Skip to content

fix(create-plugin): Improve experimental-app-sdk templates with RBAC guidance. - #2892

Merged
stevesg merged 5 commits into
grafana:mainfrom
stevesg:stevesg/rbac-guidance
Sep 22, 2026
Merged

stevesg merged 5 commits into
grafana:mainfrom
stevesg:stevesg/rbac-guidance

Conversation

@stevesg

@stevesg stevesg commented Sep 18, 2026

Copy link
Copy Markdown
Contributor

Various tweaks:

  • Add an "Authorization & RBAC" section to .config/app-sdk/README.md covering folder-scoped vs. cluster-scoped kinds, folderScoped/userReadable fields, and roles/role bindings, with CUE examples.
  • Add concise RBAC directives to .config/AGENTS/app-sdk.md (no permission checks in code, folder-scoping defaults, cluster-kind visibility, role binding requirement, admin/editor parity caveat).
  • Add commented-out roles/roleBindings examples to kinds/manifest.cue and commented-out folderScoped/userReadable fields to kinds/example.cue so scaffolded plugins show the shape out of the box.

Also a drive-by fix of the agents guidance saying there is never a backend; make it more generic.

Part of https://github.com/grafana/grafana-app-platform-squad/issues/111

…guidance.

Various tweaks:

- Add an "Authorization & RBAC" section to .config/app-sdk/README.md covering folder-scoped vs. cluster-scoped kinds, folderScoped/userReadable fields, and roles/role bindings, with CUE examples.
- Add concise RBAC directives to .config/AGENTS/app-sdk.md (no permission checks in code, folder-scoping defaults, cluster-kind visibility, role binding requirement, admin/editor parity caveat).
- Add commented-out roles/roleBindings examples to kinds/manifest.cue and commented-out folderScoped/userReadable fields to kinds/example.cue so scaffolded plugins show the shape out of the box.
@stevesg
stevesg requested a review from a team as a code owner September 18, 2026 13:03
@stevesg
stevesg requested review from ashharrison90 and jackw and removed request for a team September 18, 2026 13:03
@stevesg
stevesg requested a review from konsalex September 18, 2026 13:03
Comment thread packages/create-plugin/templates/app-sdk/.config/app-sdk/README.md
Comment thread packages/create-plugin/templates/app-sdk/.config/app-sdk/README.md Outdated
@grafana-catalog-project-bot grafana-catalog-project-bot Bot moved this from 📬 Triage to 🔬 In review in Grafana Catalog Team Sep 18, 2026

@jackw jackw left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

@stevesg
stevesg merged commit ec59abe into grafana:main Sep 22, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🚀 Shipped

Development

Successfully merging this pull request may close these issues.

3 participants