: oregon
    plan: starter
    buildCommand: npm ci && npm run build
    startCommand: npm start
    envVars:
      - key: DATABASE_URL
        fromDatabase:
          name: mydb
          property: connectionString

Service Types

typeRole
webPublic HTTP service (use runtime: static for static sites)
pservPrivate service (internal HTTP/TCP; not public)
workerLong-running background process
cronScheduled job (schedule required)
keyvalueManaged Key Value (Redis-compatible); alias redis accepted in Blueprints

Runtimes

Common runtime values: node, python, go, ruby, rust, elixir, docker, image, static.

  • docker: Build from Dockerfile (see dockerfilePath, dockerContext, dockerCommand).
  • image: Run a prebuilt container image with image.url and optional image.creds.fromRegistryCreds.
  • static: Static site; requires staticPublishPath and build output paths (see references).

Cross-Service Wiring

Before configuring variables, secrets, secret files, or environment groups, read references/environment-variables.md.

Service env vars under envVars can pull values from other resources instead of hardcoding secrets. Environment-group variables cannot reference services, databases, or other environment groups.

fromDatabase

Reference a database in databases: by name. Properties include:

  • connectionString, connectionPoolString, host, port, user, password, database

fromService

Reference a service by name. Typical properties:

  • host, port, hostport, connectionString, envVarKey

Which properties are valid depends on target service type (e.g. Key Value vs pserv). See references/wiring-patterns.md.

fromGroup

Attach shared vars from envVarGroups (by group name).

Full patterns and combinations: references/wiring-patterns.md.

Projects and Environments

For multi-service apps, use the projects/environments pattern instead of flat top-level services/databases. This groups all related resources into a single Render project, supports multiple environments (production, staging), and enables environment-scoped configuration.

projects:
  - name: my-app
    environments:
      - name: production
        services:
          - type: web
            name: api
            runtime: node
            plan: standard
            buildCommand: npm ci && npm run build
            startCommand: npm start
            envVars:
              - key: DATABASE_URL
                fromDatabase:
                  name: db
                  property: connectionString
              - key: REDIS_URL
                fromService:
                  type: keyvalue
                  name: cache
                  property: connectionString
              - key: API_SECRET
                sync: false

          - type: worker
            name: jobs
            runtime: node
            plan: starter
            buildCommand: npm ci
            startCommand: node worker.js
            envVars:
              - key: DATABASE_URL
                fromDatabase:
                  name: db
                  property: connectionString
              - key: REDIS_URL
                fromService:
                  type: keyvalue
                  name: cache
                  property: connectionString

          - type: keyvalue
            name: cache
            plan: starter
            maxmemoryPolicy: noeviction
            ipAllowList: [] # Internal access only

        databases:
          - name: db
            plan: basic-256mb

Key rules:

  • Each environment owns its services and databases lists.
  • Do not define the same resource at both the root level and inside an environment.
  • envVarGroups can be scoped to a project environment or shared across the workspace.
  • With a Pro workspace or higher, environment isolation can block cross-environment private network traffic.

For single-service apps, flat top-level services/databases is fine. Reach for the projects pattern when you have multiple services, need staging/production separation, or want environment-scoped env groups.

Preview Environments

When a preview request is underspecified, first establish the desired generation mode, retention period, preview compute plans, and whether the user expects to exclude any resources.

Top-level previews controls Blueprint preview environments:

  • previews.generation: off (default), manual, or automatic
  • previews.expireAfterDays: Auto-delete preview stacks after N days

Do not confuse preview environments with service previews:

  • A top-level previews.generation: automatic creates the Blueprint's preview environment, including the resources declared by that Blueprint.
  • A service-level previews.generation controls that service's independent service previews. It does not override the Blueprint preview environment or exclude that service from it. It accepts only manual or automatic; omit it to disable independent service previews.
  • Use previews.plan and previews.numInstances on compute services to size their preview-environment instances. Key Value and Postgres use previewPlan instead.

If a user needs a worker or another resource omitted entirely from Blueprint preview environments, explain that service-level preview generation is not an exclusion mechanism; the Blueprint or application architecture must account for that requirement. Other limitations include autoscaling behavior, sync: false variables, and database plan compatibility—see references/preview-environments.md.

Immutable Fields

CRITICAL: Some fields cannot change after the resource is created. Edits may be rejected or require replacement resources.

Services

  • type: Cannot change (e.g. web → worker).
  • runtime: Cannot change (e.g. node → docker).

Databases

Cannot change after creation:

  • name (logical Blueprint/database identifier in this context)
  • databaseName
  • user
  • region
  • postgresMajorVersion

Plan other fields (disk, HA, replicas) carefully up front; consult Render docs for fields that can scale vs require recreation.

Key Fields (Quick Map)

AreaFields
Plansplan; compute-service previews.plan; Key Value/Postgres previewPlan
Build/runbuildCommand, startCommand, preDeployCommand, rootDir
DeployautoDeployTrigger: commit, checksPass, or off
LifecyclemaxShutdownDelaySeconds: 1–300, default 30
HTTPhealthCheckPath, domains
Storagedisk (name, mountPath, sizeGB)
Scalescaling / numInstances (see references)
MonorepobuildFilter (paths, ignoredPaths)
DockerdockerfilePath, dockerContext, dockerCommand, registryCredential; prebuilt image.url / image.creds

Deprecated names to avoid: env (use runtime), redis (use keyvalue), autoDeploy (use autoDeployTrigger), previewsEnabled, and pullRequestPreviewsEnabled. Use the appropriate top-level or service-level previews.generation replacement described in references/common-mistakes.md.

References

DocumentContents
references/blueprints.mdCurrent Blueprint specification, schema, validation, repository-sync, and safety workflow
references/compute-plans.mdCurrent compute-plan terminology, Plan ID discovery, availability, and change behavior
references/environment-variables.mdCurrent environment-variable documentation, secrets, groups, platform variables, and mutation safety
references/persistent-disks.mdService-attached disk constraints, current documentation, sizing, snapshots, and Blueprint workflow
references/private-networking.mdPrivate-network scope, addresses, Blueprint references, discovery, ports, and isolation
references/service-types.mdService-type selection, execution models, and Blueprint naming
references/field-reference.mdYAML fields by service type, database, groups, projects, previews, scaling, disk, static, Key Value
references/wiring-patterns.mdfromDatabase / fromService / fromGroup examples and combined wiring patterns
references/common-mistakes.mdBranch + previews, buildFilter, replicas, duplicates, preview plans, wiring mistakes
references/preview-environments.mdpreviews.generation, expiry, previews.plan, previewPlan, disks, PR workflow

Related Skills

  • render-deploy — Deploy flows, Blueprint vs direct create, MCP/deeplinks
  • render-env-vars — Env var strategy, secrets, Dashboard vs Blueprint
  • render-docker — Dockerfile-backed services and image runtime nuances

Current documentation retrieval

Whenever this skill directs you to consult current Render documentation:

  1. Retrieve the linked Markdown document directly with an available URL-fetching tool or HTTP client, such as curl. Do not substitute web-search summaries for the document.
  2. Confirm that retrieval succeeded and returned the expected document, then read its contents. Saving a file or printing its path is not sufficient.
  3. If the request fails or your tool cannot read the Markdown response, open and read the linked HTML version instead.
  4. If neither version can be retrieved, disclose that the current reference is unavailable and follow any topic-specific fallback in the skill. Use bundled guidance only for stable constraints, and do not guess at changeable platform details.

When a task requires multiple references, apply this workflow to each one and distinguish the documents you verified from those that remain unavailable.

Files

11
56.9 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from render-oss/skills8

render-background-workers

Sets up and configures background workers on Render for queue-based job processing. Use when the user needs to process async jobs, consume from a queue, run Celery/Sidekiq/BullMQ/Asynq/Oban workers, handle graceful shutdown with SIGTERM, wire a worker to Key Value, or choose between workers and cron

Scan passed 0
render-cli

Installs and uses the Render CLI for deploys, logs, SSH, psql, Blueprint validation, and automation. Use when the user needs to run Render CLI commands, script deploys in CI/CD, authenticate with an API key, query services non-interactively, or troubleshoot CLI auth issues. Trigger terms: render CLI

Needs review 0
render-cron-jobs

Configures and troubleshoots scheduled tasks on Render using cron job services. Use when the user needs to run something on a schedule, write a cron expression, set up a periodic job, migrate from Heroku Scheduler, choose between cron jobs and background workers, or fix a cron that isn't firing. Tri

Scan passed 0
render-debug

Debug failed Render deployments by analyzing logs, metrics, and database state. Identifies errors (missing env vars, port binding, OOM, etc.) and suggests fixes. Use when deployments fail, services won't start, or users mention errors, logs, or debugging.

Scan passed 0
render-deploy

Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform.

Scan passed 0
render-disks

Attaches and manages persistent disks on Render services—mount paths, sizing, snapshots, file transfers, and single-instance constraints. Use when the user needs persistent storage, file uploads, a custom database on disk, CMS media storage, or needs to understand why their service can't scale horiz

Scan passed 0
render-docker

Builds and deploys Docker containers on Render—Dockerfiles, multi-stage builds, Blueprint Docker fields, private registries, layer caching, and platform constraints. Use when the user mentions Docker, Dockerfile, container images, multi-stage builds, container registry, GHCR, ECR, BuildKit, dockerCo

Scan passed 0
render-domains

Configures custom domains and TLS certificates on Render—DNS setup, CNAME records, apex domains, wildcard domains, and certificate troubleshooting. Use when the user needs to add a custom domain, configure DNS, set up HTTPS/TLS, troubleshoot certificate issuance, disable the onrender.com subdomain,

Needs review 0

Related devops skillsscan passed

adapter-fetch

Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The

Scan passed 0
ci-cd-and-automation

Automates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test runners in CI, or establish deployment strategies.

Scan passed 0
deployment-patterns

Deployment workflows, CI/CD pipeline patterns, Docker containerization, health checks, rollback strategies, and production readiness checklists for web applications. Use when setting up CI/CD, containerizing an app, or checking production readiness before a release.

Scan passed 0
firebase-hosting-basics

Deploys and configures classic Firebase Hosting for static websites, single-page apps (SPAs), and microservices. Use when deploying static sites/SPAs, setting up custom domains, configuring firebase.json hosting settings (redirects, rewrites, headers, multi-site), or managing preview channels. Don't

Scan passed 0
writing-skills

Use when creating new skills, editing existing skills, or verifying skills work before deployment

Scan passed 0
resilience-hub-failure-mode-assessment

Runs and interprets AWS Resilience Hub v2 failure mode assessments. Covers starting assessments, understanding findings (severity, categories, recommendations), triaging by achievability, working with AI-generated service functions, and resolving findings. Applies when the user wants to run an asses

Scan passed 0