From d131384763b52327fec41af950650dcd5804864c Mon Sep 17 00:00:00 2001 From: Dominika Zemanovicova Date: Wed, 22 Jan 2025 15:39:51 +0100 Subject: [PATCH] Add docs Signed-off-by: Dominika Zemanovicova --- docs/features/kubernetes/permissions.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 docs/features/kubernetes/permissions.md diff --git a/docs/features/kubernetes/permissions.md b/docs/features/kubernetes/permissions.md new file mode 100644 index 0000000000..fd0ab23418 --- /dev/null +++ b/docs/features/kubernetes/permissions.md @@ -0,0 +1,18 @@ +--- +id: permissions +title: Permissions +description: Configuring permissions for Kubernetes plugin +--- + +The Kubernetes plugin integrates with the permission framework. Administrators can define PermissionPolicies +to restrict access to the `/clusters`, `/services/:serviceId`, `/resources` and `/proxy` endpoints. + +This feature assumes your Backstage instance has enabled the [permissions framework](https://backstage.io/docs/permissions/getting-started). + +### Available permissions + +| Name | Policy | Description | +| ------------------------- | ------ | -------------------------------------------------------------------------------------------------------------------------- | +| kubernetes.clusters.read | read | Allows the user to read Kubernetes clusters information | +| kubernetes.resources.read | read | Allows the user to read Kubernetes resources information | +| kubernetes.proxy | | Allows the user to make arbitrary requests to the [REST API](https://kubernetes.io/docs/reference/using-api/api-concepts/) |