diff --git a/.changeset/chatty-ghosts-lay.md b/.changeset/chatty-ghosts-lay.md
deleted file mode 100644
index 7d8ef3edbd..0000000000
--- a/.changeset/chatty-ghosts-lay.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-sonarqube': patch
----
-
-Export isSonarQubeAvailable.
diff --git a/.changeset/clever-walls-bow.md b/.changeset/clever-walls-bow.md
deleted file mode 100644
index 36e56f6e37..0000000000
--- a/.changeset/clever-walls-bow.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-scaffolder-backend': patch
----
-
-Add built-in publish action for creating GitHub pull requests.
diff --git a/.changeset/fluffy-rice-push.md b/.changeset/fluffy-rice-push.md
deleted file mode 100644
index 032d580c6b..0000000000
--- a/.changeset/fluffy-rice-push.md
+++ /dev/null
@@ -1,30 +0,0 @@
----
-'@backstage/create-app': patch
----
-
-Fixing dependency resolution for problematic library `graphql-language-service-interface`.
-
-This change might not have to be applied to your local installation, however if you run into this error:
-
-```
-Error: Failed to compile.
-/tmp/backstage-e2e-uMeycm/test-app/node_modules/graphql-language-service-interface/esm/GraphQLLanguageService.js 100:23
-Module parse failed: Unexpected token (100:23)
-You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
-|         }
-|         let customRules = null;
->         if (extensions?.customValidationRules &&
-|             typeof extensions.customValidationRules === 'function') {
-|             customRules = extensions.customValidationRules(this._graphQLConfig);
-```
-
-You can fix it by adding the following to the root `package.json`.
-
-```json
-...
-"resolutions": {
-  "graphql-language-service-interface": "2.8.2",
-  "graphql-language-service-parser": "1.9.0"
- },
-...
-```
diff --git a/.changeset/forty-paws-drum.md b/.changeset/forty-paws-drum.md
deleted file mode 100644
index 1f3b587b8a..0000000000
--- a/.changeset/forty-paws-drum.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-scaffolder-backend': patch
----
-
-Fix for the `file://` protocol check in the `FilePreparer` being too strict, breaking Windows.
diff --git a/.changeset/green-otters-grin.md b/.changeset/green-otters-grin.md
deleted file mode 100644
index abfd332a2b..0000000000
--- a/.changeset/green-otters-grin.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-catalog-backend': patch
----
-
-Add support for configure an LDAP query filter on multiple lines.
diff --git a/.changeset/loud-apricots-fix.md b/.changeset/loud-apricots-fix.md
deleted file mode 100644
index 3763ebf0e3..0000000000
--- a/.changeset/loud-apricots-fix.md
+++ /dev/null
@@ -1,31 +0,0 @@
----
-'@backstage/create-app': patch
-'@backstage/plugin-scaffolder': minor
----
-
-Expose the catalog-import route as an external route from the scaffolder.
-
-This will make it possible to hide the "Register Existing Component" button
-when you for example are running backstage with `catalog.readonly=true`.
-
-As a consequence of this change you need add a new binding to your createApp call to
-keep the button visible. However, if you instead want to hide the button you can safely
-ignore the following example.
-
-To bind the external route from the catalog-import plugin to the scaffolder template
-index page, make sure you have the appropriate imports and add the following
-to the createApp call:
-
-```typescript
-import { catalogImportPlugin } from '@backstage/plugin-catalog-import';
-
-const app = createApp({
-  // ...
-  bindRoutes({ bind }) {
-    // ...
-    bind(scaffolderPlugin.externalRoutes, {
-      registerComponent: catalogImportPlugin.routes.importPage,
-    });
-  },
-});
-```
diff --git a/.changeset/moody-pigs-repeat.md b/.changeset/moody-pigs-repeat.md
new file mode 100644
index 0000000000..396fa80281
--- /dev/null
+++ b/.changeset/moody-pigs-repeat.md
@@ -0,0 +1,5 @@
+---
+'@backstage/core': patch
+---
+
+Exported SignInProviderConfig to strongly type SignInPage providers
diff --git a/.changeset/odd-toys-kiss.md b/.changeset/odd-toys-kiss.md
deleted file mode 100644
index 888ba5f752..0000000000
--- a/.changeset/odd-toys-kiss.md
+++ /dev/null
@@ -1,14 +0,0 @@
----
-'@backstage/plugin-scaffolder-backend': patch
----
-
-Bitbucket server needs username to be set as well as the token or appPassword for the publishing process to work.
-
-```yaml
-integrations:
-  bitbucket:
-    - host: bitbucket.mycompany.com
-      apiBaseUrl: https://bitbucket.mycompany.com/rest/api/1.0
-      token: token
-      username: username
-```
diff --git a/.changeset/red-planets-hammer.md b/.changeset/red-planets-hammer.md
deleted file mode 100644
index eb72314556..0000000000
--- a/.changeset/red-planets-hammer.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-'@backstage/catalog-model': patch
-'@backstage/plugin-catalog-backend': patch
-'@backstage/plugin-catalog': patch
----
-
-Implemented missing support for the dependsOn/dependencyOf relationships
-between `Component` and `Resource` catalog model objects.
-
-Added support for generating the relevant relationships to the
-`BuiltinKindsEntityProcessor`, and added simple support for fetching
-relationships between `Components` and `Resources` for rendering in the
-system diagram. All catalog-model changes backwards compatible.
diff --git a/.changeset/stale-jobs-tease.md b/.changeset/stale-jobs-tease.md
deleted file mode 100644
index e62f87afe7..0000000000
--- a/.changeset/stale-jobs-tease.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-'@backstage/plugin-techdocs-backend': patch
----
-
-Change the response status of metadata endpoints in case a documentation is not
-available to `404 NOT FOUND`. This also introduces the JSON based error messages
-used by other backends.
diff --git a/.changeset/tasty-apples-sell.md b/.changeset/tasty-apples-sell.md
deleted file mode 100644
index d24cd61e37..0000000000
--- a/.changeset/tasty-apples-sell.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-scaffolder-backend': patch
----
-
-Adds a collaborator field to GitHub publish action for multiple users and access levels
diff --git a/.changeset/techdocs-dry-starfishes-carry.md b/.changeset/techdocs-dry-starfishes-carry.md
deleted file mode 100644
index f5841c6994..0000000000
--- a/.changeset/techdocs-dry-starfishes-carry.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-techdocs': patch
----
-
-Add borders to TechDocs tables and increase font size. Fixes #5264 and #5276.
diff --git a/.changeset/techdocs-swift-mugs-invent.md b/.changeset/techdocs-swift-mugs-invent.md
new file mode 100644
index 0000000000..912089fb3c
--- /dev/null
+++ b/.changeset/techdocs-swift-mugs-invent.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs': patch
+---
+
+Add a test id to the shadow root element of the Reader to access it easily in e2e tests
diff --git a/.changeset/tender-turtles-smash.md b/.changeset/tender-turtles-smash.md
deleted file mode 100644
index 645ed688db..0000000000
--- a/.changeset/tender-turtles-smash.md
+++ /dev/null
@@ -1,6 +0,0 @@
----
-'@backstage/core': patch
-'@backstage/plugin-api-docs': patch
----
-
-add debounce time attribute for apis-docs for search, giving more time to the users when they are typing.
diff --git a/.changeset/thirty-owls-lay.md b/.changeset/thirty-owls-lay.md
deleted file mode 100644
index 3f3ce64606..0000000000
--- a/.changeset/thirty-owls-lay.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/core': patch
----
-
-exposes undocumented `PageTheme`
diff --git a/.changeset/wicked-mirrors-scream.md b/.changeset/wicked-mirrors-scream.md
deleted file mode 100644
index 204d3b7eac..0000000000
--- a/.changeset/wicked-mirrors-scream.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/core': patch
----
-
-Don't use a drag & drop cursor when clicking on disabled `IconLinkVertical`.
diff --git a/.changeset/witty-rats-bake.md b/.changeset/witty-rats-bake.md
deleted file mode 100644
index 2189961899..0000000000
--- a/.changeset/witty-rats-bake.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@backstage/plugin-scaffolder-backend': patch
----
-
-Fix bug in pull request sample template.
diff --git a/.github/styles/vocab.txt b/.github/styles/vocab.txt
index 8c385e1bbb..226af9bf0a 100644
--- a/.github/styles/vocab.txt
+++ b/.github/styles/vocab.txt
@@ -114,6 +114,7 @@ dataflow
 deadnaming
 debounce
 declaratively
+deps
 destructured
 dev
 devops
diff --git a/.tugboat/tugboat.app-config.production.yaml b/.tugboat/tugboat.app-config.production.yaml
index f606574d89..b264d53f3f 100644
--- a/.tugboat/tugboat.app-config.production.yaml
+++ b/.tugboat/tugboat.app-config.production.yaml
@@ -1,13 +1,10 @@
 app:
   title: Backstage Tugboat Preview
-  baseUrl:
-    $env: TUGBOAT_DEFAULT_SERVICE_URL
+  baseUrl: ${TUGBOAT_DEFAULT_SERVICE_URL}
 
 backend:
-  baseUrl:
-    $env: TUGBOAT_DEFAULT_SERVICE_URL
+  baseUrl: ${TUGBOAT_DEFAULT_SERVICE_URL}
   cors:
-    origin:
-      $env: TUGBOAT_DEFAULT_SERVICE_URL
+    origin: ${TUGBOAT_DEFAULT_SERVICE_URL}
     methods: [GET, POST, PUT, DELETE]
     credentials: true
diff --git a/app-config.yaml b/app-config.yaml
index 309fa28234..afbda40852 100644
--- a/app-config.yaml
+++ b/app-config.yaml
@@ -40,47 +40,40 @@ proxy:
   '/circleci/api':
     target: https://circleci.com/api/v1.1
     headers:
-      Circle-Token:
-        $env: CIRCLECI_AUTH_TOKEN
+      Circle-Token: ${CIRCLECI_AUTH_TOKEN}
 
   '/jenkins/api':
     target: http://localhost:8080
     headers:
-      Authorization:
-        $env: JENKINS_BASIC_AUTH_HEADER
+      Authorization: ${JENKINS_BASIC_AUTH_HEADER}
 
   '/travisci/api':
     target: https://api.travis-ci.com
     changeOrigin: true
     headers:
-      Authorization:
-        $env: TRAVISCI_AUTH_TOKEN
+      Authorization: ${TRAVISCI_AUTH_TOKEN}
       travis-api-version: '3'
 
   '/newrelic/apm/api':
     target: https://api.newrelic.com/v2
     headers:
-      X-Api-Key:
-        $env: NEW_RELIC_REST_API_KEY
+      X-Api-Key: ${NEW_RELIC_REST_API_KEY}
 
   '/pagerduty':
     target: https://api.pagerduty.com
     headers:
-      Authorization:
-        $env: PAGERDUTY_TOKEN
+      Authorization: ${PAGERDUTY_TOKEN}
 
   '/buildkite/api':
     target: https://api.buildkite.com/v2/
     headers:
-      Authorization:
-        $env: BUILDKITE_TOKEN
+      Authorization: ${BUILDKITE_TOKEN}
 
   '/sentry/api':
     target: https://sentry.io/api/
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        $env: SENTRY_TOKEN
+      Authorization: ${SENTRY_TOKEN}
 
 organization:
   name: My Company
@@ -124,36 +117,28 @@ kafka:
 integrations:
   github:
     - host: github.com
-      token:
-        $env: GITHUB_TOKEN
+      token: ${GITHUB_TOKEN}
     ### Example for how to add your GitHub Enterprise instance using the API:
     # - host: ghe.example.net
     #   apiBaseUrl: https://ghe.example.net/api/v3
-    #   token:
-    #     $env: GHE_TOKEN
+    #   token: ${GHE_TOKEN}
     ### Example for how to add your GitHub Enterprise instance using raw HTTP fetches (token is optional):
     # - host: ghe.example.net
     #   rawBaseUrl: https://ghe.example.net/raw
-    #   token:
-    #     $env: GHE_TOKEN
+    #   token: ${GHE_TOKEN}
   gitlab:
     - host: gitlab.com
-      token:
-        $env: GITLAB_TOKEN
+      token: ${GITLAB_TOKEN}
   bitbucket:
     - host: bitbucket.org
-      username:
-        $env: BITBUCKET_USERNAME
-      appPassword:
-        $env: BITBUCKET_APP_PASSWORD
+      username: ${BITBUCKET_USERNAME}
+      appPassword: ${BITBUCKET_APP_PASSWORD}
   azure:
     - host: dev.azure.com
-      token:
-        $env: AZURE_TOKEN
+      token: ${AZURE_TOKEN}
 #  googleGcs:
 #    clientEmail: 'example@example.com'
-#    privateKey:
-#      $env: GCS_PRIVATE_KEY
+#    privateKey: ${GCS_PRIVATE_KEY}
 
 catalog:
   rules:
@@ -172,21 +157,18 @@ catalog:
     githubOrg:
       providers:
         - target: https://github.com
-          token:
-            $env: GITHUB_TOKEN
+          token: ${GITHUB_TOKEN}
         #### Example for how to add your GitHub Enterprise instance using the API:
         # - target: https://ghe.example.net
         #   apiBaseUrl: https://ghe.example.net/api
-        #   token:
-        #     $env: GHE_TOKEN
+        #   token: ${GHE_TOKEN}
     ldapOrg:
       ### Example for how to add your enterprise LDAP server
       # providers:
       #   - target: ldaps://ds.example.net
       #     bind:
       #       dn: uid=ldap-reader-user,ou=people,ou=example,dc=example,dc=net
-      #       secret:
-      #         $env: LDAP_SECRET
+      #       secret: ${LDAP_SECRET}
       #     users:
       #       dn: ou=people,ou=example,dc=example,dc=net
       #       options:
@@ -202,12 +184,9 @@ catalog:
       #providers:
       #  - target: https://graph.microsoft.com/v1.0
       #    authority: https://login.microsoftonline.com
-      #    tenantId:
-      #      $env: MICROSOFT_GRAPH_TENANT_ID
-      #    clientId:
-      #      $env: MICROSOFT_GRAPH_CLIENT_ID
-      #    clientSecret:
-      #      $env: MICROSOFT_GRAPH_CLIENT_SECRET_TOKEN
+      #    tenantId: ${MICROSOFT_GRAPH_TENANT_ID}
+      #    clientId: ${MICROSOFT_GRAPH_CLIENT_ID}
+      #    clientSecret: ${MICROSOFT_GRAPH_CLIENT_SECRET_TOKEN}
       #    userFilter: accountEnabled eq true and userType eq 'member'
       #    groupFilter: securityEnabled eq false and mailEnabled eq true and groupTypes/any(c:c+eq+'Unified')
 
@@ -255,27 +234,22 @@ catalog:
 
 scaffolder:
   github:
-    token:
-      $env: GITHUB_TOKEN
+    token: ${GITHUB_TOKEN}
     visibility: public # or 'internal' or 'private'
   gitlab:
     api:
       baseUrl: https://gitlab.com
-      token:
-        $env: GITLAB_TOKEN
+      token: ${GITLAB_TOKEN}
     visibility: public # or 'internal' or 'private'
   azure:
     baseUrl: https://dev.azure.com/{your-organization}
     api:
-      token:
-        $env: AZURE_TOKEN
+      token: ${AZURE_TOKEN}
   bitbucket:
     api:
       host: https://bitbucket.org
-      username:
-        $env: BITBUCKET_USERNAME
-      token:
-        $env: BITBUCKET_TOKEN
+      username: ${BITBUCKET_USERNAME}
+      token: ${BITBUCKET_TOKEN}
     visibility: public # or or 'private'
 
 auth:
@@ -286,89 +260,59 @@ auth:
   providers:
     google:
       development:
-        clientId:
-          $env: AUTH_GOOGLE_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GOOGLE_CLIENT_SECRET
+        clientId: ${AUTH_GOOGLE_CLIENT_ID}
+        clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
     github:
       development:
-        clientId:
-          $env: AUTH_GITHUB_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GITHUB_CLIENT_SECRET
-        enterpriseInstanceUrl:
-          $env: AUTH_GITHUB_ENTERPRISE_INSTANCE_URL
+        clientId: ${AUTH_GITHUB_CLIENT_ID}
+        clientSecret: ${AUTH_GITHUB_CLIENT_SECRET}
+        enterpriseInstanceUrl: ${AUTH_GITHUB_ENTERPRISE_INSTANCE_URL}
     gitlab:
       development:
-        clientId:
-          $env: AUTH_GITLAB_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GITLAB_CLIENT_SECRET
-        audience:
-          $env: GITLAB_BASE_URL
+        clientId: ${AUTH_GITLAB_CLIENT_ID}
+        clientSecret: ${AUTH_GITLAB_CLIENT_SECRET}
+        audience: ${GITLAB_BASE_URL}
     saml:
       entryPoint: 'http://localhost:7001/'
       issuer: 'passport-saml'
     okta:
       development:
-        clientId:
-          $env: AUTH_OKTA_CLIENT_ID
-        clientSecret:
-          $env: AUTH_OKTA_CLIENT_SECRET
-        audience:
-          $env: AUTH_OKTA_AUDIENCE
+        clientId: ${AUTH_OKTA_CLIENT_ID}
+        clientSecret: ${AUTH_OKTA_CLIENT_SECRET}
+        audience: ${AUTH_OKTA_AUDIENCE}
     oauth2:
       development:
-        clientId:
-          $env: AUTH_OAUTH2_CLIENT_ID
-        clientSecret:
-          $env: AUTH_OAUTH2_CLIENT_SECRET
-        authorizationUrl:
-          $env: AUTH_OAUTH2_AUTH_URL
-        tokenUrl:
-          $env: AUTH_OAUTH2_TOKEN_URL
+        clientId: ${AUTH_OAUTH2_CLIENT_ID}
+        clientSecret: ${AUTH_OAUTH2_CLIENT_SECRET}
+        authorizationUrl: ${AUTH_OAUTH2_AUTH_URL}
+        tokenUrl: ${AUTH_OAUTH2_TOKEN_URL}
         ###
         # provide a list of scopes as needed for your OAuth2 Server:
         #
         # scope: saml-login-selector openid profile email
     oidc:
       development:
-        metadataUrl:
-          $env: AUTH_OIDC_METADATA_URL
-        clientId:
-          $env: AUTH_OIDC_CLIENT_ID
-        clientSecret:
-          $env: AUTH_OIDC_CLIENT_SECRET
-        authorizationUrl:
-          $env: AUTH_OIDC_AUTH_URL
-        tokenUrl:
-          $env: AUTH_OIDC_TOKEN_URL
-        tokenSignedResponseAlg:
-          $env: AUTH_OIDC_TOKEN_SIGNED_RESPONSE_ALG
+        metadataUrl: ${AUTH_OIDC_METADATA_URL}
+        clientId: ${AUTH_OIDC_CLIENT_ID}
+        clientSecret: ${AUTH_OIDC_CLIENT_SECRET}
+        authorizationUrl: ${AUTH_OIDC_AUTH_URL}
+        tokenUrl: ${AUTH_OIDC_TOKEN_URL}
+        tokenSignedResponseAlg: ${AUTH_OIDC_TOKEN_SIGNED_RESPONSE_ALG}
     auth0:
       development:
-        clientId:
-          $env: AUTH_AUTH0_CLIENT_ID
-        clientSecret:
-          $env: AUTH_AUTH0_CLIENT_SECRET
-        domain:
-          $env: AUTH_AUTH0_DOMAIN
+        clientId: ${AUTH_AUTH0_CLIENT_ID}
+        clientSecret: ${AUTH_AUTH0_CLIENT_SECRET}
+        domain: ${AUTH_AUTH0_DOMAIN}
     microsoft:
       development:
-        clientId:
-          $env: AUTH_MICROSOFT_CLIENT_ID
-        clientSecret:
-          $env: AUTH_MICROSOFT_CLIENT_SECRET
-        tenantId:
-          $env: AUTH_MICROSOFT_TENANT_ID
+        clientId: ${AUTH_MICROSOFT_CLIENT_ID}
+        clientSecret: ${AUTH_MICROSOFT_CLIENT_SECRET}
+        tenantId: ${AUTH_MICROSOFT_TENANT_ID}
     onelogin:
       development:
-        clientId:
-          $env: AUTH_ONELOGIN_CLIENT_ID
-        clientSecret:
-          $env: AUTH_ONELOGIN_CLIENT_SECRET
-        issuer:
-          $env: AUTH_ONELOGIN_ISSUER
+        clientId: ${AUTH_ONELOGIN_CLIENT_ID}
+        clientSecret: ${AUTH_ONELOGIN_CLIENT_SECRET}
+        issuer: ${AUTH_ONELOGIN_ISSUER}
 costInsights:
   engineerCost: 200000
   products:
diff --git a/contrib/chart/backstage/values.yaml b/contrib/chart/backstage/values.yaml
index 7b26d2bccd..bd80bc22b6 100644
--- a/contrib/chart/backstage/values.yaml
+++ b/contrib/chart/backstage/values.yaml
@@ -127,68 +127,47 @@ appConfig:
         development:
           appOrigin: 'http://localhost:3000/'
           secure: false
-          clientId:
-            $env: AUTH_GOOGLE_CLIENT_ID
-          clientSecret:
-            $env: AUTH_GOOGLE_CLIENT_SECRET
+          clientId: ${AUTH_GOOGLE_CLIENT_ID}
+          clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
       github:
         development:
           appOrigin: 'http://localhost:3000/'
           secure: false
-          clientId:
-            $env: AUTH_GITHUB_CLIENT_ID
-          clientSecret:
-            $env: AUTH_GITHUB_CLIENT_SECRET
-          enterpriseInstanceUrl:
-            $env: AUTH_GITHUB_ENTERPRISE_INSTANCE_URL
+          clientId: ${AUTH_GITHUB_CLIENT_ID}
+          clientSecret: ${AUTH_GITHUB_CLIENT_SECRET}
+          enterpriseInstanceUrl: ${AUTH_GITHUB_ENTERPRISE_INSTANCE_URL}
       gitlab:
         development:
           appOrigin: 'http://localhost:3000/'
           secure: false
-          clientId:
-            $env: AUTH_GITLAB_CLIENT_ID
-          clientSecret:
-            $env: AUTH_GITLAB_CLIENT_SECRET
-          audience:
-            $env: GITLAB_BASE_URL
+          clientId: ${AUTH_GITLAB_CLIENT_ID}
+          clientSecret: ${AUTH_GITLAB_CLIENT_SECRET}
+          audience: ${GITLAB_BASE_URL}
       okta:
         development:
           appOrigin: 'http://localhost:3000/'
           secure: false
-          clientId:
-            $env: AUTH_OKTA_CLIENT_ID
-          clientSecret:
-            $env: AUTH_OKTA_CLIENT_SECRET
-          audience:
-            $env: AUTH_OKTA_AUDIENCE
+          clientId: ${AUTH_OKTA_CLIENT_ID}
+          clientSecret: ${AUTH_OKTA_CLIENT_SECRET}
+          audience: ${AUTH_OKTA_AUDIENCE}
       oauth2:
         development:
           appOrigin: 'http://localhost:3000/'
           secure: false
-          clientId:
-            $env: AUTH_OAUTH2_CLIENT_ID
-          clientSecret:
-            $env: AUTH_OAUTH2_CLIENT_SECRET
-          authorizationURL:
-            $env: AUTH_OAUTH2_AUTH_URL
-          tokenURL:
-            $env: AUTH_OAUTH2_TOKEN_URL
+          clientId: ${AUTH_OAUTH2_CLIENT_ID}
+          clientSecret: ${AUTH_OAUTH2_CLIENT_SECRET}
+          authorizationURL: ${AUTH_OAUTH2_AUTH_URL}
+          tokenURL: ${AUTH_OAUTH2_TOKEN_URL}
       auth0:
         development:
-          clientId:
-            $env: AUTH_AUTH0_CLIENT_ID
-          clientSecret:
-            $env: AUTH_AUTH0_CLIENT_SECRET
-          domain:
-            $env: AUTH_AUTH0_DOMAIN
+          clientId: ${AUTH_AUTH0_CLIENT_ID}
+          clientSecret: ${AUTH_AUTH0_CLIENT_SECRET}
+          domain: ${AUTH_AUTH0_DOMAIN}
       microsoft:
         development:
-          clientId:
-            $env: AUTH_MICROSOFT_CLIENT_ID
-          clientSecret:
-            $env: AUTH_MICROSOFT_CLIENT_SECRET
-          tenantId:
-            $env: AUTH_MICROSOFT_TENANT_ID
+          clientId: ${AUTH_MICROSOFT_CLIENT_ID}
+          clientSecret: ${AUTH_MICROSOFT_CLIENT_SECRET}
+          tenantId: ${AUTH_MICROSOFT_TENANT_ID}
 
 auth:
   google:
diff --git a/docs/auth/auth-backend-classes.md b/docs/auth/auth-backend-classes.md
index a99ca119f0..5b5950f6c3 100644
--- a/docs/auth/auth-backend-classes.md
+++ b/docs/auth/auth-backend-classes.md
@@ -95,40 +95,27 @@ auth:
   providers:
     google:
       development:
-        clientId:
-          $env: AUTH_GOOGLE_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GOOGLE_CLIENT_SECRET
+        clientId: ${AUTH_GOOGLE_CLIENT_ID}
+        clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
     github:
       development:
-        clientId:
-          $env: AUTH_GITHUB_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GITHUB_CLIENT_SECRET
-        enterpriseInstanceUrl:
-          $env: AUTH_GITHUB_ENTERPRISE_INSTANCE_URL
+        clientId: ${AUTH_GITHUB_CLIENT_ID}
+        clientSecret: ${AUTH_GITHUB_CLIENT_SECRET}
+        enterpriseInstanceUrl: ${AUTH_GITHUB_ENTERPRISE_INSTANCE_URL}
     gitlab:
       development:
-        clientId:
-          $env:
+        clientId: ${AUTH_GITLAB_CLIENT_ID}
     oauth2:
       development:
-        clientId:
-          $env: AUTH_OAUTH2_CLIENT_ID
-        clientSecret:
-          $env: AUTH_OAUTH2_CLIENT_SECRET
-        authorizationUrl:
-          $env: AUTH_OAUTH2_AUTH_URL
-        tokenUrl:
-          $env: AUTH_OAUTH2_TOKEN_URL
-        scope:
-          $env: AUTH_OAUTH2_SCOPE
+        clientId: ${AUTH_OAUTH2_CLIENT_ID}
+        clientSecret: ${AUTH_OAUTH2_CLIENT_SECRET}
+        authorizationUrl: ${AUTH_OAUTH2_AUTH_URL}
+        tokenUrl: ${AUTH_OAUTH2_TOKEN_URL}
+        scope: ${AUTH_OAUTH2_SCOPE}
     saml:
-      entryPoint:
-        $env: AUTH_SAML_ENTRY_POINT
-      issuer:
-        $env: AUTH_SAML_ISSUER
-            ...
+      entryPoint: ${AUTH_SAML_ENTRY_POINT}
+      issuer: ${AUTH_SAML_ISSUER}
+    ...
 ```
 
 ## Implementing Your Own Auth Wrapper
diff --git a/docs/auth/index.md b/docs/auth/index.md
index fc6ce33e2b..f3783c79f3 100644
--- a/docs/auth/index.md
+++ b/docs/auth/index.md
@@ -58,7 +58,7 @@ the local `auth.environment` setting will be selected.
 After configuring an authentication provider, the `app` frontend package needs a
 small update to show this provider as a login option. The `SignInPage` component
 handles this, and takes either a `provider` or `providers` (array) prop of
-`SignInConfig` definitions.
+`SignInProviderConfig` definitions.
 
 These reference the [ApiRef](../reference/utility-apis/README.md) exported by
 the provider. Again, an example using GitHub that can be adapted to any of the
@@ -66,9 +66,9 @@ built-in providers:
 
 ```diff
 # packages/app/src/App.tsx
-+ import { githubAuthApiRef, SignInConfig, SignInPage } from '@backstage/core';
++ import { githubAuthApiRef, SignInProviderConfig, SignInPage } from '@backstage/core';
 
-+ const githubProvider: SignInConfig = {
++ const githubProvider: SignInProviderConfig = {
 +  id: 'github-auth-provider',
 +  title: 'GitHub',
 +  message: 'Sign in using GitHub',
diff --git a/docs/conf/writing.md b/docs/conf/writing.md
index ac8509db0a..c7b3bfe296 100644
--- a/docs/conf/writing.md
+++ b/docs/conf/writing.md
@@ -129,6 +129,9 @@ variable.
 $env: MY_SECRET
 ```
 
+Note however, that it's often more convenient to use
+[environment variable substitution](#environment-variable-substitution) instead.
+
 ### File Includes
 
 This reads a string value from the entire contents of a text file. The file path
diff --git a/docs/getting-started/deployment-docker.md b/docs/deployment/docker.md
similarity index 95%
rename from docs/getting-started/deployment-docker.md
rename to docs/deployment/docker.md
index 70963df3d3..ef178b2977 100644
--- a/docs/getting-started/deployment-docker.md
+++ b/docs/deployment/docker.md
@@ -1,14 +1,15 @@
 ---
-id: deployment-docker
-title: Docker
-description: Documentation on how to deploy Backstage as a Docker image
+id: docker
+title: Building a Docker image
+sidebar_label: Docker
+description: How to build a Backstage Docker image for deployment
 ---
 
 This section describes how to build a Backstage App into a deployable Docker
 image. It is split into three sections, first covering the host build approach,
 which is recommended due its speed and more efficient and often simpler caching.
 The second section covers a full multi-stage Docker build, and the last section
-covers how to split frontend content into a separate image.
+covers how to deploy the frontend and backend as separate images.
 
 Something that goes for all of these docker deployment strategies is that they
 are stateless, so for a production deployment you will want to set up and
@@ -20,10 +21,10 @@ bundled and served from the backend. This is done using the
 `@backstage/plugin-app-backend` plugin, which also injects the frontend
 configuration into the app. This means you that you only need to build and
 deploy a single container in a minimal setup of Backstage. If you wish to
-separate the serving of the frontend out from the backend, see
-[the section on that topic below](#separate-frontend).
+separate the serving of the frontend out from the backend, see the
+[separate frontend](#separate-frontend) topic below.
 
-### Host Build
+## Host Build
 
 This section describes how to build a Docker image from a Backstage repo with
 most of the build happening outside of Docker. This is almost always the faster
@@ -109,7 +110,7 @@ docker run -it -p 7000:7000 backstage
 You should then start to get logs in your terminal, and then you can open your
 browser at `http://localhost:7000`
 
-### Multistage Build
+## Multi-stage Build
 
 This section describes how to set up a multi-stage Docker build that builds the
 entire project within Docker. This is typically slower than a host build, but is
@@ -207,7 +208,7 @@ docker run -it -p 7000:7000 backstage
 You should then start to get logs in your terminal, and then you can open your
 browser at `http://localhost:7000`
 
-### Separate Frontend
+## Separate Frontend
 
 It is sometimes desirable to serve the frontend separately from the backend,
 either from a separate image or for example a static file serving provider. The
diff --git a/docs/getting-started/deployment-helm.md b/docs/deployment/helm.md
similarity index 92%
rename from docs/getting-started/deployment-helm.md
rename to docs/deployment/helm.md
index d1a52a5b30..fd36aeb81f 100644
--- a/docs/getting-started/deployment-helm.md
+++ b/docs/deployment/helm.md
@@ -1,8 +1,8 @@
 ---
-id: deployment-helm
-title: Helm
-description: Documentation on Kubernetes and Helm Deployment
-sidebar_label: Kubernetes and Helm
+id: helm
+title: Deploying Backstage with Helm
+description: How to deploy Backstage with Helm and Kubernetes
+sidebar_label: Helm
 ---
 
 # Helm charts
diff --git a/docs/deployment/heroku.md b/docs/deployment/heroku.md
new file mode 100644
index 0000000000..42ab817b30
--- /dev/null
+++ b/docs/deployment/heroku.md
@@ -0,0 +1,44 @@
+---
+id: heroku
+title: Deploying with Heroku
+sidebar_label: Heroku
+description: How to deploy Backstage to Heroku
+---
+
+Heroku is a Platform as a Service (PaaS) designed to handle application
+deployment in a hands-off way. Heroku supports container deployment of Docker
+images, a natural fit for Backstage.
+
+## Configuring the CLI
+
+First, install the
+[heroku-cli](https://devcenter.heroku.com/articles/heroku-cli) and login:
+
+```shell
+$ heroku login
+```
+
+Heroku runs a container registry on `registry.heroku.com`. To push Backstage
+Docker images, log in to the container registry also:
+
+```shell
+$ heroku container:login
+```
+
+You _might_ also need to set your Heroku app's stack to `container`:
+
+```bash
+$ heroku stack:set container -a <your-app>
+```
+
+## Push and deploy a Docker image
+
+Now we can push a Backstage [Docker image](docker.md) to Heroku's container
+registry and release it to the `web` worker:
+
+```bash
+$ heroku container:push web -a <your-app>
+$ heroku container:release web -a <your-app>
+```
+
+Now you should have Backstage up and running! 🎉
diff --git a/docs/deployment/index.md b/docs/deployment/index.md
new file mode 100644
index 0000000000..db4ceca6f1
--- /dev/null
+++ b/docs/deployment/index.md
@@ -0,0 +1,40 @@
+---
+id: index
+title: Deploying Backstage
+sidebar_title: Overview
+description: Packaging Backstage and deploying to production
+---
+
+Backstage provides tooling to build Docker images, but can be deployed with or
+without Docker on many different infrastructures. The _best_ way to deploy
+Backstage is in _the same way_ you deploy other software at your organization.
+
+This documentation shows common examples that may be useful when deploying
+Backstage for the first time, or for those without established deployment
+practices.
+
+> Note: The _easiest_ way to explore Backstage is to visit the
+> [live demo site](https://demo.backstage.io).
+
+At Spotify, we deploy software generally by:
+
+1. Building a Docker image
+2. Storing the Docker image on a container registry
+3. Referencing the image in a Kubernetes Deployment YAML
+4. Applying that Deployment to a Kubernetes cluster
+
+This method is covered in [Building a Docker image](docker.md) and
+[Deploying with Kubernetes](k8s.md).
+
+There is also an example of deploying on [Heroku](heroku.md), which only
+requires the first two steps.
+
+An example of deploying Backstage with a [Helm chart](helm.md), a common pattern
+in AWS, is also available.
+
+Please consider contributing other deployment guides if you get Backstage set up
+on common infrastructure, it would be a great benefit to the community.
+
+If you need to run Backstage behind a corporate proxy, this
+[contributed guide](https://github.com/backstage/backstage/blob/master/contrib/docs/tutorials/help-im-behind-a-corporate-proxy.md)
+may help.
diff --git a/docs/deployment/k8s.md b/docs/deployment/k8s.md
new file mode 100644
index 0000000000..9dbf447740
--- /dev/null
+++ b/docs/deployment/k8s.md
@@ -0,0 +1,519 @@
+---
+id: k8s
+title: Deploying with Kubernetes
+sidebar_label: Kubernetes
+description: How to deploy Backstage to a Kubernetes cluster
+---
+
+[Kubernetes](https://kubernetes.io/) is a system for deploying, scaling and
+managing containerized applications. Backstage is designed to fit this model and
+run as a stateless application with an external PostgreSQL database.
+
+There are many different tools and patterns for Kubernetes clusters, so the best
+way to deploy to an existing Kubernetes setup is _the same way_ you deploy
+everything else.
+
+This guide covers basic Kubernetes definitions needed to get Backstage up and
+running in a typical cluster. The object definitions might look familiar, since
+the Backstage software catalog
+[also uses](../features/software-catalog/descriptor-format.md) the Kubernetes
+object format for its entity definition files!
+
+## Testing locally
+
+To test out these concepts locally before deploying to a production Kubernetes
+cluster, first install [kubectl](https://kubernetes.io/docs/tasks/tools/), the
+Kubernetes command-line tool.
+
+Next, install [minikube](https://minikube.sigs.k8s.io/docs/start/). This creates
+a single-node Kubernetes cluster on your local machine:
+
+```shell
+# Assumes Mac + Homebrew; see the minikube site for other installations
+$ brew install minikube
+$ minikube start
+
+...
+Done! kubectl is now configured to use "minikube" cluster and "default" namespace by default.
+```
+
+Now you can run `kubectl` commands and have changes applied to the minikube
+cluster. You should be able to see the `kube-system` Kubernetes pods running:
+
+```shell
+$ kubectl get pods -A
+```
+
+When you're done with the tutorial, use `minikube stop` to halt the cluster and
+free up resources.
+
+## Creating a namespace
+
+Deployments in Kubernetes are commonly assigned to their own
+[namespace](https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/)
+to isolate services in a multi-tenant environment.
+
+This can be done through `kubectl` directly:
+
+```shell
+$ kubectl create namespace backstage
+namespace/backstage created
+```
+
+Alternatively, create and apply a Namespace definition:
+
+```yaml
+# kubernetes/namespace.yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: backstage
+```
+
+```shell
+$ kubectl apply -f kubernetes/namespace.yaml
+namespace/backstage created
+```
+
+## Creating the PostgreSQL database
+
+Backstage in production uses PostgreSQL as a database. To isolate the database
+from Backstage app deployments, we can create a separate Kubernetes deployment
+for PostgreSQL.
+
+### Creating a PostgreSQL secret
+
+First, create a Kubernetes Secret for the PostgreSQL username and password. This
+will be used by both the PostgreSQL database and Backstage deployments:
+
+```yaml
+# kubernetes/postgres-secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgres-secrets
+  namespace: backstage
+type: Opaque
+data:
+  POSTGRES_USER: YmFja3N0YWdl
+  POSTGRES_PASSWORD: aHVudGVyMg==
+```
+
+The data in Kubernetes secrets are base64-encoded. The values can be generated
+on the command line:
+
+```shell
+$ echo -n "backstage" | base64
+YmFja3N0YWdl
+```
+
+> Note: Secrets are base64-encoded, but not encrypted. Be sure to enable
+> [Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/)
+> for the cluster. For storing secrets in Git, consider
+> [SealedSecrets or other solutions](https://learnk8s.io/kubernetes-secrets-in-git).
+
+The secrets can now be applied to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/postgres-secrets.yaml
+secret/postgres-secrets created
+```
+
+### Creating a PostgreSQL persistent volume
+
+PostgreSQL needs a persistent volume to store data; we'll create one along with
+a `PersistentVolumeClaim`. In this case, we're claiming the whole volume - but
+claims can ask for only part of a volume as well.
+
+```yaml
+# kubernetes/postgres-storage.yaml
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: postgres-storage
+  namespace: backstage
+  labels:
+    type: local
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 2G
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  hostPath:
+    path: '/mnt/data'
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: postgres-storage-claim
+  namespace: backstage
+spec:
+  storageClassName: manual
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 2G
+```
+
+This file contains definitions for two different kinds, separated by a line with
+a triple dash. This syntax is helpful if you want to consolidate related
+Kubernetes definitions in a single file and apply them at the same time.
+
+Note the volume `type: local`; this creates a volume using local disk on
+Kubernetes nodes. More likely in a production scenario, you'd want to use a more
+highly available
+[type of PersistentVolume](https://kubernetes.io/docs/concepts/storage/persistent-volumes/#types-of-persistent-volumes).
+
+Apply the storage volume and claim to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/postgres-storage.yaml
+persistentvolume/postgres-storage created
+persistentvolumeclaim/postgres-storage-claim created
+```
+
+### Creating a PostgreSQL deployment
+
+Now we can create a Kubernetes Deployment descriptor for the PostgreSQL database
+deployment itself:
+
+```yaml
+# kubernetes/postgres.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgres
+  namespace: backstage
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: postgres
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+        - name: postgres
+          image: postgres:13.2-alpine
+          imagePullPolicy: 'IfNotPresent'
+          ports:
+            - containerPort: 5432
+          envFrom:
+            - secretRef:
+                name: postgres-secrets
+          volumeMounts:
+            - mountPath: /var/lib/postgresql/data
+              name: postgresdb
+      volumes:
+        - name: postgresdb
+          persistentVolumeClaim:
+            claimName: postgres-storage-claim
+```
+
+If you're not used to Kubernetes, this is a lot to take in. We're describing a
+Deployment (one or more instances of an application) that we'd like Kubernetes
+to know about in the `metadata` block.
+
+The `spec` block describes the desired state. Here we've requested Kubernetes
+create 1 replica (running instance of PostgreSQL), and to create the replica
+with the given pod `template`, which again contains Kubernetes metadata and a
+desired state. The template `spec` shows one container, created from the
+[published](https://hub.docker.com/_/postgres) `postgres:13.2-alpine` Docker
+image.
+
+Note the `envFrom` and `secretRef` - this tells Kubernetes to fill environment
+variables in the container with values from the Secret we created. We've also
+referenced the volume created for the deployment, and given it the mount path
+expected by PostgreSQL.
+
+Apply the PostgreSQL deployment to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/postgres.yaml
+deployment.apps/postgres created
+
+$ kubectl get pods --namespace=backstage
+NAME                        READY   STATUS    RESTARTS   AGE
+postgres-56c86b8bbc-66pt2   1/1     Running   0          21s
+```
+
+Verify the deployment by connecting to the pod:
+
+```shell
+$ kubectl exec -it --namespace=backstage postgres-56c86b8bbc-66pt2 -- /bin/bash
+bash-5.1# psql -U $POSTGRES_USER
+psql (13.2)
+backstage=# \q
+bash-5.1# exit
+```
+
+### Creating a PostgreSQL service
+
+The database pod is running, but how does another pod connect to it?
+
+Kubernetes pods are transient - they can be killed, restarted, or created
+dynamically. Therefore we don't want to try to connect to pods directly, but
+rather create a Kubernetes Service. Services keep track of pods and direct
+traffic to the right place.
+
+The final step for our database is to create the service descriptor:
+
+```yaml
+# kubernetes/postgres-service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres
+  namespace: backstage
+spec:
+  selector:
+    app: postgres
+  ports:
+    - port: 5432
+```
+
+Apply the service to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/postgres-service.yaml
+service/postgres created
+
+$ kubectl get services --namespace=backstage
+NAME       TYPE        CLUSTER-IP    EXTERNAL-IP   PORT(S)    AGE
+postgres   ClusterIP   10.96.5.103   <none>        5432/TCP   29s
+```
+
+## Creating the Backstage instance
+
+Now that we have PostgreSQL up and ready to store data, we can create the
+Backstage instance. This follows similar steps as the PostgreSQL deployment.
+
+### Creating a Backstage secret
+
+For any Backstage configuration secrets, such as authorization tokens, we can
+create a similar Kubernetes Secret as we did
+[for PostgreSQL](#creating-a-postgresql-secret), remembering to base64 encode
+the values:
+
+```yaml
+# kubernetes/backstage-secrets.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backstage-secrets
+  namespace: backstage
+type: Opaque
+data:
+  GITHUB_TOKEN: VG9rZW5Ub2tlblRva2VuVG9rZW5NYWxrb3ZpY2hUb2tlbg==
+```
+
+Apply the secret to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/backstage-secrets.yaml
+secret/backstage-secrets created
+```
+
+### Creating a Backstage deployment
+
+To create the Backstage deployment, first create a [Docker image](docker.md).
+We'll use this image to create a Kubernetes deployment. For this example, we'll
+use the standard host build with the frontend bundled and served from the
+backend.
+
+First, create a Kubernetes Deployment descriptor:
+
+```yaml
+# kubernetes/backstage.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backstage
+  namespace: backstage
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: backstage
+  template:
+    metadata:
+      labels:
+        app: backstage
+    spec:
+      containers:
+        - name: backstage
+          image: backstage:1.0.0
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 7000
+          envFrom:
+            - secretRef:
+                name: postgres-secrets
+            - secretRef:
+                name: backstage-secrets
+```
+
+For production deployments, the `image` reference will usually be a full URL to
+a repository on a container registry (for example, ECR on AWS).
+
+For testing locally with `minikube`, you can point the local Docker daemon to
+the `minikube` internal Docker registry and then rebuild the image to install
+it:
+
+```shell
+$ eval $(minikube docker-env)
+$ yarn build-image --tag backstage:1.0.0
+```
+
+There is no special wiring needed to access the PostgreSQL service. Since it's
+running on the same cluster, Kubernetes will inject `POSTGRES_SERVICE_HOST` and
+`POSTGRES_SERVICE_PORT` environment variables into our Backstage container.
+These can be used in the Backstage `app-config.yaml` along with the secrets:
+
+```yaml
+backend:
+  database:
+    client: pg
+    connection:
+      host: ${POSTGRES_SERVICE_HOST}
+      port: ${POSTGRES_SERVICE_PORT}
+      user: ${POSTGRES_USER}
+      password: ${POSTGRES_PASSWORD}
+```
+
+Make sure to rebuild the Docker image after applying `app-config.yaml` changes.
+
+Apply this Deployment to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/backstage.yaml
+deployment.apps/backstage created
+
+$ kubectl get deployments --namespace=backstage
+NAME        READY   UP-TO-DATE   AVAILABLE   AGE
+backstage   1/1     1            1           1m
+postgres    1/1     1            1           10m
+
+$ kubectl get pods --namespace=backstage
+NAME                                 READY   STATUS    RESTARTS   AGE
+backstage-54bfcd6476-n2jkm           1/1     Running   0          58s
+postgres-56c86b8bbc-66pt2            1/1     Running   0          9m
+```
+
+Beautiful! 🎉 The deployment and pod are running in the cluster. If you run into
+any trouble, check the container logs from the pod:
+
+```shell
+# -f to tail, <pod> -c <container>
+$ kubectl logs --namespace=backstage -f backstage-54bfcd6476-n2jkm -c backstage
+```
+
+### Creating a Backstage service
+
+Like the [PostgreSQL service](#creating-a-postgresql-service) above, we need to
+create a Kubernetes Service for Backstage to handle connecting requests to the
+correct pods.
+
+Create the Kubernetes Service descriptor:
+
+```yaml
+# kubernetes/backstage-service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: backstage
+  namespace: backstage
+spec:
+  selector:
+    app: backstage
+  ports:
+    - name: http
+      port: 80
+      targetPort: http
+```
+
+The `selector` here is telling the Service which pods to target, and the port
+mapping translates normal HTTP port 80 to the backend http port (7000) on the
+pod.
+
+Apply this Service to the Kubernetes cluster:
+
+```shell
+$ kubectl apply -f kubernetes/backstage-service.yaml
+service/backstage created
+```
+
+Now we have a fully operational Backstage deployment! 🎉 For a _**grand
+reveal**_, you can forward a local port to the service:
+
+```shell
+$ sudo kubectl port-forward --namespace=backstage svc/backstage 80:80
+Forwarding from 127.0.0.1:80 -> 7000
+```
+
+This shows port 7000 since `port-forward` doesn't _really_ support services, so
+it cheats by looking up the first pod for a service and connecting to the mapped
+pod port.
+
+Note that `app.baseUrl` and `backend.baseUrl` in your `app-config.yaml` should
+match what we're forwarding here (port omitted in this example since we're using
+the default HTTP port 80):
+
+```yaml
+# app-config.yaml
+app:
+  baseUrl: http://localhost
+
+organization:
+  name: Spotify
+
+backend:
+  baseUrl: http://localhost
+  listen:
+    port: 7000
+  cors:
+    origin: http://localhost
+```
+
+If you're using an [auth provider](../auth/index.md), it should also have this
+address configured for the authentication pop-up to work properly.
+
+Now you can open a browser on your machine to [localhost](http://localhost) and
+browse your Kubernetes-deployed Backstage instance. 🚢🚢🚢
+
+## Further steps
+
+This is most of the way to a full production deployment of Backstage on
+Kubernetes. There's a few additional steps to that will likely be needed beyond
+the scope of this document.
+
+### Set up a more reliable volume
+
+The `PersistentVolume` configured above uses `local` Kubernetes node storage.
+This should be replaced with a cloud volume, network attached storage, or
+something more persistent beyond a Kubernetes node.
+
+### Expose the Backstage service
+
+The Kubernetes Service is not exposed for external connections from outside the
+cluster. This is generally done with a Kubernetes
+[ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/) or
+an
+[external load balancer](https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/).
+
+### Update the Deployment image
+
+To update the Kubernetes deployment to a newly published version of your
+Backstage Docker image, update the image tag reference in `backstage.yaml` and
+then apply the changes with `kubectl apply -f kubernetes/backstage.yaml`.
+
+For production purposes, this image tag will generally be a full-fledged URL
+pointing to a container registry where built Docker images are hosted. This can
+be hosted internally in your infrastructure, or a managed one offered by a cloud
+provider.
diff --git a/docs/features/kubernetes/configuration.md b/docs/features/kubernetes/configuration.md
index c21ac7e18a..2ecd7d42be 100644
--- a/docs/features/kubernetes/configuration.md
+++ b/docs/features/kubernetes/configuration.md
@@ -25,8 +25,7 @@ kubernetes:
         - url: http://127.0.0.1:9999
           name: minikube
           authProvider: 'serviceAccount'
-          serviceAccountToken:
-            $env: K8S_MINIKUBE_TOKEN
+          serviceAccountToken: ${K8S_MINIKUBE_TOKEN}
         - url: http://127.0.0.2:9999
           name: aws-cluster-1
           authProvider: 'aws'
diff --git a/docs/features/software-catalog/external-integrations.md b/docs/features/software-catalog/external-integrations.md
index e278bc7a1a..247324a46c 100644
--- a/docs/features/software-catalog/external-integrations.md
+++ b/docs/features/software-catalog/external-integrations.md
@@ -156,8 +156,18 @@ The key points to note are:
 - Call `emit` any number of times with the results of that process
 - Finally return `true`
 
-You should now be able to instantiate this class in your backend, and add it to
-the `CatalogBuilder` using the `addProcessors` method.
+You should now be able to add this class to your backend in
+`packages/backend/src/plugins/catalog.ts`:
+
+```diff
++ import { SystemXReaderProcessor } from '../path/to/class';
+
+export default async function createPlugin(
+  env: PluginEnvironment,
+): Promise<Router> {
+  const builder = new CatalogBuilder(env);
++  builder.addProcessor(new SystemXReaderProcessor(env.reader));
+```
 
 Start up the backend - it should now start reading from the previously
 registered location and you'll see your entities start to appear in Backstage.
diff --git a/docs/features/software-catalog/well-known-annotations.md b/docs/features/software-catalog/well-known-annotations.md
index 8ec4813799..0053c14b79 100644
--- a/docs/features/software-catalog/well-known-annotations.md
+++ b/docs/features/software-catalog/well-known-annotations.md
@@ -92,12 +92,14 @@ view and edit links need changing.
 # Example:
 metadata:
   annotations:
-    backstage.io/source-location: github:https://github.com/my-org/my-service
+    backstage.io/source-location: url:https://github.com/my-org/my-service/
 ```
 
 A `Location` reference that points to the source code of the entity (typically a
 `Component`). Useful when catalog files do not get ingested from the source code
-repository itself.
+repository itself. If the URL points to a folder, it is important that it is
+suffixed with a `'/'` in order for relative path resolution to work
+consistently.
 
 ### jenkins.io/github-folder
 
diff --git a/docs/features/software-templates/installation.md b/docs/features/software-templates/installation.md
index b3c9f878d7..105b7e5f96 100644
--- a/docs/features/software-templates/installation.md
+++ b/docs/features/software-templates/installation.md
@@ -189,8 +189,7 @@ public within the enterprise.
 integrations:
   github:
     - host: github.com
-      token:
-        $env: GITHUB_TOKEN
+      token: ${GITHUB_TOKEN}
 
 scaffolder:
   github:
@@ -207,8 +206,7 @@ instance:
 integrations:
   gitlab:
     - host: gitlab.com
-      token:
-        $env: GITLAB_TOKEN
+      token: ${GITLAB_TOKEN}
 ```
 
 #### Bitbucket
@@ -221,8 +219,7 @@ following:
 integrations:
   bitbucket:
     - host: bitbucket.org
-      token:
-        $env: BITBUCKET_TOKEN
+      token: ${BITBUCKET_TOKEN}
 ```
 
 or
@@ -231,10 +228,8 @@ or
 integrations:
   bitbucket:
     - host: bitbucket.org
-      appPassword:
-        $env: BITBUCKET_APP_PASSWORD
-      username:
-        $env: BITBUCKET_USERNAME
+      appPassword: ${BITBUCKET_APP_PASSWORD}
+      username: ${BITBUCKET_USERNAME}
 ```
 
 #### Azure DevOps
@@ -249,8 +244,7 @@ verified.
 integrations:
   azure:
     - host: dev.azure.com
-      token:
-        $env: AZURE_TOKEN
+      token: ${AZURE_TOKEN}
 ```
 
 ### Running the Backend
diff --git a/docs/features/techdocs/configuration.md b/docs/features/techdocs/configuration.md
index 9bf2c25926..c7876f3874 100644
--- a/docs/features/techdocs/configuration.md
+++ b/docs/features/techdocs/configuration.md
@@ -65,22 +65,18 @@ techdocs:
       # https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/loading-node-credentials-environment.html
       # https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/loading-node-credentials-shared.html
       credentials:
-        accessKeyId:
-          $env: TECHDOCS_AWSS3_ACCESS_KEY_ID_CREDENTIAL
-        secretAccessKey:
-          $env: TECHDOCS_AWSS3_SECRET_ACCESS_KEY_CREDENTIAL
+        accessKeyId: ${TECHDOCS_AWSS3_ACCESS_KEY_ID_CREDENTIAL}
+        secretAccessKey: ${TECHDOCS_AWSS3_SECRET_ACCESS_KEY_CREDENTIAL}
 
       # (Optional) AWS Region of the bucket.
       # If not set, AWS_REGION environment variable or aws config file will be used.
       # https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/setting-region.html
-      region:
-        $env: AWS_REGION
+      region: ${AWS_REGION}
 
       # (Optional) Endpoint URI to send requests to.
       # If not set, the default endpoint is built from the configured region.
       # https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.html#constructor-property
-      endpoint:
-        $env: AWS_ENDPOINT
+      endpoint: ${AWS_ENDPOINT}
 
     # Required when techdocs.publisher.type is set to 'azureBlobStorage'. Skip otherwise.
 
@@ -91,13 +87,11 @@ techdocs:
       # (Required) An account name is required to write to a storage blob container.
       # https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key
       credentials:
-        accountName:
-          $env: TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME
+        accountName: ${TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME}
         # (Optional) An account key is required to write to a storage container.
         # If missing,AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET environment variable will be used.
         # https://docs.microsoft.com/en-us/azure/storage/common/storage-auth?toc=/azure/storage/blobs/toc.json
-        accountKey:
-          $env: TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_KEY
+        accountKey: ${TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_KEY}
 
   # (Optional and Legacy) TechDocs makes API calls to techdocs-backend using this URL. e.g. get docs of an entity, get metadata, etc.
   # You don't have to specify this anymore.
diff --git a/docs/features/techdocs/using-cloud-storage.md b/docs/features/techdocs/using-cloud-storage.md
index fd8f320859..d5a3a68425 100644
--- a/docs/features/techdocs/using-cloud-storage.md
+++ b/docs/features/techdocs/using-cloud-storage.md
@@ -95,8 +95,7 @@ techdocs:
     type: 'googleGcs'
     googleGcs:
       bucketName: 'name-of-techdocs-storage-bucket'
-      credentials:
-        $env: GOOGLE_APPLICATION_CREDENTIALS
+      credentials: ${GOOGLE_APPLICATION_CREDENTIALS}
 ```
 
 **4. That's it!**
@@ -179,13 +178,10 @@ techdocs:
     type: 'awsS3'
     awsS3:
       bucketName: 'name-of-techdocs-storage-bucket'
-      region:
-        $env: AWS_REGION
+      region: ${AWS_REGION}
       credentials:
-        accessKeyId:
-          $env: AWS_ACCESS_KEY_ID
-        secretAccessKey:
-          $env: AWS_SECRET_ACCESS_KEY
+        accessKeyId: ${AWS_ACCESS_KEY_ID}
+        secretAccessKey: ${AWS_SECRET_ACCESS_KEY}
 ```
 
 Refer to the
@@ -202,8 +198,7 @@ techdocs:
     type: 'awsS3'
     awsS3:
       bucketName: 'name-of-techdocs-storage-bucket'
-      region:
-        $env: AWS_REGION
+      region: ${AWS_REGION}
       credentials:
         roleArn: arn:aws:iam::123456789012:role/my-backstage-role
 ```
@@ -276,8 +271,7 @@ techdocs:
     azureBlobStorage:
       containerName: 'name-of-techdocs-storage-bucket'
       credentials:
-        accountName:
-          $env: TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME
+        accountName: ${TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME}
 ```
 
 **3b. Authentication using app-config.yaml**
@@ -297,10 +291,8 @@ techdocs:
     azureBlobStorage:
       containerName: 'name-of-techdocs-storage-bucket'
       credentials:
-        accountName:
-          $env: TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME
-        accountKey:
-          $env: TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_KEY
+        accountName: ${TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_NAME}
+        accountKey: ${TECHDOCS_AZURE_BLOB_STORAGE_ACCOUNT_KEY}
 ```
 
 **4. That's it!**
@@ -361,20 +353,13 @@ techdocs:
     openStackSwift:
       containerName: 'name-of-techdocs-storage-bucket'
       credentials:
-        userName:
-          $env: OPENSTACK_SWIFT_STORAGE_USERNAME
-        password:
-          $env: OPENSTACK_SWIFT_STORAGE_PASSWORD
-      authUrl:
-        $env: OPENSTACK_SWIFT_STORAGE_AUTH_URL
-      keystoneAuthVersion:
-        $env: OPENSTACK_SWIFT_STORAGE_AUTH_VERSION
-      domainId:
-        $env: OPENSTACK_SWIFT_STORAGE_DOMAIN_ID
-      domainName:
-        $env: OPENSTACK_SWIFT_STORAGE_DOMAIN_NAME
-      region:
-        $env: OPENSTACK_SWIFT_STORAGE_REGION
+        userName: ${OPENSTACK_SWIFT_STORAGE_USERNAME}
+        password: ${OPENSTACK_SWIFT_STORAGE_PASSWORD}
+      authUrl: ${OPENSTACK_SWIFT_STORAGE_AUTH_URL}
+      keystoneAuthVersion: ${OPENSTACK_SWIFT_STORAGE_AUTH_VERSION}
+      domainId: ${OPENSTACK_SWIFT_STORAGE_DOMAIN_ID}
+      domainName: ${OPENSTACK_SWIFT_STORAGE_DOMAIN_NAME}
+      region: ${OPENSTACK_SWIFT_STORAGE_REGION}
 ```
 
 **4. That's it!**
diff --git a/docs/getting-started/configure-app-with-plugins.md b/docs/getting-started/configure-app-with-plugins.md
index e5b4d08a3f..b2f3a37d90 100644
--- a/docs/getting-started/configure-app-with-plugins.md
+++ b/docs/getting-started/configure-app-with-plugins.md
@@ -31,26 +31,33 @@ CircleCI is a frontend UI plugin, it goes in `app` rather than `backend`.
 
 ```js
 // packages/app/src/plugins.ts
-export { plugin as Circleci } from '@backstage/plugin-circleci';
+export { plugin as CircleCi } from '@backstage/plugin-circleci';
 ```
 
-3. Register the plugin router:
+3. Register the plugin in the entity pages:
 
-```jsx
-// packages/app/src/components/catalog/EntityPage.tsx
+```diff
+ // packages/app/src/components/catalog/EntityPage.tsx
++import {
++  EntityCircleCIContent,
++  isCircleCIAvailable,
++} from '@backstage/plugin-circleci';
 
-import { Router as CircleCIRouter } from '@backstage/plugin-circleci';
-
-// Then somewhere inside <EntityPageLayout>
-<EntityPageLayout.Content
-  path="/ci-cd/*"
-  title="CI/CD"
-  element={<CircleCIRouter />}
-/>;
+...
+ const cicdContent = (
+   <EntitySwitch>
+     ...
++     <EntitySwitch.Case if={isCircleCIAvailable}>
++       <EntityCircleCIContent />
++     </EntitySwitch.Case>;
+   </EntitySwitch>
+ );
 ```
 
-Note that stand-alone plugins that are not "attached" to the Software Catalog
-would be added outside the `EntityPage`.
+This is just one example, but each Backstage instance may integrate content or
+cards to suit their needs on different pages, tabs, etc. Note that stand-alone
+plugins that are not "attached" to the Software Catalog would be added outside
+the `EntityPage`.
 
 4. [Optional] Add proxy config:
 
@@ -60,8 +67,7 @@ proxy:
   '/circleci/api':
     target: https://circleci.com/api/v1.1
     headers:
-      Circle-Token:
-        $env: CIRCLECI_AUTH_TOKEN
+      Circle-Token: ${CIRCLECI_AUTH_TOKEN}
 ```
 
 ### Adding a plugin page to the Sidebar
diff --git a/docs/getting-started/deployment-k8s.md b/docs/getting-started/deployment-k8s.md
deleted file mode 100644
index bc24894ed1..0000000000
--- a/docs/getting-started/deployment-k8s.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-id: deployment-k8s
-title: Kubernetes
-description: Documentation on Kubernetes and K8s Deployment
----
-
-Backstage itself provides tooling up to the point of building Docker images.
-Beyond that point we do not have an opinionated way to deploy Backstage within
-Kubernetes, as each cluster has its own unique set of tooling and patterns.
-
-We do provide examples to help you get started though. Check out
-[this example](https://github.com/backstage/backstage/tree/master/contrib/kubernetes/plain_single_backend_deployment/)
-for a basic single-deployment setup.
diff --git a/docs/getting-started/deployment-other.md b/docs/getting-started/deployment-other.md
deleted file mode 100644
index cc622d00f5..0000000000
--- a/docs/getting-started/deployment-other.md
+++ /dev/null
@@ -1,35 +0,0 @@
----
-id: deployment-other
-title: Other
-description: Documentation on different ways of Deployment
----
-
-## Heroku
-
-Deploying to Heroku is relatively easy following these steps.
-
-First, make sure you have the
-[Heroku CLI installed](https://devcenter.heroku.com/articles/heroku-cli) and log
-into it as well as login into Heroku's
-[container registry](https://devcenter.heroku.com/articles/container-registry-and-runtime).
-
-```bash
-$ heroku login
-$ heroku container:login
-```
-
-You _might_ also need to set your Heroku app's stack to `container`.
-
-```bash
-$ heroku stack:set container -a <your-app>
-```
-
-We can now build/push the Docker image to Heroku's container registry and
-release it to the `web` worker.
-
-```bash
-$ heroku container:push web -a <your-app>
-$ heroku container:release web -a <your-app>
-```
-
-With that, you should have Backstage up and running!
diff --git a/docs/integrations/google-cloud-storage/locations.md b/docs/integrations/google-cloud-storage/locations.md
index e3f6b72847..bcdf612b9a 100644
--- a/docs/integrations/google-cloud-storage/locations.md
+++ b/docs/integrations/google-cloud-storage/locations.md
@@ -24,10 +24,8 @@ Explicit credentials can be set in the following format:
 ```yaml
 integrations:
   googleGcs:
-    clientEmail:
-      $env: GCS_CLIENT_EMAIL
-    privateKey:
-      $env: GCS_PRIVATE_KEY
+    clientEmail: ${GCS_CLIENT_EMAIL}
+    privateKey: ${GCS_PRIVATE_KEY}
 ```
 
 Then make sure the environment variables `GCS_CLIENT_EMAIL` and
diff --git a/docs/plugins/proxying.md b/docs/plugins/proxying.md
index f2d7d3c12a..50c56af7a6 100644
--- a/docs/plugins/proxying.md
+++ b/docs/plugins/proxying.md
@@ -40,8 +40,9 @@ proxy:
   '/larger-example/v1':
     target: http://larger.example.com:8080/svc.v1
     headers:
-      Authorization:
-        $env: EXAMPLE_AUTH_HEADER
+      Authorization: ${EXAMPLE_AUTH_HEADER}
+      # ...or interpolating a value into part of a string,
+      # Authorization: Bearer ${EXAMPLE_AUTH_TOKEN}
 ```
 
 Each key under the proxy configuration entry is a route to match, below the
diff --git a/docs/tutorials/quickstart-app-auth.md b/docs/tutorials/quickstart-app-auth.md
index d322e2ec3c..510b697221 100644
--- a/docs/tutorials/quickstart-app-auth.md
+++ b/docs/tutorials/quickstart-app-auth.md
@@ -79,13 +79,10 @@ auth:
   providers:
     github:
       development:
-        clientId:
-          $env: AUTH_GITHUB_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GITHUB_CLIENT_SECRET
-        ## uncomment the following two lines if using enterprise
-        # enterpriseInstanceUrl:
-        #  $env: AUTH_GITHUB_ENTERPRISE_INSTANCE_URL
+        clientId: ${AUTH_GITHUB_CLIENT_ID}
+        clientSecret: ${AUTH_GITHUB_CLIENT_SECRET}
+        ## uncomment the following line if using enterprise
+        # enterpriseInstanceUrl: ${AUTH_GITHUB_ENTERPRISE_INSTANCE_URL}
 ```
 
 ### 2. Generate a GitHub client ID and secret
@@ -122,10 +119,8 @@ auth:
   providers:
     gitlab:
       development:
-        clientId:
-          $env: AUTH_GITLAB_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GITLAB_CLIENT_SECRET
+        clientId: ${AUTH_GITLAB_CLIENT_ID}
+        clientSecret: ${AUTH_GITLAB_CLIENT_SECRET}
         audience: https://gitlab.com # Or your self-hosted GitLab instance URL
 ```
 
@@ -172,10 +167,8 @@ auth:
   providers:
     google:
       development:
-        clientId:
-          $env: AUTH_GOOGLE_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GOOGLE_CLIENT_SECRET
+        clientId: ${AUTH_GOOGLE_CLIENT_ID}
+        clientSecret: ${AUTH_GOOGLE_CLIENT_SECRET}
 ```
 
 ### 2. Generate Google Credentials in Google Cloud console
@@ -216,12 +209,9 @@ auth:
   providers:
     microsoft:
       development:
-        clientId:
-          $env: AUTH_MICROSOFT_CLIENT_ID
-        clientSecret:
-          $env: AUTH_MICROSOFT_CLIENT_SECRET
-        tenantId:
-          $env: AUTH_MICROSOFT_TENANT_ID
+        clientId: ${AUTH_MICROSOFT_CLIENT_ID}
+        clientSecret: ${AUTH_MICROSOFT_CLIENT_SECRET}
+        tenantId: ${AUTH_MICROSOFT_TENANT_ID}
 ```
 
 ### 2. Create a Microsoft App Registration in Microsoft Portal
@@ -264,12 +254,9 @@ auth:
   providers:
     auth0:
       development:
-        clientId:
-          $env: AUTH_AUTH0_CLIENT_ID
-        clientSecret:
-          $env: AUTH_AUTH0_CLIENT_SECRET
-        domain:
-          $env: AUTH_AUTH0_DOMAIN_ID
+        clientId: ${AUTH_AUTH0_CLIENT_ID}
+        clientSecret: ${AUTH_AUTH0_CLIENT_SECRET}
+        domain: ${AUTH_AUTH0_DOMAIN_ID}
 ```
 
 ### 2. Create an Auth0 application in the Auth0 management console
diff --git a/docs/tutorials/switching-sqlite-postgres.md b/docs/tutorials/switching-sqlite-postgres.md
index 72e5589baf..a759b7dc49 100644
--- a/docs/tutorials/switching-sqlite-postgres.md
+++ b/docs/tutorials/switching-sqlite-postgres.md
@@ -38,14 +38,10 @@ backend:
 +    # config options: https://node-postgres.com/api/client
 +    client: pg
 +    connection:
-+      host:
-+        $env: POSTGRES_HOST
-+      port:
-+        $env: POSTGRES_PORT
-+      user:
-+        $env: POSTGRES_USER
-+      password:
-+        $env: POSTGRES_PASSWORD
++      host: ${POSTGRES_HOST}
++      port: ${POSTGRES_PORT}
++      user: ${POSTGRES_USER}
++      password: ${POSTGRES_PASSWORD}
 +      # https://node-postgres.com/features/ssl
 +      #ssl: require # see https://www.postgresql.org/docs/current/libpq-ssl.html Table 33.1. SSL Mode Descriptions (e.g. require)
 +        #ca: # if you have a CA file and want to verify it you can uncomment this section
@@ -53,9 +49,9 @@ backend:
 
 ```
 
-If you have a `app-config.local.yaml` for local development, a similar update
+If you have an `app-config.local.yaml` for local development, a similar update
 should be made there. You can set the `POSTGRES_` environment variables prior to
-launching Backstage, or remove the $env keys and simply set values directly for
-development.
+launching Backstage, or remove the `${...}` values and simply set actual values
+directly for development.
 
 The Backstage App is now ready to start up with a PostgreSQL backing database.
diff --git a/microsite/package.json b/microsite/package.json
index ea16fd8a32..07899fa703 100644
--- a/microsite/package.json
+++ b/microsite/package.json
@@ -15,9 +15,9 @@
     "verify:sidebars": "node ./scripts/verify-sidebars"
   },
   "devDependencies": {
-    "@spotify/prettier-config": "^9.0.0",
+    "@spotify/prettier-config": "^10.0.0",
     "docusaurus": "^2.0.0-alpha.70",
-    "js-yaml": "^4.0.0",
+    "js-yaml": "^4.1.0",
     "prettier": "^2.2.1"
   },
   "prettier": "@spotify/prettier-config"
diff --git a/microsite/sidebars.json b/microsite/sidebars.json
index 64ff108a78..86e94d9fbd 100644
--- a/microsite/sidebars.json
+++ b/microsite/sidebars.json
@@ -22,16 +22,6 @@
           "getting-started/app-custom-theme"
         ]
       },
-      {
-        "type": "subcategory",
-        "label": "Deployment",
-        "ids": [
-          "getting-started/deployment-docker",
-          "getting-started/deployment-k8s",
-          "getting-started/deployment-helm",
-          "getting-started/deployment-other"
-        ]
-      },
       "getting-started/keeping-backstage-updated",
       "getting-started/concepts",
       "getting-started/contributors"
@@ -211,6 +201,12 @@
       "auth/auth-backend-classes",
       "auth/glossary"
     ],
+    "Deployment": [
+      "deployment/index",
+      "deployment/k8s",
+      "deployment/helm",
+      "deployment/heroku"
+    ],
     "Designing for Backstage": [
       "dls/design",
       "dls/contributing-to-storybook",
diff --git a/microsite/yarn.lock b/microsite/yarn.lock
index 898fd69ad2..bed7897abc 100644
--- a/microsite/yarn.lock
+++ b/microsite/yarn.lock
@@ -909,10 +909,10 @@
   resolved "https://registry.npmjs.org/@sindresorhus/is/-/is-0.7.0.tgz#9a06f4f137ee84d7df0460c1fdb1135ffa6c50fd"
   integrity sha512-ONhaKPIufzzrlNbqtWFFd+jlnemX6lJAgq9ZeiZtS7I1PIf/la7CW4m83rTXRnVnsMbW2k56pGYu7AUFJD9Pow==
 
-"@spotify/prettier-config@^9.0.0":
-  version "9.0.0"
-  resolved "https://registry.yarnpkg.com/@spotify/prettier-config/-/prettier-config-9.0.0.tgz#7b562d56573c6fc0094446fbc92b22bc318945dc"
-  integrity sha512-In1q0tIiqTYKAGe3KOHDcFDdZRFISyQeSeipeTHGfki23ebHRZcjxvqj5SSdBkw65D4VpSREMi0s9i5iJiMcTw==
+"@spotify/prettier-config@^10.0.0":
+  version "10.0.0"
+  resolved "https://registry.yarnpkg.com/@spotify/prettier-config/-/prettier-config-10.0.0.tgz#fa076d98d2e7e6c53dd3d86a696307a7010bd056"
+  integrity sha512-VYOdo8P7lIScAkl02nB9KpUAuOYMManryBIBuKJkAw5D3aVtLobfmdIKvdV6MqEmGMEQPbn7w/UpnjJYhUH+IA==
 
 "@types/cheerio@^0.22.8":
   version "0.22.23"
@@ -3862,10 +3862,10 @@ js-yaml@^3.13.1, js-yaml@^3.8.1:
     argparse "^1.0.7"
     esprima "^4.0.0"
 
-js-yaml@^4.0.0:
-  version "4.0.0"
-  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.0.0.tgz#f426bc0ff4b4051926cd588c71113183409a121f"
-  integrity sha512-pqon0s+4ScYUvX30wxQi3PogGFAlUyH0awepWvwkj4jD4v+ova3RiYw8bmA6x2rDrEaj8i/oWKoRxpVNW+Re8Q==
+js-yaml@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.0.tgz#c1fb65f8f5017901cdd2c951864ba18458a10602"
+  integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
   dependencies:
     argparse "^2.0.1"
 
diff --git a/packages/app/CHANGELOG.md b/packages/app/CHANGELOG.md
index 5b96841e65..81a7f66f4c 100644
--- a/packages/app/CHANGELOG.md
+++ b/packages/app/CHANGELOG.md
@@ -1,5 +1,30 @@
 # example-app
 
+## 0.2.24
+
+### Patch Changes
+
+- Updated dependencies [a360f9478]
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [12390778e]
+- Updated dependencies [fef852ecd]
+- Updated dependencies [18f7345a6]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [e27cb6c45]
+- Updated dependencies [184b02bef]
+- Updated dependencies [60ce64aa2]
+  - @backstage/plugin-scaffolder@0.9.0
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+  - @backstage/plugin-catalog@0.5.4
+  - @backstage/plugin-api-docs@0.4.11
+  - @backstage/plugin-techdocs@0.7.2
+  - @backstage/plugin-tech-radar@0.3.9
+  - @backstage/cli@0.6.8
+
 ## 0.2.23
 
 ### Patch Changes
diff --git a/packages/app/package.json b/packages/app/package.json
index 304bd8d8b3..4e3b1410ab 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -1,16 +1,16 @@
 {
   "name": "example-app",
-  "version": "0.2.23",
+  "version": "0.2.24",
   "private": true,
   "bundled": true,
   "dependencies": {
-    "@backstage/catalog-model": "^0.7.6",
-    "@backstage/cli": "^0.6.7",
-    "@backstage/core": "^0.7.4",
+    "@backstage/catalog-model": "^0.7.7",
+    "@backstage/cli": "^0.6.8",
+    "@backstage/core": "^0.7.5",
     "@backstage/integration-react": "^0.1.1",
-    "@backstage/plugin-api-docs": "^0.4.9",
+    "@backstage/plugin-api-docs": "^0.4.11",
     "@backstage/plugin-badges": "^0.2.0",
-    "@backstage/plugin-catalog": "^0.5.3",
+    "@backstage/plugin-catalog": "^0.5.4",
     "@backstage/plugin-catalog-import": "^0.5.2",
     "@backstage/plugin-catalog-react": "^0.1.3",
     "@backstage/plugin-circleci": "^0.2.12",
@@ -32,11 +32,11 @@
     "@backstage/plugin-register-component": "^0.2.12",
     "@backstage/plugin-github-release-manager": "^0.1.1",
     "@backstage/plugin-rollbar": "^0.3.3",
-    "@backstage/plugin-scaffolder": "^0.8.2",
+    "@backstage/plugin-scaffolder": "^0.9.0",
     "@backstage/plugin-search": "^0.3.4",
     "@backstage/plugin-sentry": "^0.3.8",
-    "@backstage/plugin-tech-radar": "^0.3.8",
-    "@backstage/plugin-techdocs": "^0.7.0",
+    "@backstage/plugin-tech-radar": "^0.3.9",
+    "@backstage/plugin-techdocs": "^0.7.2",
     "@backstage/plugin-todo": "^0.1.0",
     "@backstage/plugin-user-settings": "^0.2.8",
     "@backstage/theme": "^0.2.5",
diff --git a/packages/backend/src/plugins/techdocs.ts b/packages/backend/src/plugins/techdocs.ts
index 9883f2afbc..d0387cd15d 100644
--- a/packages/backend/src/plugins/techdocs.ts
+++ b/packages/backend/src/plugins/techdocs.ts
@@ -48,6 +48,9 @@ export default async function createPlugin({
     discovery,
   });
 
+  // checks if the publisher is working and logs the result
+  await publisher.getReadiness();
+
   // Docker client (conditionally) used by the generators, based on techdocs.generators config.
   const dockerClient = new Docker();
 
diff --git a/packages/catalog-client/CHANGELOG.md b/packages/catalog-client/CHANGELOG.md
index 8364560625..0076202c64 100644
--- a/packages/catalog-client/CHANGELOG.md
+++ b/packages/catalog-client/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @backstage/catalog-client
 
+## 0.3.10
+
+### Patch Changes
+
+- 442f34b87: Make sure the `CatalogClient` escapes URL parameters correctly.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+  - @backstage/catalog-model@0.7.7
+
 ## 0.3.9
 
 ### Patch Changes
diff --git a/packages/catalog-client/package.json b/packages/catalog-client/package.json
index ea61f3eded..91845e56ab 100644
--- a/packages/catalog-client/package.json
+++ b/packages/catalog-client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/catalog-client",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -29,13 +29,13 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/catalog-model": "^0.7.5",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@backstage/errors": "^0.1.1",
     "cross-fetch": "^3.0.6"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.5",
+    "@backstage/cli": "^0.6.8",
     "@types/jest": "^26.0.7",
     "msw": "^0.21.2"
   },
diff --git a/packages/catalog-client/src/CatalogClient.ts b/packages/catalog-client/src/CatalogClient.ts
index 7426aabaac..3de25e9808 100644
--- a/packages/catalog-client/src/CatalogClient.ts
+++ b/packages/catalog-client/src/CatalogClient.ts
@@ -42,10 +42,14 @@ export class CatalogClient implements CatalogApi {
   }
 
   async getLocationById(
-    id: String,
+    id: string,
     options?: CatalogRequestOptions,
   ): Promise<Location | undefined> {
-    return await this.requestOptional('GET', `/locations/${id}`, options);
+    return await this.requestOptional(
+      'GET',
+      `/locations/${encodeURIComponent(id)}`,
+      options,
+    );
   }
 
   async getEntities(
@@ -86,7 +90,9 @@ export class CatalogClient implements CatalogApi {
     const { kind, namespace = 'default', name } = compoundName;
     return this.requestOptional(
       'GET',
-      `/entities/by-name/${kind}/${namespace}/${name}`,
+      `/entities/by-name/${encodeURIComponent(kind)}/${encodeURIComponent(
+        namespace,
+      )}/${encodeURIComponent(name)}`,
       options,
     );
   }
@@ -171,14 +177,22 @@ export class CatalogClient implements CatalogApi {
     id: string,
     options?: CatalogRequestOptions,
   ): Promise<void> {
-    await this.requestIgnored('DELETE', `/locations/${id}`, options);
+    await this.requestIgnored(
+      'DELETE',
+      `/locations/${encodeURIComponent(id)}`,
+      options,
+    );
   }
 
   async removeEntityByUid(
     uid: string,
     options?: CatalogRequestOptions,
   ): Promise<void> {
-    await this.requestIgnored('DELETE', `/entities/by-uid/${uid}`, options);
+    await this.requestIgnored(
+      'DELETE',
+      `/entities/by-uid/${encodeURIComponent(uid)}`,
+      options,
+    );
   }
 
   //
diff --git a/packages/catalog-client/src/types.ts b/packages/catalog-client/src/types.ts
index 04cbb2b689..0d25bf7483 100644
--- a/packages/catalog-client/src/types.ts
+++ b/packages/catalog-client/src/types.ts
@@ -46,7 +46,7 @@ export interface CatalogApi {
 
   // Locations
   getLocationById(
-    id: String,
+    id: string,
     options?: CatalogRequestOptions,
   ): Promise<Location | undefined>;
   getOriginLocationByEntity(
diff --git a/packages/catalog-model/CHANGELOG.md b/packages/catalog-model/CHANGELOG.md
index 71a0ba6676..445da3afab 100644
--- a/packages/catalog-model/CHANGELOG.md
+++ b/packages/catalog-model/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @backstage/catalog-model
 
+## 0.7.7
+
+### Patch Changes
+
+- bb5055aee: Add getEntitySourceLocation helper
+- 5d0740563: Implemented missing support for the dependsOn/dependencyOf relationships
+  between `Component` and `Resource` catalog model objects.
+
+  Added support for generating the relevant relationships to the
+  `BuiltinKindsEntityProcessor`, and added simple support for fetching
+  relationships between `Components` and `Resources` for rendering in the
+  system diagram. All catalog-model changes backwards compatible.
+
 ## 0.7.6
 
 ### Patch Changes
diff --git a/packages/catalog-model/package.json b/packages/catalog-model/package.json
index 680c73e905..64550b35d1 100644
--- a/packages/catalog-model/package.json
+++ b/packages/catalog-model/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/catalog-model",
-  "version": "0.7.6",
+  "version": "0.7.7",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -39,7 +39,7 @@
     "yup": "^0.29.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@types/express": "^4.17.6",
     "@types/jest": "^26.0.7",
     "@types/lodash": "^4.14.151",
diff --git a/packages/catalog-model/src/location/helpers.test.ts b/packages/catalog-model/src/location/helpers.test.ts
index 888c79b328..3b5994b956 100644
--- a/packages/catalog-model/src/location/helpers.test.ts
+++ b/packages/catalog-model/src/location/helpers.test.ts
@@ -14,7 +14,11 @@
  * limitations under the License.
  */
 
-import { parseLocationReference, stringifyLocationReference } from './helpers';
+import {
+  getEntitySourceLocation,
+  parseLocationReference,
+  stringifyLocationReference,
+} from './helpers';
 
 describe('parseLocationReference', () => {
   it('works for the simple case', () => {
@@ -68,3 +72,48 @@ describe('stringifyLocationReference', () => {
     ).toThrow('Unable to stringify location reference, empty target');
   });
 });
+
+describe('getEntitySourceLocation', () => {
+  it('returns the source-location', () => {
+    expect(
+      getEntitySourceLocation({
+        apiVersion: 'backstage.io/v1alpha1',
+        kind: 'Location',
+        metadata: {
+          name: 'test',
+          namespace: 'default',
+          annotations: {
+            'backstage.io/source-location': 'url:https://backstage.io/foo.yaml',
+            'backstage.io/managed-by-location': 'url:https://spotify.com',
+          },
+        },
+      }),
+    ).toEqual({ target: 'https://backstage.io/foo.yaml', type: 'url' });
+  });
+
+  it('returns the managed-by-location', () => {
+    expect(
+      getEntitySourceLocation({
+        apiVersion: 'backstage.io/v1alpha1',
+        kind: 'Location',
+        metadata: {
+          name: 'test',
+          namespace: 'default',
+          annotations: {
+            'backstage.io/managed-by-location': 'url:https://spotify.com',
+          },
+        },
+      }),
+    ).toEqual({ target: 'https://spotify.com', type: 'url' });
+  });
+
+  it('rejects missing location annotation', () => {
+    expect(() =>
+      getEntitySourceLocation({
+        apiVersion: 'backstage.io/v1alpha1',
+        kind: 'Location',
+        metadata: { name: 'test', namespace: 'default' },
+      }),
+    ).toThrow(`Entity 'location:default/test' is missing location`);
+  });
+});
diff --git a/packages/catalog-model/src/location/helpers.ts b/packages/catalog-model/src/location/helpers.ts
index fb1be5abad..5eff598c87 100644
--- a/packages/catalog-model/src/location/helpers.ts
+++ b/packages/catalog-model/src/location/helpers.ts
@@ -14,6 +14,9 @@
  * limitations under the License.
  */
 
+import { Entity, stringifyEntityRef } from '../entity';
+import { LOCATION_ANNOTATION, SOURCE_LOCATION_ANNOTATION } from './annotation';
+
 /**
  * Parses a string form location reference.
  *
@@ -80,3 +83,26 @@ export function stringifyLocationReference(ref: {
 
   return `${type}:${target}`;
 }
+
+/**
+ * Returns the source code location of the Entity, to the extent that one exists.
+ *
+ * If the returned location type is of type 'url', the target should be readable at least
+ * using the UrlReader from @backstage/backend-common. If it is not of type 'url', the caller
+ * needs to have explicit handling of each location type or signal that it is not supported.
+ */
+export function getEntitySourceLocation(
+  entity: Entity,
+): { type: string; target: string } {
+  const locationRef =
+    entity.metadata?.annotations?.[SOURCE_LOCATION_ANNOTATION] ??
+    entity.metadata?.annotations?.[LOCATION_ANNOTATION];
+
+  if (!locationRef) {
+    throw new Error(
+      `Entity '${stringifyEntityRef(entity)}' is missing location`,
+    );
+  }
+
+  return parseLocationReference(locationRef);
+}
diff --git a/packages/catalog-model/src/location/index.ts b/packages/catalog-model/src/location/index.ts
index fddc8bde37..751172c6ba 100644
--- a/packages/catalog-model/src/location/index.ts
+++ b/packages/catalog-model/src/location/index.ts
@@ -19,7 +19,11 @@ export {
   ORIGIN_LOCATION_ANNOTATION,
   SOURCE_LOCATION_ANNOTATION,
 } from './annotation';
-export { parseLocationReference, stringifyLocationReference } from './helpers';
+export {
+  parseLocationReference,
+  stringifyLocationReference,
+  getEntitySourceLocation,
+} from './helpers';
 export type { Location, LocationSpec } from './types';
 export {
   analyzeLocationSchema,
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
index f9dc749009..a1381495ff 100644
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @backstage/cli
 
+## 0.6.8
+
+### Patch Changes
+
+- 60ce64aa2: Disable hot reloading in CI environments.
+
 ## 0.6.7
 
 ### Patch Changes
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 22b116e87c..0a8561fa16 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@backstage/cli",
   "description": "CLI for developing Backstage plugins and apps",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -118,7 +118,7 @@
   "devDependencies": {
     "@backstage/backend-common": "^0.6.2",
     "@backstage/config": "^0.1.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@backstage/theme": "^0.2.5",
diff --git a/packages/cli/src/lib/bundler/server.ts b/packages/cli/src/lib/bundler/server.ts
index 5fc3a7b5de..24a24d25d2 100644
--- a/packages/cli/src/lib/bundler/server.ts
+++ b/packages/cli/src/lib/bundler/server.ts
@@ -43,7 +43,7 @@ export async function serveBundle(options: ServeOptions) {
   const compiler = webpack(config);
 
   const server = new WebpackDevServer(compiler, {
-    hot: true,
+    hot: !process.env.CI,
     contentBase: paths.targetPublic,
     contentBasePublicPath: config.output?.publicPath,
     publicPath: config.output?.publicPath,
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
index 519a43788d..7f691a2787 100644
--- a/packages/core/CHANGELOG.md
+++ b/packages/core/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @backstage/core
 
+## 0.7.5
+
+### Patch Changes
+
+- d0d1c2f7b: Pass `inverse` prop to Gauge from GaugeCard
+- 5cafcf452: add debounce time attribute for apis-docs for search, giving more time to the users when they are typing.
+- 86a95ba67: exposes undocumented `PageTheme`
+- e27cb6c45: Don't use a drag & drop cursor when clicking on disabled `IconLinkVertical`.
+
 ## 0.7.4
 
 ### Patch Changes
diff --git a/packages/core/package.json b/packages/core/package.json
index d5f9042d0e..7b1898a19d 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@backstage/core",
   "description": "Core API used by Backstage plugins and apps",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "private": false,
   "publishConfig": {
     "access": "public",
@@ -69,7 +69,7 @@
     "zen-observable": "^0.8.15"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
     "@testing-library/react": "^11.2.5",
diff --git a/packages/core/src/components/ProgressBars/GaugeCard.stories.tsx b/packages/core/src/components/ProgressBars/GaugeCard.stories.tsx
index 982999f8d6..5d54e5eda6 100644
--- a/packages/core/src/components/ProgressBars/GaugeCard.stories.tsx
+++ b/packages/core/src/components/ProgressBars/GaugeCard.stories.tsx
@@ -45,6 +45,9 @@ export const Default = () => (
     <Grid item>
       <GaugeCard title="Progress" progress={0.89} />
     </Grid>
+    <Grid item>
+      <GaugeCard title="Progress" inverse progress={0.2} />
+    </Grid>
   </Wrapper>
 );
 
@@ -67,6 +70,14 @@ export const Subhead = () => (
         progress={0.89}
       />
     </Grid>
+    <Grid item>
+      <GaugeCard
+        title="Progress"
+        subheader="With a subheader"
+        inverse
+        progress={0.2}
+      />
+    </Grid>
   </Wrapper>
 );
 
@@ -81,5 +92,8 @@ export const LinkInFooter = () => (
     <Grid item>
       <GaugeCard title="Progress" deepLink={linkInfo} progress={0.89} />
     </Grid>
+    <Grid item>
+      <GaugeCard title="Progress" deepLink={linkInfo} inverse progress={0.2} />
+    </Grid>
   </Wrapper>
 );
diff --git a/packages/core/src/components/ProgressBars/GaugeCard.tsx b/packages/core/src/components/ProgressBars/GaugeCard.tsx
index 2154619b01..8dcec129c5 100644
--- a/packages/core/src/components/ProgressBars/GaugeCard.tsx
+++ b/packages/core/src/components/ProgressBars/GaugeCard.tsx
@@ -26,6 +26,7 @@ type Props = {
   variant?: InfoCardVariants;
   /** Progress in % specified as decimal, e.g. "0.23" */
   progress: number;
+  inverse?: boolean;
   deepLink?: BottomLinkProps;
 };
 
@@ -38,7 +39,7 @@ const useStyles = makeStyles({
 
 export const GaugeCard = (props: Props) => {
   const classes = useStyles(props);
-  const { title, subheader, progress, deepLink, variant } = props;
+  const { title, subheader, progress, inverse, deepLink, variant } = props;
 
   return (
     <div className={classes.root}>
@@ -48,7 +49,7 @@ export const GaugeCard = (props: Props) => {
         deepLink={deepLink}
         variant={variant}
       >
-        <Gauge value={progress} />
+        <Gauge value={progress} inverse={inverse} />
       </InfoCard>
     </div>
   );
diff --git a/packages/core/src/layout/Header/Header.stories.tsx b/packages/core/src/layout/Header/Header.stories.tsx
index 3deb980dfd..db4ddac8ec 100644
--- a/packages/core/src/layout/Header/Header.stories.tsx
+++ b/packages/core/src/layout/Header/Header.stories.tsx
@@ -53,38 +53,6 @@ export const Apis = () => (
   </Page>
 );
 
-export const Grpc = () => (
-  <Page themeId="grpc">
-    <Header title="Grpc catalogue" type="tool">
-      {labels}
-    </Header>
-  </Page>
-);
-
-export const AsyncApi = () => (
-  <Page themeId="asyncapi">
-    <Header title="Async API catalogue" type="tool">
-      {labels}
-    </Header>
-  </Page>
-);
-
-export const Graphql = () => (
-  <Page themeId="graphql">
-    <Header title="GraphQL API catalogue" type="tool">
-      {labels}
-    </Header>
-  </Page>
-);
-
-export const OpenApi = () => (
-  <Page themeId="openapi">
-    <Header title="OpenAPI catalogue" type="tool">
-      {labels}
-    </Header>
-  </Page>
-);
-
 export const Tool = () => (
   <Page themeId="tool">
     <Header title="Stand-alone tool" type="tool">
diff --git a/packages/core/src/layout/SignInPage/SignInPage.tsx b/packages/core/src/layout/SignInPage/SignInPage.tsx
index c3e5b75bb7..daefe40c73 100644
--- a/packages/core/src/layout/SignInPage/SignInPage.tsx
+++ b/packages/core/src/layout/SignInPage/SignInPage.tsx
@@ -22,7 +22,7 @@ import { ContentHeader } from '../ContentHeader/ContentHeader';
 import { Grid, Button, Typography } from '@material-ui/core';
 import { SignInPageProps, useApi, configApiRef } from '@backstage/core-api';
 import { useSignInProviders, getSignInProviders } from './providers';
-import { IdentityProviders, SignInConfig } from './types';
+import { IdentityProviders, SignInProviderConfig } from './types';
 import { Progress } from '../../components/Progress';
 import { GridItem, useStyles } from './styles';
 import { InfoCard } from '../InfoCard';
@@ -34,7 +34,7 @@ type MultiSignInPageProps = SignInPageProps & {
 };
 
 type SingleSignInPageProps = SignInPageProps & {
-  provider: SignInConfig;
+  provider: SignInProviderConfig;
   auto?: boolean;
 };
 
diff --git a/packages/core/src/layout/SignInPage/commonProvider.tsx b/packages/core/src/layout/SignInPage/commonProvider.tsx
index b7480afa49..591efe9ece 100644
--- a/packages/core/src/layout/SignInPage/commonProvider.tsx
+++ b/packages/core/src/layout/SignInPage/commonProvider.tsx
@@ -21,13 +21,13 @@ import {
   ProviderComponent,
   ProviderLoader,
   SignInProvider,
-  SignInConfig,
+  SignInProviderConfig,
 } from './types';
 import { useApi, errorApiRef } from '@backstage/core-api';
 import { GridItem } from './styles';
 
 const Component: ProviderComponent = ({ config, onResult }) => {
-  const { apiRef, title, message } = config as SignInConfig;
+  const { apiRef, title, message } = config as SignInProviderConfig;
   const authApi = useApi(apiRef);
   const errorApi = useApi(errorApiRef);
 
diff --git a/packages/core/src/layout/SignInPage/index.ts b/packages/core/src/layout/SignInPage/index.ts
index 49f55aefc5..b10ea7ae33 100644
--- a/packages/core/src/layout/SignInPage/index.ts
+++ b/packages/core/src/layout/SignInPage/index.ts
@@ -14,4 +14,5 @@
  * limitations under the License.
  */
 
+export type { SignInProviderConfig } from './types';
 export { SignInPage } from './SignInPage';
diff --git a/packages/core/src/layout/SignInPage/providers.tsx b/packages/core/src/layout/SignInPage/providers.tsx
index e2c17ab80d..1ea32220b0 100644
--- a/packages/core/src/layout/SignInPage/providers.tsx
+++ b/packages/core/src/layout/SignInPage/providers.tsx
@@ -22,7 +22,11 @@ import {
   useApiHolder,
   errorApiRef,
 } from '@backstage/core-api';
-import { SignInConfig, IdentityProviders, SignInProvider } from './types';
+import {
+  IdentityProviders,
+  SignInProvider,
+  SignInProviderConfig,
+} from './types';
 import { commonProvider } from './commonProvider';
 import { guestProvider } from './guestProvider';
 import { customProvider } from './customProvider';
@@ -33,7 +37,7 @@ export type SignInProviderType = {
   [key: string]: {
     components: SignInProvider;
     id: string;
-    config?: SignInConfig;
+    config?: SignInProviderConfig;
   };
 };
 
@@ -62,7 +66,7 @@ export function getSignInProviders(
         return acc;
       }
 
-      const { id } = config as SignInConfig;
+      const { id } = config as SignInProviderConfig;
       validateIDs(id, acc);
 
       acc[id] = { components: signInProviders.common, id, config };
diff --git a/packages/core/src/layout/SignInPage/types.ts b/packages/core/src/layout/SignInPage/types.ts
index 48945e6988..0c78549d0c 100644
--- a/packages/core/src/layout/SignInPage/types.ts
+++ b/packages/core/src/layout/SignInPage/types.ts
@@ -25,17 +25,17 @@ import {
   SessionApi,
 } from '@backstage/core-api';
 
-export type SignInConfig = {
+export type SignInProviderConfig = {
   id: string;
   title: string;
   message: string;
   apiRef: ApiRef<ProfileInfoApi & BackstageIdentityApi & SessionApi>;
 };
 
-export type IdentityProviders = ('guest' | 'custom' | SignInConfig)[];
+export type IdentityProviders = ('guest' | 'custom' | SignInProviderConfig)[];
 
 export type ProviderComponent = ComponentType<
-  SignInPageProps & { config: SignInConfig }
+  SignInPageProps & { config: SignInProviderConfig }
 >;
 
 export type ProviderLoader = (
diff --git a/packages/create-app/CHANGELOG.md b/packages/create-app/CHANGELOG.md
index 9855790e00..5975b78e06 100644
--- a/packages/create-app/CHANGELOG.md
+++ b/packages/create-app/CHANGELOG.md
@@ -1,5 +1,128 @@
 # @backstage/create-app
 
+## 0.3.18
+
+### Patch Changes
+
+- b49a525ab: Fixing dependency resolution for problematic library `graphql-language-service-interface`.
+
+  This change might not have to be applied to your local installation, however if you run into this error:
+
+  ```
+  Error: Failed to compile.
+  /tmp/backstage-e2e-uMeycm/test-app/node_modules/graphql-language-service-interface/esm/GraphQLLanguageService.js 100:23
+  Module parse failed: Unexpected token (100:23)
+  You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
+  |         }
+  |         let customRules = null;
+  >         if (extensions?.customValidationRules &&
+  |             typeof extensions.customValidationRules === 'function') {
+  |             customRules = extensions.customValidationRules(this._graphQLConfig);
+  ```
+
+  You can fix it by adding the following to the root `package.json`.
+
+  ```json
+  ...
+  "resolutions": {
+    "graphql-language-service-interface": "2.8.2",
+    "graphql-language-service-parser": "1.9.0"
+   },
+  ...
+  ```
+
+- a360f9478: Expose the catalog-import route as an external route from the scaffolder.
+
+  This will make it possible to hide the "Register Existing Component" button
+  when you for example are running backstage with `catalog.readonly=true`.
+
+  As a consequence of this change you need add a new binding to your createApp call to
+  keep the button visible. However, if you instead want to hide the button you can safely
+  ignore the following example.
+
+  To bind the external route from the catalog-import plugin to the scaffolder template
+  index page, make sure you have the appropriate imports and add the following
+  to the createApp call:
+
+  ```typescript
+  import { catalogImportPlugin } from '@backstage/plugin-catalog-import';
+
+  const app = createApp({
+    // ...
+    bindRoutes({ bind }) {
+      // ...
+      bind(scaffolderPlugin.externalRoutes, {
+        registerComponent: catalogImportPlugin.routes.importPage,
+      });
+    },
+  });
+  ```
+
+- f1952337c: Due to a change in the techdocs publishers, they don't check if they are able to reach e.g. the configured S3 bucket anymore.
+  This can be added again by the following change. Note that the backend process will no longer exit when it is not reachable but will only emit an error log message.
+  You should include the check when your backend to get early feedback about a potential misconfiguration:
+
+  ```diff
+    // packages/backend/src/plugins/techdocs.ts
+
+    export default async function createPlugin({
+      logger,
+      config,
+      discovery,
+      reader,
+    }: PluginEnvironment): Promise<Router> {
+      // ...
+
+      const publisher = await Publisher.fromConfig(config, {
+        logger,
+        discovery,
+      })
+
+  +   // checks if the publisher is working and logs the result
+  +   await publisher.getReadiness();
+
+      // Docker client (conditionally) used by the generators, based on techdocs.generators config.
+      const dockerClient = new Docker();
+
+      // ...
+  }
+  ```
+
+- Updated dependencies [d8ffec739]
+- Updated dependencies [7abec4dbc]
+- Updated dependencies [017192ee8]
+- Updated dependencies [a360f9478]
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d840d30bc]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [b25846562]
+- Updated dependencies [12390778e]
+- Updated dependencies [cba5944fc]
+- Updated dependencies [a376e3ee8]
+- Updated dependencies [fef852ecd]
+- Updated dependencies [18f7345a6]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [423a514c3]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [442f34b87]
+- Updated dependencies [e27cb6c45]
+- Updated dependencies [184b02bef]
+- Updated dependencies [0b7fd7a9d]
+- Updated dependencies [60ce64aa2]
+  - @backstage/plugin-scaffolder-backend@0.9.6
+  - @backstage/plugin-catalog-backend@0.7.1
+  - @backstage/plugin-scaffolder@0.9.0
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+  - @backstage/plugin-catalog@0.5.4
+  - @backstage/plugin-api-docs@0.4.11
+  - @backstage/plugin-techdocs-backend@0.7.1
+  - @backstage/plugin-techdocs@0.7.2
+  - @backstage/catalog-client@0.3.10
+  - @backstage/plugin-tech-radar@0.3.9
+  - @backstage/cli@0.6.8
+
 ## 0.3.17
 
 ### Patch Changes
diff --git a/packages/create-app/package.json b/packages/create-app/package.json
index 35ce1b5180..ea3d3548b8 100644
--- a/packages/create-app/package.json
+++ b/packages/create-app/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@backstage/create-app",
   "description": "Create app package for Backstage",
-  "version": "0.3.17",
+  "version": "0.3.18",
   "private": false,
   "publishConfig": {
     "access": "public"
diff --git a/packages/create-app/templates/default-app/app-config.yaml.hbs b/packages/create-app/templates/default-app/app-config.yaml.hbs
index e7e44c9961..442e90944e 100644
--- a/packages/create-app/templates/default-app/app-config.yaml.hbs
+++ b/packages/create-app/templates/default-app/app-config.yaml.hbs
@@ -25,14 +25,10 @@ backend:
   database:
     client: pg
     connection:
-      host:
-        $env: POSTGRES_HOST
-      port:
-        $env: POSTGRES_PORT
-      user:
-        $env: POSTGRES_USER
-      password:
-        $env: POSTGRES_PASSWORD
+      host: ${POSTGRES_HOST}
+      port: ${POSTGRES_PORT}
+      user: ${POSTGRES_USER}
+      password: ${POSTGRES_PASSWORD}
       # https://node-postgres.com/features/ssl
       #ssl: require # see https://www.postgresql.org/docs/current/libpq-ssl.html Table 33.1. SSL Mode Descriptions (e.g. require)
         #ca: # if you have a CA file and want to verify it you can uncomment this section
@@ -43,13 +39,11 @@ backend:
 integrations:
   github:
     - host: github.com
-      token:
-        $env: GITHUB_TOKEN
+      token: ${GITHUB_TOKEN}
     ### Example for how to add your GitHub Enterprise instance using the API:
     # - host: ghe.example.net
     #   apiBaseUrl: https://ghe.example.net/api/v3
-    #   token:
-    #     $env: GHE_TOKEN
+    #   token: ${GHE_TOKEN}
 
 proxy:
   '/test':
@@ -73,8 +67,7 @@ auth:
 
 scaffolder:
   github:
-    token:
-      $env: GITHUB_TOKEN
+    token: ${GITHUB_TOKEN}
     visibility: public # or 'internal' or 'private'
 
 catalog:
diff --git a/packages/create-app/templates/default-app/packages/backend/src/plugins/techdocs.ts b/packages/create-app/templates/default-app/packages/backend/src/plugins/techdocs.ts
index 0ba08cefaf..231a7e7fd7 100644
--- a/packages/create-app/templates/default-app/packages/backend/src/plugins/techdocs.ts
+++ b/packages/create-app/templates/default-app/packages/backend/src/plugins/techdocs.ts
@@ -34,6 +34,9 @@ export default async function createPlugin({
     discovery,
   });
 
+  // checks if the publisher is working and logs the result
+  await publisher.getReadiness();
+
   // Docker client (conditionally) used by the generators, based on techdocs.generators config.
   const dockerClient = new Docker();
 
diff --git a/packages/techdocs-common/CHANGELOG.md b/packages/techdocs-common/CHANGELOG.md
index 84b1be1fd5..9dd6447a14 100644
--- a/packages/techdocs-common/CHANGELOG.md
+++ b/packages/techdocs-common/CHANGELOG.md
@@ -1,5 +1,59 @@
 # @backstage/techdocs-common
 
+## 0.5.0
+
+### Minor Changes
+
+- bc9d62f4f: Move the sanity checks of the publisher configurations to a dedicated `PublisherBase#getReadiness()` method instead of throwing an error when doing `Publisher.fromConfig(...)`.
+  You should include the check when your backend to get early feedback about a potential misconfiguration:
+
+  ```diff
+    // packages/backend/src/plugins/techdocs.ts
+
+    export default async function createPlugin({
+      logger,
+      config,
+      discovery,
+      reader,
+    }: PluginEnvironment): Promise<Router> {
+      // ...
+
+      const publisher = await Publisher.fromConfig(config, {
+        logger,
+        discovery,
+      })
+
+  +   // checks if the publisher is working and logs the result
+  +   await publisher.getReadiness();
+
+      // Docker client (conditionally) used by the generators, based on techdocs.generators config.
+      const dockerClient = new Docker();
+
+      // ...
+  }
+  ```
+
+  If you want to crash your application on invalid configurations, you can throw an `Error` to preserve the old behavior.
+  Please be aware that this is not the recommended for the use in a Backstage backend but might be helpful in CLI tools such as the `techdocs-cli`.
+
+  ```ts
+  const publisher = await Publisher.fromConfig(config, {
+    logger,
+    discovery,
+  });
+
+  const ready = await publisher.getReadiness();
+  if (!ready.isAvailable) {
+    throw new Error('Invalid TechDocs publisher configuration');
+  }
+  ```
+
+### Patch Changes
+
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+  - @backstage/catalog-model@0.7.7
+
 ## 0.4.5
 
 ### Patch Changes
diff --git a/packages/techdocs-common/__mocks__/@google-cloud/storage.ts b/packages/techdocs-common/__mocks__/@google-cloud/storage.ts
index 264852d31c..f8d0368f27 100644
--- a/packages/techdocs-common/__mocks__/@google-cloud/storage.ts
+++ b/packages/techdocs-common/__mocks__/@google-cloud/storage.ts
@@ -81,10 +81,12 @@ class Bucket {
     this.bucketName = bucketName;
   }
 
-  getMetadata() {
-    return new Promise(resolve => {
-      resolve('');
-    });
+  async getMetadata() {
+    if (this.bucketName === 'errorBucket') {
+      throw Error('Bucket does not exist');
+    }
+
+    return '';
   }
 
   upload(source: string, { destination }) {
diff --git a/packages/techdocs-common/__mocks__/aws-sdk.ts b/packages/techdocs-common/__mocks__/aws-sdk.ts
index 363662c63c..eb15a218ab 100644
--- a/packages/techdocs-common/__mocks__/aws-sdk.ts
+++ b/packages/techdocs-common/__mocks__/aws-sdk.ts
@@ -80,10 +80,16 @@ export class S3 {
     };
   }
 
-  headBucket() {
-    return new Promise(resolve => {
-      resolve('');
-    });
+  headBucket({ Bucket }) {
+    return {
+      promise: async () => {
+        if (Bucket === 'errorBucket') {
+          throw new Error('Bucket does not exist');
+        }
+
+        return {};
+      },
+    };
   }
 
   upload({ Key }: { Key: string }) {
diff --git a/packages/techdocs-common/__mocks__/pkgcloud.ts b/packages/techdocs-common/__mocks__/pkgcloud.ts
index 5d9f81cda0..dca86238e4 100644
--- a/packages/techdocs-common/__mocks__/pkgcloud.ts
+++ b/packages/techdocs-common/__mocks__/pkgcloud.ts
@@ -13,10 +13,11 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { EventEmitter } from 'events';
 import fs from 'fs-extra';
 import os from 'os';
 import path from 'path';
-import { EventEmitter } from 'events';
+import { ClientError } from 'pkgcloud';
 
 const rootDir = os.platform() === 'win32' ? 'C:\\rootDir' : '/rootDir';
 
@@ -37,12 +38,11 @@ class PkgCloudStorageClient {
   getFile(
     containerName: string,
     file: string,
-    callback: (err: any, file: string) => any,
+    callback: (err: any, file: any) => any,
   ) {
     checkFileExists(file).then(res => {
       if (!res) {
-        callback('File does not exist', file);
-        throw new Error('File does not exist');
+        callback('File does not exist', undefined);
       } else {
         callback(undefined, 'success');
       }
@@ -51,13 +51,12 @@ class PkgCloudStorageClient {
 
   getContainer(
     containerName: string,
-    callback: (err: string, container: string) => any,
+    callback: (err: ClientError, container: any) => any,
   ) {
     if (containerName !== 'mock') {
-      callback('Container does not exist', containerName);
-      throw new Error('Container does not exist');
+      callback(new Error('Container does not exist'), undefined);
     } else {
-      callback('Container does not exist', 'success');
+      callback(undefined, 'success');
     }
   }
 
diff --git a/packages/techdocs-common/package.json b/packages/techdocs-common/package.json
index fe13a0fc88..c41dce72b1 100644
--- a/packages/techdocs-common/package.json
+++ b/packages/techdocs-common/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@backstage/techdocs-common",
   "description": "Common functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli",
-  "version": "0.4.5",
+  "version": "0.5.0",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "private": false,
@@ -39,7 +39,7 @@
     "@azure/identity": "^1.2.2",
     "@azure/storage-blob": "^12.4.0",
     "@backstage/backend-common": "^0.6.0",
-    "@backstage/catalog-model": "^0.7.4",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@backstage/errors": "^0.1.1",
     "@backstage/integration": "^0.5.1",
@@ -62,7 +62,7 @@
     "winston": "^3.2.1"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.5",
+    "@backstage/cli": "^0.6.8",
     "@types/fs-extra": "^9.0.5",
     "@types/git-url-parse": "^9.0.0",
     "@types/js-yaml": "^4.0.0",
diff --git a/packages/techdocs-common/src/stages/publish/awsS3.test.ts b/packages/techdocs-common/src/stages/publish/awsS3.test.ts
index d3281c2645..15da3b7cfc 100644
--- a/packages/techdocs-common/src/stages/publish/awsS3.test.ts
+++ b/packages/techdocs-common/src/stages/publish/awsS3.test.ts
@@ -13,16 +13,16 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { getVoidLogger } from '@backstage/backend-common';
 import {
   Entity,
-  EntityName,
   ENTITY_DEFAULT_NAMESPACE,
+  EntityName,
 } from '@backstage/catalog-model';
 import { ConfigReader } from '@backstage/config';
 import mockFs from 'mock-fs';
 import os from 'os';
 import path from 'path';
-import * as winston from 'winston';
 import { AwsS3Publish } from './awsS3';
 import { PublisherBase, TechDocsMetadata } from './types';
 
@@ -59,9 +59,7 @@ const getEntityRootDir = (entity: Entity) => {
   return path.join(rootDir, namespace || ENTITY_DEFAULT_NAMESPACE, kind, name);
 };
 
-const logger = winston.createLogger();
-jest.spyOn(logger, 'info').mockReturnValue(logger);
-jest.spyOn(logger, 'error').mockReturnValue(logger);
+const logger = getVoidLogger();
 
 let publisher: PublisherBase;
 
@@ -87,6 +85,39 @@ beforeEach(() => {
 });
 
 describe('AwsS3Publish', () => {
+  describe('getReadiness', () => {
+    it('should validate correct config', async () => {
+      expect(await publisher.getReadiness()).toEqual({
+        isAvailable: true,
+      });
+    });
+
+    it('should reject incorrect config', async () => {
+      const mockConfig = new ConfigReader({
+        techdocs: {
+          requestUrl: 'http://localhost:7000',
+          publisher: {
+            type: 'awsS3',
+            awsS3: {
+              credentials: {
+                accessKeyId: 'accessKeyId',
+                secretAccessKey: 'secretAccessKey',
+              },
+              // this bucket name will throw an error
+              bucketName: 'errorBucket',
+            },
+          },
+        },
+      });
+
+      const errorPublisher = AwsS3Publish.fromConfig(mockConfig, logger);
+
+      expect(await errorPublisher.getReadiness()).toEqual({
+        isAvailable: false,
+      });
+    });
+  });
+
   describe('publish', () => {
     beforeEach(() => {
       const entity = createMockEntity();
diff --git a/packages/techdocs-common/src/stages/publish/awsS3.ts b/packages/techdocs-common/src/stages/publish/awsS3.ts
index c4c39898f4..9c6684fdca 100644
--- a/packages/techdocs-common/src/stages/publish/awsS3.ts
+++ b/packages/techdocs-common/src/stages/publish/awsS3.ts
@@ -17,16 +17,21 @@ import { Entity, EntityName } from '@backstage/catalog-model';
 import { Config } from '@backstage/config';
 import aws, { Credentials } from 'aws-sdk';
 import { ManagedUpload } from 'aws-sdk/clients/s3';
+import { CredentialsOptions } from 'aws-sdk/lib/credentials';
 import express from 'express';
 import fs from 'fs-extra';
 import JSON5 from 'json5';
 import createLimiter from 'p-limit';
-import { CredentialsOptions } from 'aws-sdk/lib/credentials';
 import path from 'path';
 import { Readable } from 'stream';
 import { Logger } from 'winston';
 import { getFileTreeRecursively, getHeadersForFileExtension } from './helpers';
-import { PublisherBase, PublishRequest, TechDocsMetadata } from './types';
+import {
+  PublisherBase,
+  PublishRequest,
+  ReadinessResponse,
+  TechDocsMetadata,
+} from './types';
 
 const streamToBuffer = (stream: Readable): Promise<Buffer> => {
   return new Promise((resolve, reject) => {
@@ -81,30 +86,6 @@ export class AwsS3Publish implements PublisherBase {
       ...(endpoint && { endpoint }),
     });
 
-    // Check if the defined bucket exists. Being able to connect means the configuration is good
-    // and the storage client will work.
-    storageClient.headBucket(
-      {
-        Bucket: bucketName,
-      },
-      err => {
-        if (err) {
-          logger.error(
-            `Could not retrieve metadata about the AWS S3 bucket ${bucketName}. ` +
-              'Make sure the bucket exists. Also make sure that authentication is setup either by ' +
-              'explicitly defining credentials and region in techdocs.publisher.awsS3 in app config or ' +
-              'by using environment variables. Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
-          );
-          logger.error(`from AWS client library: ${err.message}`);
-          throw new Error();
-        } else {
-          logger.info(
-            `Successfully connected to the AWS S3 bucket ${bucketName}.`,
-          );
-        }
-      },
-    );
-
     return new AwsS3Publish(storageClient, bucketName, logger);
   }
 
@@ -149,6 +130,35 @@ export class AwsS3Publish implements PublisherBase {
     this.logger = logger;
   }
 
+  /**
+   * Check if the defined bucket exists. Being able to connect means the configuration is good
+   * and the storage client will work.
+   */
+  async getReadiness(): Promise<ReadinessResponse> {
+    try {
+      await this.storageClient
+        .headBucket({ Bucket: this.bucketName })
+        .promise();
+
+      this.logger.info(
+        `Successfully connected to the AWS S3 bucket ${this.bucketName}.`,
+      );
+
+      return { isAvailable: true };
+    } catch (error) {
+      this.logger.error(
+        `Could not retrieve metadata about the AWS S3 bucket ${this.bucketName}. ` +
+          'Make sure the bucket exists. Also make sure that authentication is setup either by ' +
+          'explicitly defining credentials and region in techdocs.publisher.awsS3 in app config or ' +
+          'by using environment variables. Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
+      );
+      this.logger.error(`from AWS client library`, error);
+      return {
+        isAvailable: false,
+      };
+    }
+  }
+
   /**
    * Upload all the files from the generated `directory` to the S3 bucket.
    * Directory structure used in the bucket is - entityNamespace/entityKind/entityName/index.html
diff --git a/packages/techdocs-common/src/stages/publish/azureBlobStorage.test.ts b/packages/techdocs-common/src/stages/publish/azureBlobStorage.test.ts
index 9442fb0e37..c431e924a8 100644
--- a/packages/techdocs-common/src/stages/publish/azureBlobStorage.test.ts
+++ b/packages/techdocs-common/src/stages/publish/azureBlobStorage.test.ts
@@ -16,8 +16,8 @@
 import { getVoidLogger } from '@backstage/backend-common';
 import {
   Entity,
-  EntityName,
   ENTITY_DEFAULT_NAMESPACE,
+  EntityName,
 } from '@backstage/catalog-model';
 import { ConfigReader } from '@backstage/config';
 import mockFs from 'mock-fs';
@@ -59,12 +59,9 @@ const getEntityRootDir = (entity: Entity) => {
   return path.join(rootDir, namespace || ENTITY_DEFAULT_NAMESPACE, kind, name);
 };
 
-function createLogger() {
-  const logger = getVoidLogger();
-  jest.spyOn(logger, 'info').mockReturnValue(logger);
-  jest.spyOn(logger, 'error').mockReturnValue(logger);
-  return logger;
-}
+const logger = getVoidLogger();
+jest.spyOn(logger, 'info').mockReturnValue(logger);
+jest.spyOn(logger, 'error').mockReturnValue(logger);
 
 let publisher: PublisherBase;
 beforeEach(async () => {
@@ -85,13 +82,51 @@ beforeEach(async () => {
     },
   });
 
-  publisher = await AzureBlobStoragePublish.fromConfig(
-    mockConfig,
-    createLogger(),
-  );
+  publisher = AzureBlobStoragePublish.fromConfig(mockConfig, logger);
 });
 
 describe('publishing with valid credentials', () => {
+  describe('getReadiness', () => {
+    it('should validate correct config', async () => {
+      expect(await publisher.getReadiness()).toEqual({
+        isAvailable: true,
+      });
+    });
+
+    it('should reject incorrect config', async () => {
+      const mockConfig = new ConfigReader({
+        techdocs: {
+          requestUrl: 'http://localhost:7000',
+          publisher: {
+            type: 'azureBlobStorage',
+            azureBlobStorage: {
+              credentials: {
+                accountName: 'accountName',
+                accountKey: 'accountKey',
+              },
+              containerName: 'bad_container',
+            },
+          },
+        },
+      });
+
+      const errorPublisher = await AzureBlobStoragePublish.fromConfig(
+        mockConfig,
+        logger,
+      );
+
+      expect(await errorPublisher.getReadiness()).toEqual({
+        isAvailable: false,
+      });
+
+      expect(logger.error).toHaveBeenCalledWith(
+        expect.stringContaining(
+          `Could not retrieve metadata about the Azure Blob Storage container bad_container.`,
+        ),
+      );
+    });
+  });
+
   describe('publish', () => {
     beforeEach(() => {
       const entity = createMockEntity();
@@ -151,6 +186,60 @@ describe('publishing with valid credentials', () => {
         });
       mockFs.restore();
     });
+
+    it('reports an error when bad account credentials', async () => {
+      const mockConfig = new ConfigReader({
+        techdocs: {
+          requestUrl: 'http://localhost:7000',
+          publisher: {
+            type: 'azureBlobStorage',
+            azureBlobStorage: {
+              credentials: {
+                accountName: 'failupload',
+                accountKey: 'accountKey',
+              },
+              containerName: 'containerName',
+            },
+          },
+        },
+      });
+
+      publisher = await AzureBlobStoragePublish.fromConfig(mockConfig, logger);
+
+      const entity = createMockEntity();
+      const entityRootDir = getEntityRootDir(entity);
+
+      mockFs({
+        [entityRootDir]: {
+          'index.html': '',
+        },
+      });
+
+      let error;
+      try {
+        await publisher.publish({
+          entity,
+          directory: entityRootDir,
+        });
+      } catch (e) {
+        error = e;
+      }
+
+      expect(error.message).toContain(
+        `Unable to upload file(s) to Azure Blob Storage.`,
+      );
+
+      expect(logger.error).toHaveBeenCalledWith(
+        expect.stringContaining(
+          `Unable to upload file(s) to Azure Blob Storage. Error: Upload failed for ${path.join(
+            entityRootDir,
+            'index.html',
+          )} with status code 500`,
+        ),
+      );
+
+      mockFs.restore();
+    });
   });
 
   describe('hasDocsBeenGenerated', () => {
@@ -243,156 +332,3 @@ describe('publishing with valid credentials', () => {
     });
   });
 });
-
-describe('error reporting', () => {
-  it('reports an error when unable to read container properties', async () => {
-    const mockConfig = new ConfigReader({
-      techdocs: {
-        requestUrl: 'http://localhost:7000',
-        publisher: {
-          type: 'azureBlobStorage',
-          azureBlobStorage: {
-            credentials: {
-              accountName: 'accountName',
-            },
-            containerName: 'bad_container',
-          },
-        },
-      },
-    });
-
-    const logger = createLogger();
-
-    let error;
-    try {
-      publisher = await AzureBlobStoragePublish.fromConfig(mockConfig, logger);
-    } catch (e) {
-      error = e;
-    }
-
-    expect(error).toBeInstanceOf(Error);
-
-    expect(logger.error).toHaveBeenCalledWith(
-      expect.stringContaining(
-        `Could not retrieve metadata about the Azure Blob Storage container bad_container.`,
-      ),
-    );
-  });
-
-  it('reports an error when bad account credentials', async () => {
-    const mockConfig = new ConfigReader({
-      techdocs: {
-        requestUrl: 'http://localhost:7000',
-        publisher: {
-          type: 'azureBlobStorage',
-          azureBlobStorage: {
-            credentials: {
-              accountName: 'failupload',
-              accountKey: 'accountKey',
-            },
-            containerName: 'containerName',
-          },
-        },
-      },
-    });
-
-    const logger = createLogger();
-
-    publisher = await AzureBlobStoragePublish.fromConfig(mockConfig, logger);
-
-    const entity = createMockEntity();
-    const entityRootDir = getEntityRootDir(entity);
-
-    mockFs({
-      [entityRootDir]: {
-        'index.html': '',
-      },
-    });
-
-    let error;
-    try {
-      await publisher.publish({
-        entity,
-        directory: entityRootDir,
-      });
-    } catch (e) {
-      error = e;
-    }
-
-    expect(error.message).toContain(
-      `Unable to upload file(s) to Azure Blob Storage.`,
-    );
-
-    expect(logger.error).toHaveBeenCalledWith(
-      expect.stringContaining(
-        `Unable to upload file(s) to Azure Blob Storage. Error: Upload failed for ${path.join(
-          entityRootDir,
-          'index.html',
-        )} with status code 500`,
-      ),
-    );
-
-    mockFs.restore();
-  });
-
-  describe('fetchTechDocsMetadata', () => {
-    it('should return tech docs metadata', async () => {
-      const entityNameMock = createMockEntityName();
-      const entity = createMockEntity();
-      const entityRootDir = getEntityRootDir(entity);
-
-      mockFs({
-        [entityRootDir]: {
-          'techdocs_metadata.json':
-            '{"site_name": "backstage", "site_description": "site_content", "etag": "etag"}',
-        },
-      });
-      const expectedMetadata: TechDocsMetadata = {
-        site_name: 'backstage',
-        site_description: 'site_content',
-        etag: 'etag',
-      };
-      expect(
-        await publisher.fetchTechDocsMetadata(entityNameMock),
-      ).toStrictEqual(expectedMetadata);
-      mockFs.restore();
-    });
-
-    it('should return tech docs metadata when json encoded with single quotes', async () => {
-      const entityNameMock = createMockEntityName();
-      const entity = createMockEntity();
-      const entityRootDir = getEntityRootDir(entity);
-
-      mockFs({
-        [entityRootDir]: {
-          'techdocs_metadata.json': `{'site_name': 'backstage', 'site_description': 'site_content', 'etag': 'etag'}`,
-        },
-      });
-
-      const expectedMetadata: TechDocsMetadata = {
-        site_name: 'backstage',
-        site_description: 'site_content',
-        etag: 'etag',
-      };
-      expect(
-        await publisher.fetchTechDocsMetadata(entityNameMock),
-      ).toStrictEqual(expectedMetadata);
-      mockFs.restore();
-    });
-
-    it('should return an error if the techdocs_metadata.json file is not present', async () => {
-      const entityNameMock = createMockEntityName();
-
-      let error;
-      try {
-        await publisher.fetchTechDocsMetadata(entityNameMock);
-      } catch (e) {
-        error = e;
-      }
-
-      expect(error.message).toEqual(
-        expect.stringContaining('TechDocs metadata fetch'),
-      );
-    });
-  });
-});
diff --git a/packages/techdocs-common/src/stages/publish/azureBlobStorage.ts b/packages/techdocs-common/src/stages/publish/azureBlobStorage.ts
index 155d14fbb5..1a823c3d19 100644
--- a/packages/techdocs-common/src/stages/publish/azureBlobStorage.ts
+++ b/packages/techdocs-common/src/stages/publish/azureBlobStorage.ts
@@ -26,16 +26,18 @@ import limiterFactory from 'p-limit';
 import { default as path, default as platformPath } from 'path';
 import { Logger } from 'winston';
 import { getFileTreeRecursively, getHeadersForFileExtension } from './helpers';
-import { PublisherBase, PublishRequest, TechDocsMetadata } from './types';
+import {
+  PublisherBase,
+  PublishRequest,
+  ReadinessResponse,
+  TechDocsMetadata,
+} from './types';
 
 // The number of batches that may be ongoing at the same time.
 const BATCH_CONCURRENCY = 3;
 
 export class AzureBlobStoragePublish implements PublisherBase {
-  static async fromConfig(
-    config: Config,
-    logger: Logger,
-  ): Promise<PublisherBase> {
+  static fromConfig(config: Config, logger: Logger): PublisherBase {
     let containerName = '';
     try {
       containerName = config.getString(
@@ -78,26 +80,6 @@ export class AzureBlobStoragePublish implements PublisherBase {
       credential,
     );
 
-    try {
-      const response = await storageClient
-        .getContainerClient(containerName)
-        .getProperties();
-
-      if (response._response.status >= 400) {
-        throw new Error(
-          `Failed to retrieve metadata from ${response._response.request.url} with status code ${response._response.status}.`,
-        );
-      }
-    } catch (e) {
-      logger.error(
-        `Could not retrieve metadata about the Azure Blob Storage container ${containerName}. ` +
-          'Make sure that the Azure project and container exist and the access key is setup correctly ' +
-          'techdocs.publisher.azureBlobStorage.credentials defined in app config has correct permissions. ' +
-          'Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
-      );
-      throw new Error(`from Azure Blob Storage client library: ${e.message}`);
-    }
-
     return new AzureBlobStoragePublish(storageClient, containerName, logger);
   }
 
@@ -111,6 +93,37 @@ export class AzureBlobStoragePublish implements PublisherBase {
     this.logger = logger;
   }
 
+  async getReadiness(): Promise<ReadinessResponse> {
+    try {
+      const response = await this.storageClient
+        .getContainerClient(this.containerName)
+        .getProperties();
+
+      if (response._response.status === 200) {
+        return {
+          isAvailable: true,
+        };
+      }
+
+      if (response._response.status >= 400) {
+        this.logger.error(
+          `Failed to retrieve metadata from ${response._response.request.url} with status code ${response._response.status}.`,
+        );
+      }
+    } catch (e) {
+      this.logger.error(`from Azure Blob Storage client library: ${e.message}`);
+    }
+
+    this.logger.error(
+      `Could not retrieve metadata about the Azure Blob Storage container ${this.containerName}. ` +
+        'Make sure that the Azure project and container exist and the access key is setup correctly ' +
+        'techdocs.publisher.azureBlobStorage.credentials defined in app config has correct permissions. ' +
+        'Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
+    );
+
+    return { isAvailable: false };
+  }
+
   /**
    * Upload all the files from the generated `directory` to the Azure Blob Storage container.
    * Directory structure used in the container is - entityNamespace/entityKind/entityName/index.html
diff --git a/packages/techdocs-common/src/stages/publish/googleStorage.test.ts b/packages/techdocs-common/src/stages/publish/googleStorage.test.ts
index 07bc5c06b9..7e580b16bc 100644
--- a/packages/techdocs-common/src/stages/publish/googleStorage.test.ts
+++ b/packages/techdocs-common/src/stages/publish/googleStorage.test.ts
@@ -16,8 +16,8 @@
 import { getVoidLogger } from '@backstage/backend-common';
 import {
   Entity,
-  EntityName,
   ENTITY_DEFAULT_NAMESPACE,
+  EntityName,
 } from '@backstage/catalog-model';
 import { ConfigReader } from '@backstage/config';
 import mockFs from 'mock-fs';
@@ -83,6 +83,35 @@ beforeEach(async () => {
 });
 
 describe('GoogleGCSPublish', () => {
+  describe('getReadiness', () => {
+    it('should validate correct config', async () => {
+      expect(await publisher.getReadiness()).toEqual({
+        isAvailable: true,
+      });
+    });
+
+    it('should reject incorrect config', async () => {
+      const mockConfig = new ConfigReader({
+        techdocs: {
+          requestUrl: 'http://localhost:7000',
+          publisher: {
+            type: 'googleGcs',
+            googleGcs: {
+              credentials: '{}',
+              bucketName: 'errorBucket',
+            },
+          },
+        },
+      });
+
+      const errorPublisher = GoogleGCSPublish.fromConfig(mockConfig, logger);
+
+      expect(await errorPublisher.getReadiness()).toEqual({
+        isAvailable: false,
+      });
+    });
+  });
+
   describe('publish', () => {
     beforeEach(() => {
       const entity = createMockEntity();
diff --git a/packages/techdocs-common/src/stages/publish/googleStorage.ts b/packages/techdocs-common/src/stages/publish/googleStorage.ts
index 12ecf45b2d..28fbb42ece 100644
--- a/packages/techdocs-common/src/stages/publish/googleStorage.ts
+++ b/packages/techdocs-common/src/stages/publish/googleStorage.ts
@@ -26,13 +26,15 @@ import createLimiter from 'p-limit';
 import path from 'path';
 import { Logger } from 'winston';
 import { getFileTreeRecursively, getHeadersForFileExtension } from './helpers';
-import { PublisherBase, PublishRequest, TechDocsMetadata } from './types';
+import {
+  PublisherBase,
+  PublishRequest,
+  ReadinessResponse,
+  TechDocsMetadata,
+} from './types';
 
 export class GoogleGCSPublish implements PublisherBase {
-  static async fromConfig(
-    config: Config,
-    logger: Logger,
-  ): Promise<PublisherBase> {
+  static fromConfig(config: Config, logger: Logger): PublisherBase {
     let bucketName = '';
     try {
       bucketName = config.getString('techdocs.publisher.googleGcs.bucketName');
@@ -65,21 +67,6 @@ export class GoogleGCSPublish implements PublisherBase {
       }),
     });
 
-    // Check if the defined bucket exists. Being able to connect means the configuration is good
-    // and the storage client will work.
-    try {
-      await storageClient.bucket(bucketName).getMetadata();
-      logger.info(`Successfully connected to the GCS bucket ${bucketName}.`);
-    } catch (err) {
-      logger.error(
-        `Could not retrieve metadata about the GCS bucket ${bucketName}. ` +
-          'Make sure the bucket exists. Also make sure that authentication is setup either by explicitly defining ' +
-          'techdocs.publisher.googleGcs.credentials in app config or by using environment variables. ' +
-          'Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
-      );
-      throw new Error(err.message);
-    }
-
     return new GoogleGCSPublish(storageClient, bucketName, logger);
   }
 
@@ -93,6 +80,33 @@ export class GoogleGCSPublish implements PublisherBase {
     this.logger = logger;
   }
 
+  /**
+   * Check if the defined bucket exists. Being able to connect means the configuration is good
+   * and the storage client will work.
+   */
+  async getReadiness(): Promise<ReadinessResponse> {
+    try {
+      await this.storageClient.bucket(this.bucketName).getMetadata();
+      this.logger.info(
+        `Successfully connected to the GCS bucket ${this.bucketName}.`,
+      );
+
+      return {
+        isAvailable: true,
+      };
+    } catch (err) {
+      this.logger.error(
+        `Could not retrieve metadata about the GCS bucket ${this.bucketName}. ` +
+          'Make sure the bucket exists. Also make sure that authentication is setup either by explicitly defining ' +
+          'techdocs.publisher.googleGcs.credentials in app config or by using environment variables. ' +
+          'Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
+      );
+      this.logger.error(`from GCS client library: ${err.message}`);
+
+      return { isAvailable: false };
+    }
+  }
+
   /**
    * Upload all the files from the generated `directory` to the GCS bucket.
    * Directory structure used in the bucket is - entityNamespace/entityKind/entityName/index.html
diff --git a/packages/techdocs-common/src/stages/publish/local.ts b/packages/techdocs-common/src/stages/publish/local.ts
index 3088c1a695..e09473cf60 100644
--- a/packages/techdocs-common/src/stages/publish/local.ts
+++ b/packages/techdocs-common/src/stages/publish/local.ts
@@ -28,6 +28,7 @@ import {
   PublisherBase,
   PublishRequest,
   PublishResponse,
+  ReadinessResponse,
   TechDocsMetadata,
 } from './types';
 
@@ -65,6 +66,12 @@ export class LocalPublish implements PublisherBase {
     this.discovery = discovery;
   }
 
+  async getReadiness(): Promise<ReadinessResponse> {
+    return {
+      isAvailable: true,
+    };
+  }
+
   publish({ entity, directory }: PublishRequest): Promise<PublishResponse> {
     const entityNamespace = entity.metadata.namespace ?? 'default';
 
diff --git a/packages/techdocs-common/src/stages/publish/openStackSwift.test.ts b/packages/techdocs-common/src/stages/publish/openStackSwift.test.ts
index f3b788916f..6f0aacede0 100644
--- a/packages/techdocs-common/src/stages/publish/openStackSwift.test.ts
+++ b/packages/techdocs-common/src/stages/publish/openStackSwift.test.ts
@@ -13,16 +13,16 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import { getVoidLogger } from '@backstage/backend-common';
 import {
   Entity,
-  EntityName,
   ENTITY_DEFAULT_NAMESPACE,
+  EntityName,
 } from '@backstage/catalog-model';
 import { ConfigReader } from '@backstage/config';
 import mockFs from 'mock-fs';
 import os from 'os';
 import path from 'path';
-import * as winston from 'winston';
 import { OpenStackSwiftPublish } from './openStackSwift';
 import { PublisherBase, TechDocsMetadata } from './types';
 
@@ -59,9 +59,7 @@ const getEntityRootDir = (entity: Entity) => {
   return path.join(rootDir, namespace || ENTITY_DEFAULT_NAMESPACE, kind, name);
 };
 
-const logger = winston.createLogger();
-jest.spyOn(logger, 'info').mockReturnValue(logger);
-jest.spyOn(logger, 'error').mockReturnValue(logger);
+const logger = getVoidLogger();
 
 let publisher: PublisherBase;
 
@@ -89,6 +87,43 @@ beforeEach(() => {
 });
 
 describe('OpenStackSwiftPublish', () => {
+  describe('getReadiness', () => {
+    it('should validate correct config', async () => {
+      expect(await publisher.getReadiness()).toEqual({
+        isAvailable: true,
+      });
+    });
+
+    it('should reject incorrect config', async () => {
+      const mockConfig = new ConfigReader({
+        techdocs: {
+          requestUrl: 'http://localhost:7000',
+          publisher: {
+            type: 'openStackSwift',
+            openStackSwift: {
+              credentials: {
+                username: 'mockuser',
+                password: 'verystrongpass',
+              },
+              authUrl: 'mockauthurl',
+              region: 'mockregion',
+              containerName: 'errorBucket',
+            },
+          },
+        },
+      });
+
+      const errorPublisher = OpenStackSwiftPublish.fromConfig(
+        mockConfig,
+        logger,
+      );
+
+      expect(await errorPublisher.getReadiness()).toEqual({
+        isAvailable: false,
+      });
+    });
+  });
+
   describe('publish', () => {
     beforeEach(() => {
       const entity = createMockEntity();
diff --git a/packages/techdocs-common/src/stages/publish/openStackSwift.ts b/packages/techdocs-common/src/stages/publish/openStackSwift.ts
index 0e60bc5796..bff0055402 100644
--- a/packages/techdocs-common/src/stages/publish/openStackSwift.ts
+++ b/packages/techdocs-common/src/stages/publish/openStackSwift.ts
@@ -15,16 +15,21 @@
  */
 import { Entity, EntityName } from '@backstage/catalog-model';
 import { Config } from '@backstage/config';
-import { storage } from 'pkgcloud';
 import express from 'express';
 import fs from 'fs-extra';
 import JSON5 from 'json5';
 import createLimiter from 'p-limit';
 import path from 'path';
+import { storage } from 'pkgcloud';
 import { Readable } from 'stream';
 import { Logger } from 'winston';
 import { getFileTreeRecursively, getHeadersForFileExtension } from './helpers';
-import { PublisherBase, PublishRequest, TechDocsMetadata } from './types';
+import {
+  PublisherBase,
+  PublishRequest,
+  ReadinessResponse,
+  TechDocsMetadata,
+} from './types';
 
 const streamToBuffer = (stream: Readable): Promise<Buffer> => {
   return new Promise((resolve, reject) => {
@@ -70,25 +75,6 @@ export class OpenStackSwiftPublish implements PublisherBase {
       region: openStackSwiftConfig.getString('region'),
     });
 
-    // Check if the defined container exists. Being able to connect means the configuration is good
-    // and the storage client will work.
-    storageClient.getContainer(containerName, (err, container) => {
-      if (container) {
-        logger.info(
-          `Successfully connected to the OpenStack Swift container ${containerName}.`,
-        );
-      } else {
-        logger.error(
-          `Could not retrieve metadata about the OpenStack Swift container ${containerName}. ` +
-            'Make sure the container exists. Also make sure that authentication is setup either by ' +
-            'explicitly defining credentials and region in techdocs.publisher.openStackSwift in app config or ' +
-            'by using environment variables. Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
-        );
-
-        logger.error(`from OpenStack client library: ${err.message}`);
-      }
-    });
-
     return new OpenStackSwiftPublish(storageClient, containerName, logger);
   }
 
@@ -102,6 +88,37 @@ export class OpenStackSwiftPublish implements PublisherBase {
     this.logger = logger;
   }
 
+  /*
+   * Check if the defined container exists. Being able to connect means the configuration is good
+   * and the storage client will work.
+   */
+  getReadiness(): Promise<ReadinessResponse> {
+    return new Promise(resolve => {
+      this.storageClient.getContainer(this.containerName, (err, container) => {
+        if (container) {
+          this.logger.info(
+            `Successfully connected to the OpenStack Swift container ${this.containerName}.`,
+          );
+          resolve({
+            isAvailable: true,
+          });
+        } else {
+          this.logger.error(
+            `Could not retrieve metadata about the OpenStack Swift container ${this.containerName}. ` +
+              'Make sure the container exists. Also make sure that authentication is setup either by ' +
+              'explicitly defining credentials and region in techdocs.publisher.openStackSwift in app config or ' +
+              'by using environment variables. Refer to https://backstage.io/docs/features/techdocs/using-cloud-storage',
+          );
+
+          this.logger.error(`from OpenStack client library: ${err.message}`);
+          resolve({
+            isAvailable: false,
+          });
+        }
+      });
+    });
+  }
+
   /**
    * Upload all the files from the generated `directory` to the OpenStack Swift container.
    * Directory structure used in the bucket is - entityNamespace/entityKind/entityName/index.html
diff --git a/packages/techdocs-common/src/stages/publish/publish.ts b/packages/techdocs-common/src/stages/publish/publish.ts
index f70a5f7626..909a4092ac 100644
--- a/packages/techdocs-common/src/stages/publish/publish.ts
+++ b/packages/techdocs-common/src/stages/publish/publish.ts
@@ -13,16 +13,16 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { Logger } from 'winston';
-import { Config } from '@backstage/config';
-import { PluginEndpointDiscovery } from '@backstage/backend-common';
 
-import { PublisherType, PublisherBase } from './types';
-import { LocalPublish } from './local';
-import { GoogleGCSPublish } from './googleStorage';
+import { PluginEndpointDiscovery } from '@backstage/backend-common';
+import { Config } from '@backstage/config';
+import { Logger } from 'winston';
 import { AwsS3Publish } from './awsS3';
 import { AzureBlobStoragePublish } from './azureBlobStorage';
+import { GoogleGCSPublish } from './googleStorage';
+import { LocalPublish } from './local';
 import { OpenStackSwiftPublish } from './openStackSwift';
+import { PublisherBase, PublisherType } from './types';
 
 type factoryOptions = {
   logger: Logger;
@@ -45,7 +45,7 @@ export class Publisher {
     switch (publisherType) {
       case 'googleGcs':
         logger.info('Creating Google Storage Bucket publisher for TechDocs');
-        return await GoogleGCSPublish.fromConfig(config, logger);
+        return GoogleGCSPublish.fromConfig(config, logger);
       case 'awsS3':
         logger.info('Creating AWS S3 Bucket publisher for TechDocs');
         return AwsS3Publish.fromConfig(config, logger);
diff --git a/packages/techdocs-common/src/stages/publish/types.ts b/packages/techdocs-common/src/stages/publish/types.ts
index 83fee55133..c2849b8e35 100644
--- a/packages/techdocs-common/src/stages/publish/types.ts
+++ b/packages/techdocs-common/src/stages/publish/types.ts
@@ -37,6 +37,14 @@ export type PublishResponse = {
   remoteUrl?: string;
 } | void;
 
+/**
+ * Result for the validation check.
+ */
+export type ReadinessResponse = {
+  /** If true, the publisher is able to interact with the backing storage. */
+  isAvailable: boolean;
+};
+
 /**
  * Type to hold metadata found in techdocs_metadata.json and associated with each site
  * @param etag ETag of the resource used to generate the site. Usually the latest commit sha of the source repository.
@@ -53,6 +61,14 @@ export type TechDocsMetadata = {
  * It also provides APIs to communicate with the storage service.
  */
 export interface PublisherBase {
+  /**
+   * Check if the publisher is ready. This check tries to perform certain checks to see if the
+   * publisher is configured correctly and can be used to publish or read documentations.
+   * The different implementations might e.g. use the provided service credentials to access the
+   * target or check if a folder/bucket is available.
+   */
+  getReadiness(): Promise<ReadinessResponse>;
+
   /**
    * Store the generated static files onto a storage service (either local filesystem or external service).
    *
diff --git a/packages/theme/src/pageTheme.ts b/packages/theme/src/pageTheme.ts
index c9a61bd95b..36f49bcdf9 100644
--- a/packages/theme/src/pageTheme.ts
+++ b/packages/theme/src/pageTheme.ts
@@ -63,5 +63,5 @@ export const pageTheme: Record<string, PageTheme> = {
   library: genPageTheme(colorVariants.rubyRed, shapes.wave),
   other: genPageTheme(colorVariants.darkGrey, shapes.wave),
   app: genPageTheme(colorVariants.toastyOrange, shapes.wave),
-  apis: genPageTheme(colorVariants.eveningSea, shapes.wave2),
+  apis: genPageTheme(colorVariants.teal, shapes.wave2),
 };
diff --git a/plugins/api-docs/CHANGELOG.md b/plugins/api-docs/CHANGELOG.md
index 14247fcea5..a2d5a28e41 100644
--- a/plugins/api-docs/CHANGELOG.md
+++ b/plugins/api-docs/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @backstage/plugin-api-docs
 
+## 0.4.11
+
+### Patch Changes
+
+- 12390778e: chore(deps): bump @asyncapi/react-component from 0.19.2 to 0.22.3
+- 5cafcf452: add debounce time attribute for apis-docs for search, giving more time to the users when they are typing.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [e27cb6c45]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+
 ## 0.4.10
 
 ### Patch Changes
diff --git a/plugins/api-docs/package.json b/plugins/api-docs/package.json
index d7f5f3754b..13f27c321b 100644
--- a/plugins/api-docs/package.json
+++ b/plugins/api-docs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-api-docs",
-  "version": "0.4.10",
+  "version": "0.4.11",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -29,9 +29,9 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@asyncapi/react-component": "^0.19.2",
-    "@backstage/catalog-model": "^0.7.5",
-    "@backstage/core": "^0.7.4",
+    "@asyncapi/react-component": "^0.22.3",
+    "@backstage/catalog-model": "^0.7.7",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.4",
     "@backstage/theme": "^0.2.5",
     "@material-icons/font": "^1.0.2",
@@ -49,7 +49,7 @@
     "swagger-ui-react": "^3.37.2"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/badges/package.json b/plugins/badges/package.json
index 1ab7315278..0d59e271b0 100644
--- a/plugins/badges/package.json
+++ b/plugins/badges/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.6",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/errors": "^0.1.1",
     "@backstage/plugin-catalog-react": "^0.1.3",
     "@backstage/theme": "^0.2.5",
@@ -34,7 +34,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/bitrise/README.md b/plugins/bitrise/README.md
index 2bff1f0d74..59d85b0a98 100644
--- a/plugins/bitrise/README.md
+++ b/plugins/bitrise/README.md
@@ -55,8 +55,7 @@ proxy:
     target: 'https://api.bitrise.io/v0.1'
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        $env: BITRISE_AUTH_TOKEN
+      Authorization: ${BITRISE_AUTH_TOKEN}
 ```
 
 Learn on https://devcenter.bitrise.io/api/authentication how to create a new Bitrise token.
diff --git a/plugins/bitrise/package.json b/plugins/bitrise/package.json
index 8a3b519fcb..16a02ae42a 100644
--- a/plugins/bitrise/package.json
+++ b/plugins/bitrise/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.2",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.2",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -37,7 +37,7 @@
     "recharts": "^1.8.5"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/catalog-backend/CHANGELOG.md b/plugins/catalog-backend/CHANGELOG.md
index 058f75f39a..94e9960e35 100644
--- a/plugins/catalog-backend/CHANGELOG.md
+++ b/plugins/catalog-backend/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @backstage/plugin-catalog-backend
 
+## 0.7.1
+
+### Patch Changes
+
+- 017192ee8: Add support for configure an LDAP query filter on multiple lines.
+- 5d0740563: Implemented missing support for the dependsOn/dependencyOf relationships
+  between `Component` and `Resource` catalog model objects.
+
+  Added support for generating the relevant relationships to the
+  `BuiltinKindsEntityProcessor`, and added simple support for fetching
+  relationships between `Components` and `Resources` for rendering in the
+  system diagram. All catalog-model changes backwards compatible.
+
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+  - @backstage/catalog-model@0.7.7
+
 ## 0.7.0
 
 ### Minor Changes
diff --git a/plugins/catalog-backend/package.json b/plugins/catalog-backend/package.json
index 531caa9ea5..a34c24f5f8 100644
--- a/plugins/catalog-backend/package.json
+++ b/plugins/catalog-backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-catalog-backend",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -31,7 +31,7 @@
   "dependencies": {
     "@azure/msal-node": "^1.0.0-beta.3",
     "@backstage/backend-common": "^0.6.1",
-    "@backstage/catalog-model": "^0.7.5",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@backstage/errors": "^0.1.1",
     "@backstage/integration": "^0.5.1",
@@ -62,7 +62,7 @@
     "yup": "^0.29.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.6",
+    "@backstage/cli": "^0.6.8",
     "@backstage/test-utils": "^0.1.9",
     "@types/core-js": "^2.5.4",
     "@types/git-url-parse": "^9.0.0",
diff --git a/plugins/catalog-import/package.json b/plugins/catalog-import/package.json
index a168f089c8..6af4b02bd0 100644
--- a/plugins/catalog-import/package.json
+++ b/plugins/catalog-import/package.json
@@ -32,7 +32,7 @@
   "dependencies": {
     "@backstage/catalog-model": "^0.7.6",
     "@backstage/catalog-client": "^0.3.9",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/integration": "^0.5.0",
     "@backstage/integration-react": "^0.1.1",
     "@backstage/plugin-catalog-react": "^0.1.4",
@@ -53,7 +53,7 @@
     "yaml": "^1.10.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/catalog/CHANGELOG.md b/plugins/catalog/CHANGELOG.md
index 7a79c39af1..eccfa953a4 100644
--- a/plugins/catalog/CHANGELOG.md
+++ b/plugins/catalog/CHANGELOG.md
@@ -1,5 +1,28 @@
 # @backstage/plugin-catalog
 
+## 0.5.4
+
+### Patch Changes
+
+- 5d0740563: Implemented missing support for the dependsOn/dependencyOf relationships
+  between `Component` and `Resource` catalog model objects.
+
+  Added support for generating the relevant relationships to the
+  `BuiltinKindsEntityProcessor`, and added simple support for fetching
+  relationships between `Components` and `Resources` for rendering in the
+  system diagram. All catalog-model changes backwards compatible.
+
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [442f34b87]
+- Updated dependencies [e27cb6c45]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+  - @backstage/catalog-client@0.3.10
+
 ## 0.5.3
 
 ### Patch Changes
diff --git a/plugins/catalog/package.json b/plugins/catalog/package.json
index 4e3d364b78..8561ae3188 100644
--- a/plugins/catalog/package.json
+++ b/plugins/catalog/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-catalog",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -30,9 +30,9 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/catalog-client": "^0.3.9",
-    "@backstage/catalog-model": "^0.7.6",
-    "@backstage/core": "^0.7.4",
+    "@backstage/catalog-client": "^0.3.10",
+    "@backstage/catalog-model": "^0.7.7",
+    "@backstage/core": "^0.7.5",
     "@backstage/errors": "^0.1.1",
     "@backstage/integration": "^0.5.1",
     "@backstage/integration-react": "^0.1.1",
@@ -53,7 +53,7 @@
     "swr": "^0.3.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@microsoft/microsoft-graph-types": "^1.25.0",
diff --git a/plugins/catalog/src/CatalogClientWrapper.ts b/plugins/catalog/src/CatalogClientWrapper.ts
index 32dff8a0a1..4966d9c13f 100644
--- a/plugins/catalog/src/CatalogClientWrapper.ts
+++ b/plugins/catalog/src/CatalogClientWrapper.ts
@@ -42,7 +42,7 @@ export class CatalogClientWrapper implements CatalogApi {
   }
 
   async getLocationById(
-    id: String,
+    id: string,
     options?: CatalogRequestOptions,
   ): Promise<Location | undefined> {
     return await this.client.getLocationById(id, {
diff --git a/plugins/circleci/README.md b/plugins/circleci/README.md
index 35fed49827..d30e950aa9 100644
--- a/plugins/circleci/README.md
+++ b/plugins/circleci/README.md
@@ -43,8 +43,7 @@ proxy:
   '/circleci/api':
     target: https://circleci.com/api/v1.1
     headers:
-      Circle-Token:
-        $env: CIRCLECI_AUTH_TOKEN
+      Circle-Token: ${CIRCLECI_AUTH_TOKEN}
 ```
 
 5. Get and provide `CIRCLECI_AUTH_TOKEN` as env variable (https://circleci.com/docs/api/#add-an-api-token)
diff --git a/plugins/circleci/package.json b/plugins/circleci/package.json
index 1d9fa11b3c..5eb91d08bb 100644
--- a/plugins/circleci/package.json
+++ b/plugins/circleci/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.2",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -50,7 +50,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/cloudbuild/package.json b/plugins/cloudbuild/package.json
index a713d57883..75e877ccb6 100644
--- a/plugins/cloudbuild/package.json
+++ b/plugins/cloudbuild/package.json
@@ -32,7 +32,7 @@
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
     "@backstage/plugin-catalog-react": "^0.1.2",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -47,7 +47,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/config-schema/.eslintrc.js b/plugins/config-schema/.eslintrc.js
new file mode 100644
index 0000000000..13573efa9c
--- /dev/null
+++ b/plugins/config-schema/.eslintrc.js
@@ -0,0 +1,3 @@
+module.exports = {
+  extends: [require.resolve('@backstage/cli/config/eslint')],
+};
diff --git a/plugins/config-schema/README.md b/plugins/config-schema/README.md
new file mode 100644
index 0000000000..7367868e7f
--- /dev/null
+++ b/plugins/config-schema/README.md
@@ -0,0 +1,19 @@
+# config-schema
+
+The `config-schema` plugin lets you browse a documentation reference of the configuration schema of a particular Backstage installation. It is intended as a tool for integrators rather than something that is useful to end users of Backstage.
+
+## Usage
+
+The plugin exports a single full-page extension, the `ConfigSchemaPage`, which you add to an app like a usual top-level tool on a dedicated route.
+
+It also exports a `configSchemaApiRef` without any default implementation, meaning that an API needs to be registered in the app for the plugin to work. An implementation of the API that is provided out of the box is the `StaticSchemaLoader`, which loads the schema from a URL. It can be added to the app by adding the following to your app's `api.ts`:
+
+```ts
+createApiFactory(configSchemaApiRef, new StaticSchemaLoader());
+```
+
+The configuration schema consumed by the `StaticSchemaLoader` can be generated using the following command:
+
+```shell
+yarn --silent backstage-cli config:schema --format=json
+```
diff --git a/plugins/config-schema/dev/example-schema.json b/plugins/config-schema/dev/example-schema.json
new file mode 100644
index 0000000000..d1e577ff6f
--- /dev/null
+++ b/plugins/config-schema/dev/example-schema.json
@@ -0,0 +1,1659 @@
+{
+  "$schema": "https://backstage.io/schema/config-v1",
+  "title": "Application Configuration Schema",
+  "type": "object",
+  "required": ["app", "backend", "costInsights", "sentry", "techdocs"],
+  "properties": {
+    "app": {
+      "type": "object",
+      "required": ["baseUrl"],
+      "description": "Generic frontend configuration.",
+      "properties": {
+        "baseUrl": {
+          "type": "string",
+          "visibility": "frontend",
+          "description": "The public absolute root URL that the frontend."
+        },
+        "title": {
+          "type": "string",
+          "visibility": "frontend",
+          "description": "The title of the app."
+        },
+        "googleAnalyticsTrackingId": {
+          "type": "string",
+          "visibility": "frontend",
+          "description": "Tracking ID for Google Analytics",
+          "examples": ["UA-000000-0"]
+        },
+        "listen": {
+          "type": "object",
+          "description": "Listening configuration for local development",
+          "properties": {
+            "host": {
+              "type": "string",
+              "visibility": "frontend",
+              "description": "The host that the frontend should be bound to. Only used for local development."
+            },
+            "port": {
+              "type": "number",
+              "visibility": "frontend",
+              "description": "The port that the frontend should be bound to. Only used for local development."
+            }
+          }
+        },
+        "support": {
+          "description": "Information about support of this Backstage instance and how to contact the integrator team.",
+          "type": "object",
+          "required": ["items", "url"],
+          "properties": {
+            "url": {
+              "description": "The primary support url.",
+              "visibility": "frontend",
+              "type": "string"
+            },
+            "items": {
+              "description": "A list of categorized support item groupings.",
+              "type": "array",
+              "items": {
+                "type": "object",
+                "required": ["links", "title"],
+                "properties": {
+                  "title": {
+                    "description": "The title of the support item grouping.",
+                    "visibility": "frontend",
+                    "type": "string"
+                  },
+                  "icon": {
+                    "description": "An optional icon for the support item grouping.",
+                    "visibility": "frontend",
+                    "type": "string"
+                  },
+                  "links": {
+                    "description": "A list of support links for the Backstage instance.",
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "required": ["url"],
+                      "properties": {
+                        "url": {
+                          "visibility": "frontend",
+                          "type": "string"
+                        },
+                        "title": {
+                          "visibility": "frontend",
+                          "type": "string"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "lighthouse": {
+      "type": "object",
+      "properties": {
+        "baseUrl": {
+          "type": "string",
+          "visibility": "frontend"
+        }
+      }
+    },
+    "auth": {
+      "type": "object",
+      "description": "Configuration that provides information on available authentication providers configured for app",
+      "properties": {
+        "providers": {
+          "type": "object",
+          "description": "The available auth-provider options and attributes",
+          "additionalProperties": {
+            "type": "object",
+            "visibility": "frontend"
+          },
+          "properties": {
+            "google": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "github": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "gitlab": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "saml": {
+              "type": "object",
+              "required": ["entryPoint", "issuer"],
+              "properties": {
+                "entryPoint": {
+                  "type": "string"
+                },
+                "logoutUrl": {
+                  "type": "string"
+                },
+                "issuer": {
+                  "type": "string"
+                },
+                "cert": {
+                  "type": "string"
+                },
+                "privateKey": {
+                  "type": "string"
+                },
+                "decryptionPvk": {
+                  "type": "string"
+                },
+                "signatureAlgorithm": {
+                  "enum": ["sha256", "sha512"],
+                  "type": "string"
+                },
+                "digestAlgorithm": {
+                  "type": "string"
+                }
+              }
+            },
+            "okta": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "oauth2": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "required": [
+                  "authorizationUrl",
+                  "clientId",
+                  "clientSecret",
+                  "tokenUrl"
+                ],
+                "properties": {
+                  "clientId": {
+                    "type": "string"
+                  },
+                  "clientSecret": {
+                    "type": "string"
+                  },
+                  "authorizationUrl": {
+                    "type": "string"
+                  },
+                  "tokenUrl": {
+                    "type": "string"
+                  },
+                  "scope": {
+                    "type": "string"
+                  }
+                }
+              }
+            },
+            "oidc": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "auth0": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "microsoft": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "onelogin": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              }
+            },
+            "awsalb": {
+              "type": "object",
+              "required": ["region"],
+              "properties": {
+                "issuer": {
+                  "type": "string"
+                },
+                "region": {
+                  "type": "string"
+                }
+              }
+            }
+          }
+        },
+        "environment": {
+          "description": "The 'environment' attribute added as an optional parameter to have configurable environment value for `auth.providers`.\ndefault value: 'development'\noptional values: 'development' | 'production'",
+          "visibility": "frontend",
+          "type": "string"
+        },
+        "session": {
+          "type": "object",
+          "properties": {
+            "secret": {
+              "description": "The secret attribute of session object.",
+              "visibility": "secret",
+              "type": "string"
+            }
+          }
+        }
+      }
+    },
+    "backend": {
+      "type": "object",
+      "required": ["baseUrl", "database", "listen"],
+      "description": "Generic backend configuration.",
+      "properties": {
+        "baseUrl": {
+          "type": "string",
+          "description": "The public absolute root URL that the backend is reachable at.",
+          "visibility": "frontend"
+        },
+        "listen": {
+          "description": "Address that the backend should listen to.",
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "address": {
+                  "description": "Address of the interface that the backend should bind to.",
+                  "type": "string"
+                },
+                "port": {
+                  "description": "Port that the backend should listen to.",
+                  "type": ["string", "number"]
+                }
+              }
+            },
+            {
+              "type": "string"
+            }
+          ]
+        },
+        "https": {
+          "description": "HTTPS configuration for the backend. If omitted the backend will serve HTTP.\n\nSetting this to `true` will cause self-signed certificates to be generated, which\ncan be useful for local development or other non-production scenarios.",
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "certificate": {
+                  "description": "Certificate configuration",
+                  "type": "object",
+                  "required": ["cert", "key"],
+                  "properties": {
+                    "cert": {
+                      "description": "PEM encoded certificate. Use $file to load in a file",
+                      "type": "string"
+                    },
+                    "key": {
+                      "description": "PEM encoded certificate key. Use $file to load in a file.",
+                      "visibility": "secret",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            },
+            {
+              "enum": [true],
+              "type": "boolean"
+            }
+          ]
+        },
+        "database": {
+          "description": "Database connection configuration, select database type using the `client` field",
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "client": {
+                  "type": "string",
+                  "enum": ["sqlite3"]
+                },
+                "connection": {
+                  "type": "string"
+                }
+              },
+              "required": ["client", "connection"]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "client": {
+                  "type": "string",
+                  "enum": ["pg"]
+                },
+                "connection": {
+                  "description": "PostgreSQL connection string or knex configuration object.",
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {},
+                      "additionalProperties": true
+                    },
+                    {
+                      "type": "string"
+                    }
+                  ]
+                }
+              },
+              "required": ["client", "connection"]
+            }
+          ]
+        },
+        "cors": {
+          "type": "object",
+          "properties": {
+            "origin": {
+              "anyOf": [
+                {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "methods": {
+              "anyOf": [
+                {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "allowedHeaders": {
+              "anyOf": [
+                {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "exposedHeaders": {
+              "anyOf": [
+                {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "credentials": {
+              "type": "boolean"
+            },
+            "maxAge": {
+              "type": "number"
+            },
+            "preflightContinue": {
+              "type": "boolean"
+            },
+            "optionsSuccessStatus": {
+              "type": "number"
+            }
+          }
+        },
+        "reading": {
+          "description": "Configuration related to URL reading, used for example for reading catalog info\nfiles, scaffolder templates, and techdocs content.",
+          "type": "object",
+          "properties": {
+            "allow": {
+              "description": "A list of targets to allow outgoing requests to. Users will be able to make\nrequests on behalf of the backend to the targets that are allowed by this list.",
+              "type": "array",
+              "items": {
+                "type": "object",
+                "required": ["host"],
+                "properties": {
+                  "host": {
+                    "description": "A host to allow outgoing requests to, being either a full host or\na subdomain wildcard pattern with a leading `*`. For example `example.com`\nand `*.example.com` are valid values, `prod.*.example.com` is not.\nThe host may also contain a port, for example `example.com:8080`.",
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "csp": {
+          "description": "Content Security Policy options.\n\nThe keys are the plain policy ID, e.g. \"upgrade-insecure-requests\". The\nvalues are on the format that the helmet library expects them, as an\narray of strings. There is also the special value false, which means to\nremove the default value that Backstage puts in place for that policy.",
+          "type": "object",
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "enum": [false],
+                "type": "boolean"
+              }
+            ]
+          }
+        }
+      }
+    },
+    "organization": {
+      "description": "Configuration that provides information about the organization that the app is for.",
+      "type": "object",
+      "properties": {
+        "name": {
+          "description": "The name of the organization that the app belongs to.",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    },
+    "homepage": {
+      "type": "object",
+      "properties": {
+        "clocks": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["label", "timezone"],
+            "properties": {
+              "label": {
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "timezone": {
+                "visibility": "frontend",
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    },
+    "integrations": {
+      "description": "Configuration for integrations towards various external repository provider systems",
+      "type": "object",
+      "properties": {
+        "azure": {
+          "description": "Integration configuration for Azure",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["host"],
+            "properties": {
+              "host": {
+                "description": "The hostname of the given Azure instance",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "token": {
+                "description": "Token used to authenticate requests.",
+                "visibility": "secret",
+                "type": "string"
+              }
+            }
+          }
+        },
+        "bitbucket": {
+          "description": "Integration configuration for Bitbucket",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["host"],
+            "properties": {
+              "host": {
+                "description": "The hostname of the given Bitbucket instance",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "token": {
+                "description": "Token used to authenticate requests.",
+                "visibility": "secret",
+                "type": "string"
+              },
+              "apiBaseUrl": {
+                "description": "The base url for the Bitbucket API, for example https://api.bitbucket.org/2.0",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "username": {
+                "description": "The username to use for authenticated requests.",
+                "visibility": "secret",
+                "type": "string"
+              },
+              "appPassword": {
+                "description": "Bitbucket app password used to authenticate requests.",
+                "visibility": "secret",
+                "type": "string"
+              }
+            }
+          }
+        },
+        "github": {
+          "description": "Integration configuration for GitHub",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["host"],
+            "properties": {
+              "host": {
+                "description": "The hostname of the given GitHub instance",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "token": {
+                "description": "Token used to authenticate requests.",
+                "visibility": "secret",
+                "type": "string"
+              },
+              "apiBaseUrl": {
+                "description": "The base url for the GitHub API, for example https://api.github.com",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "rawBaseUrl": {
+                "description": "The base url for GitHub raw resources, for example https://raw.githubusercontent.com",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "apps": {
+                "description": "GitHub Apps configuration",
+                "visibility": "backend",
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "required": [
+                    "appId",
+                    "clientId",
+                    "clientSecret",
+                    "privateKey",
+                    "webhookSecret"
+                  ],
+                  "properties": {
+                    "appId": {
+                      "description": "The numeric GitHub App ID",
+                      "type": "number"
+                    },
+                    "privateKey": {
+                      "description": "The private key to use for auth against the app",
+                      "visibility": "secret",
+                      "type": "string"
+                    },
+                    "webhookSecret": {
+                      "description": "The secret used for webhooks",
+                      "visibility": "secret",
+                      "type": "string"
+                    },
+                    "clientId": {
+                      "description": "The client ID to use",
+                      "type": "string"
+                    },
+                    "clientSecret": {
+                      "description": "The client secret to use",
+                      "visibility": "secret",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "gitlab": {
+          "description": "Integration configuration for GitLab",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["host"],
+            "properties": {
+              "host": {
+                "description": "The host of the target that this matches on, e.g. \"gitlab.com\".",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "apiBaseUrl": {
+                "description": "The base URL of the API of this provider, e.g.\n\"https://gitlab.com/api/v4\", with no trailing slash.\n\nMay be omitted specifically for public GitLab; then it will be deduced.",
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "token": {
+                "description": "The authorization token to use for requests to this provider.\n\nIf no token is specified, anonymous access is used.",
+                "visibility": "secret",
+                "type": "string"
+              },
+              "baseUrl": {
+                "description": "The baseUrl of this provider, e.g. \"https://gitlab.com\", which is\npassed into the GitLab client.\n\nIf no baseUrl is provided, it will default to https://${host}.",
+                "visibility": "frontend",
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    },
+    "catalog": {
+      "description": "Configuration options for the catalog plugin.",
+      "type": "object",
+      "properties": {
+        "rules": {
+          "description": "Rules to apply to all catalog entities, from any location.\n\nAn undefined list of matchers means match all, an empty list of\nmatchers means match none.\n\nThis is commonly used to put in what amounts to a whitelist of kinds\nthat regular users of Backstage are permitted to register locations\nfor. This can be used to stop them from registering yaml files\ndescribing for example a Group entity called \"admin\" that they make\nthemselves members of, or similar.",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["allow"],
+            "properties": {
+              "allow": {
+                "description": "Allow entities of these particular kinds.\n\nE.g. [\"Component\", \"API\", \"Template\", \"Location\"]",
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            }
+          }
+        },
+        "readonly": {
+          "description": "Readonly defines whether the catalog allows writes after startup.\n\nSetting 'readonly=false' allows users to register their own components.\nThis is the default value.\n\nSetting 'readonly=true' configures catalog to only allow reads. This can\nbe used in combination with static locations to only serve operator\nprovided locations. Effectively this removes the ability to register new\ncomponents to a running backstage instance.",
+          "type": "boolean"
+        },
+        "locations": {
+          "description": "A set of static locations that the catalog shall always keep itself\nup-to-date with. This is commonly used for large, permanent integrations\nthat are defined by the Backstage operators at an organization, rather\nthan individual things that users register dynamically.\n\nThese have (optional) rules of their own. These override what the global\nrules above specify. This way, you can prevent everybody from register\ne.g. User and Group entities, except for one or a few static locations\nthat have those two kinds explicitly allowed.\n\nFor example:\n\n```yaml\nrules:\n  - allow: [Component, API, Template, Location]\nlocations:\n  - type: url\n    target: https://github.com/org/repo/blob/master/users.yaml\n    rules:\n      - allow: [User, Group]\n  - type: url\n    target: https://github.com/org/repo/blob/master/systems.yaml\n    rules:\n      - allow: [System]\n```",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["target", "type"],
+            "properties": {
+              "type": {
+                "description": "The type of location, e.g. \"url\".",
+                "type": "string"
+              },
+              "target": {
+                "description": "The target URL of the location, e.g.\n\"https://github.com/org/repo/blob/master/users.yaml\".",
+                "type": "string"
+              },
+              "rules": {
+                "description": "Optional extra rules that apply to this particular location.\n\nThese override the global rules above.",
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "required": ["allow"],
+                  "properties": {
+                    "allow": {
+                      "description": "Allow entities of these particular kinds.\n\nE.g. [\"Group\", \"User\"]",
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "processors": {
+          "description": "List of processor-specific options and attributes",
+          "type": "object",
+          "properties": {
+            "githubOrg": {
+              "description": "GithubOrgReaderProcessor configuration",
+              "type": "object",
+              "required": ["providers"],
+              "properties": {
+                "providers": {
+                  "description": "The configuration parameters for each single GitHub org provider.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": ["target"],
+                    "properties": {
+                      "target": {
+                        "description": "The prefix of the target that this matches on, e.g.\n\"https://github.com\", with no trailing slash.",
+                        "type": "string"
+                      },
+                      "apiBaseUrl": {
+                        "description": "The base URL of the API of this provider, e.g.\n\"https://api.github.com\", with no trailing slash.\n\nMay be omitted specifically for GitHub; then it will be deduced.",
+                        "type": "string"
+                      },
+                      "token": {
+                        "description": "The authorization token to use for requests to this provider.\n\nIf no token is specified, anonymous access is used.",
+                        "visibility": "secret",
+                        "type": "string"
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "ldapOrg": {
+              "description": "LdapOrgReaderProcessor configuration",
+              "type": "object",
+              "required": ["providers"],
+              "properties": {
+                "providers": {
+                  "description": "The configuration parameters for each single LDAP provider.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": ["groups", "target", "users"],
+                    "properties": {
+                      "target": {
+                        "description": "The prefix of the target that this matches on, e.g.\n\"ldaps://ds.example.net\", with no trailing slash.",
+                        "type": "string"
+                      },
+                      "bind": {
+                        "description": "The settings to use for the bind command. If none are specified,\nthe bind command is not issued.",
+                        "type": "object",
+                        "required": ["dn", "secret"],
+                        "properties": {
+                          "dn": {
+                            "description": "The DN of the user to auth as.\n\nE.g. \"uid=ldap-robot,ou=robots,ou=example,dc=example,dc=net\"",
+                            "type": "string"
+                          },
+                          "secret": {
+                            "description": "The secret of the user to auth as (its password).",
+                            "visibility": "secret",
+                            "type": "string"
+                          }
+                        }
+                      },
+                      "users": {
+                        "description": "The settings that govern the reading and interpretation of users.",
+                        "type": "object",
+                        "required": ["dn", "options"],
+                        "properties": {
+                          "dn": {
+                            "description": "The DN under which users are stored.\n\nE.g. \"ou=people,ou=example,dc=example,dc=net\"",
+                            "type": "string"
+                          },
+                          "options": {
+                            "description": "The search options to use. The default is scope \"one\" and\nattributes \"*\" and \"+\".\n\nIt is common to want to specify a filter, to narrow down the set\nof matching items.",
+                            "type": "object",
+                            "properties": {
+                              "scope": {
+                                "enum": ["base", "one", "sub"],
+                                "type": "string"
+                              },
+                              "filter": {
+                                "type": "string"
+                              },
+                              "attributes": {
+                                "anyOf": [
+                                  {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "string"
+                                    }
+                                  },
+                                  {
+                                    "type": "string"
+                                  }
+                                ]
+                              },
+                              "paged": {
+                                "anyOf": [
+                                  {
+                                    "type": "object",
+                                    "properties": {
+                                      "pageSize": {
+                                        "type": "number"
+                                      },
+                                      "pagePause": {
+                                        "type": "boolean"
+                                      }
+                                    }
+                                  },
+                                  {
+                                    "type": "boolean"
+                                  }
+                                ]
+                              }
+                            }
+                          },
+                          "set": {
+                            "description": "JSON paths (on a.b.c form) and hard coded values to set on those\npaths.\n\nThis can be useful for example if you want to hard code a\nnamespace or similar on the generated entities.",
+                            "type": "object"
+                          },
+                          "map": {
+                            "description": "Mappings from well known entity fields, to LDAP attribute names",
+                            "type": "object",
+                            "properties": {
+                              "rdn": {
+                                "description": "The name of the attribute that holds the relative\ndistinguished name of each entry. Defaults to \"uid\".",
+                                "type": "string"
+                              },
+                              "name": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe metadata.name field of the entity. Defaults to \"uid\".",
+                                "type": "string"
+                              },
+                              "description": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe metadata.description field of the entity.",
+                                "type": "string"
+                              },
+                              "displayName": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.displayName field of the entity. Defaults to\n\"cn\".",
+                                "type": "string"
+                              },
+                              "email": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.email field of the entity. Defaults to\n\"mail\".",
+                                "type": "string"
+                              },
+                              "picture": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.picture field of the entity.",
+                                "type": "string"
+                              },
+                              "memberOf": {
+                                "description": "The name of the attribute that shall be used for the values of\nthe spec.memberOf field of the entity. Defaults to \"memberOf\".",
+                                "type": "string"
+                              }
+                            }
+                          }
+                        }
+                      },
+                      "groups": {
+                        "description": "The settings that govern the reading and interpretation of groups.",
+                        "type": "object",
+                        "required": ["dn", "options"],
+                        "properties": {
+                          "dn": {
+                            "description": "The DN under which groups are stored.\n\nE.g. \"ou=people,ou=example,dc=example,dc=net\"",
+                            "type": "string"
+                          },
+                          "options": {
+                            "description": "The search options to use. The default is scope \"one\" and\nattributes \"*\" and \"+\".\n\nIt is common to want to specify a filter, to narrow down the set\nof matching items.",
+                            "type": "object",
+                            "properties": {
+                              "scope": {
+                                "enum": ["base", "one", "sub"],
+                                "type": "string"
+                              },
+                              "filter": {
+                                "type": "string"
+                              },
+                              "attributes": {
+                                "anyOf": [
+                                  {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "string"
+                                    }
+                                  },
+                                  {
+                                    "type": "string"
+                                  }
+                                ]
+                              },
+                              "paged": {
+                                "anyOf": [
+                                  {
+                                    "type": "object",
+                                    "properties": {
+                                      "pageSize": {
+                                        "type": "number"
+                                      },
+                                      "pagePause": {
+                                        "type": "boolean"
+                                      }
+                                    }
+                                  },
+                                  {
+                                    "type": "boolean"
+                                  }
+                                ]
+                              }
+                            }
+                          },
+                          "set": {
+                            "description": "JSON paths (on a.b.c form) and hard coded values to set on those\npaths.\n\nThis can be useful for example if you want to hard code a\nnamespace or similar on the generated entities.",
+                            "type": "object"
+                          },
+                          "map": {
+                            "description": "Mappings from well known entity fields, to LDAP attribute names",
+                            "type": "object",
+                            "properties": {
+                              "rdn": {
+                                "description": "The name of the attribute that holds the relative\ndistinguished name of each entry. Defaults to \"cn\".",
+                                "type": "string"
+                              },
+                              "name": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe metadata.name field of the entity. Defaults to \"cn\".",
+                                "type": "string"
+                              },
+                              "description": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe metadata.description field of the entity. Defaults to\n\"description\".",
+                                "type": "string"
+                              },
+                              "type": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.type field of the entity. Defaults to \"groupType\".",
+                                "type": "string"
+                              },
+                              "displayName": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.displayName field of the entity. Defaults to\n\"cn\".",
+                                "type": "string"
+                              },
+                              "email": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.email field of the entity.",
+                                "type": "string"
+                              },
+                              "picture": {
+                                "description": "The name of the attribute that shall be used for the value of\nthe spec.profile.picture field of the entity.",
+                                "type": "string"
+                              },
+                              "memberOf": {
+                                "description": "The name of the attribute that shall be used for the values of\nthe spec.parent field of the entity. Defaults to \"memberOf\".",
+                                "type": "string"
+                              },
+                              "members": {
+                                "description": "The name of the attribute that shall be used for the values of\nthe spec.children field of the entity. Defaults to \"member\".",
+                                "type": "string"
+                              }
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            },
+            "awsOrganization": {
+              "description": "AwsOrganizationCloudAccountProcessor configuration",
+              "type": "object",
+              "required": ["provider"],
+              "properties": {
+                "provider": {
+                  "type": "object",
+                  "properties": {
+                    "roleArn": {
+                      "description": "The role to be assumed by this processor",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            },
+            "microsoftGraphOrg": {
+              "description": "MicrosoftGraphOrgReaderProcessor configuration",
+              "type": "object",
+              "required": ["providers"],
+              "properties": {
+                "providers": {
+                  "description": "The configuration parameters for each single Microsoft Graph provider.",
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": [
+                      "clientId",
+                      "clientSecret",
+                      "target",
+                      "tenantId"
+                    ],
+                    "properties": {
+                      "target": {
+                        "description": "The prefix of the target that this matches on, e.g.\n\"https://graph.microsoft.com/v1.0\", with no trailing slash.",
+                        "type": "string"
+                      },
+                      "authority": {
+                        "description": "The auth authority used.\n\nDefault value \"https://login.microsoftonline.com\"",
+                        "type": "string"
+                      },
+                      "tenantId": {
+                        "description": "The tenant whose org data we are interested in.",
+                        "type": "string"
+                      },
+                      "clientId": {
+                        "description": "The OAuth client ID to use for authenticating requests.",
+                        "type": "string"
+                      },
+                      "clientSecret": {
+                        "description": "The OAuth client secret to use for authenticating requests.",
+                        "visibility": "secret",
+                        "type": "string"
+                      },
+                      "userFilter": {
+                        "description": "The filter to apply to extract users.\n\nE.g. \"accountEnabled eq true and userType eq 'member'\"",
+                        "type": "string"
+                      },
+                      "groupFilter": {
+                        "description": "The filter to apply to extract groups.\n\nE.g. \"securityEnabled eq false and mailEnabled eq true\"",
+                        "type": "string"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "costInsights": {
+      "type": "object",
+      "required": ["engineerCost", "products"],
+      "properties": {
+        "engineerCost": {
+          "visibility": "frontend",
+          "type": "number"
+        },
+        "products": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "required": ["name"],
+            "properties": {
+              "name": {
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "icon": {
+                "visibility": "frontend",
+                "enum": [
+                  "compute",
+                  "data",
+                  "database",
+                  "ml",
+                  "search",
+                  "storage"
+                ],
+                "type": "string"
+              }
+            }
+          }
+        },
+        "metrics": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "required": ["name"],
+            "properties": {
+              "name": {
+                "visibility": "frontend",
+                "type": "string"
+              },
+              "default": {
+                "visibility": "frontend",
+                "type": "boolean"
+              }
+            }
+          }
+        }
+      }
+    },
+    "fossa": {
+      "type": "object",
+      "required": ["organizationId"],
+      "properties": {
+        "organizationId": {
+          "description": "The organization id in fossa.",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    },
+    "kubernetes": {
+      "type": "object",
+      "required": ["clusterLocatorMethods", "serviceLocatorMethod"],
+      "properties": {
+        "serviceLocatorMethod": {
+          "type": "object",
+          "required": ["type"],
+          "visibility": "frontend",
+          "properties": {
+            "type": {
+              "type": "string",
+              "enum": ["multiTenant"],
+              "visibility": "frontend"
+            }
+          }
+        },
+        "clusterLocatorMethods": {
+          "type": "array",
+          "visibility": "frontend"
+        },
+        "customResources": {
+          "type": "array",
+          "visibility": "frontend"
+        }
+      }
+    },
+    "kafka": {
+      "type": "object",
+      "required": ["clientId", "clusters"],
+      "properties": {
+        "clientId": {
+          "description": "Client ID used to Backstage uses to identify when connecting to the Kafka cluster.",
+          "type": "string"
+        },
+        "clusters": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["brokers", "name"],
+            "properties": {
+              "name": {
+                "type": "string"
+              },
+              "brokers": {
+                "description": "List of brokers in the Kafka cluster to connect to.",
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "ssl": {
+                "description": "Optional SSL connection parameters to connect to the cluster. Passed directly to Node tls.connect.\nSee https://nodejs.org/dist/latest-v8.x/docs/api/tls.html#tls_tls_createsecurecontext_options",
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "ca": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        }
+                      },
+                      "key": {
+                        "visibility": "secret",
+                        "type": "string"
+                      },
+                      "cert": {
+                        "type": "string"
+                      }
+                    },
+                    "required": ["ca", "cert", "key"]
+                  },
+                  {
+                    "type": "boolean"
+                  }
+                ]
+              },
+              "sasl": {
+                "description": "Optional SASL connection parameters.",
+                "type": "object",
+                "required": ["mechanism", "password", "username"],
+                "properties": {
+                  "mechanism": {
+                    "enum": ["plain", "scram-sha-256", "scram-sha-512"],
+                    "type": "string"
+                  },
+                  "username": {
+                    "type": "string"
+                  },
+                  "password": {
+                    "visibility": "secret",
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "rollbar": {
+      "description": "Configuration options for the rollbar-backend plugin",
+      "type": "object",
+      "required": ["accountToken"],
+      "properties": {
+        "accountToken": {
+          "description": "The autentication token for accessing the Rollbar API",
+          "type": "string"
+        },
+        "organization": {
+          "description": "The Rollbar organization name. This can be omitted by using the `rollbar.com/project-slug` annotation.",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    },
+    "proxy": {
+      "description": "A list of forwarding-proxies. Each key is a route to match,\nbelow the prefix that the proxy plugin is mounted on. It must\nstart with a '/'.",
+      "type": "object",
+      "additionalProperties": {
+        "anyOf": [
+          {
+            "type": "object",
+            "properties": {
+              "target": {
+                "description": "Target of the proxy. Url string to be parsed with the url module.",
+                "type": "string"
+              },
+              "headers": {
+                "description": "Object with extra headers to be added to target requests.",
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              },
+              "changeOrigin": {
+                "description": "Changes the origin of the host header to the target URL. Default: true.",
+                "type": "boolean"
+              },
+              "pathRewrite": {
+                "description": "Rewrite target's url path. Object-keys will be used as RegExp to match paths.\nIf pathRewrite is not specified, it is set to a single rewrite that removes the entire prefix and route.",
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              },
+              "allowedMethods": {
+                "description": "Limit the forwarded HTTP methods, for example allowedMethods: ['GET'] to enforce read-only access.",
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "allowedHeaders": {
+                "description": "Limit the forwarded HTTP methods. By default, only the headers that are considered safe for CORS\nand headers that are set by the proxy will be forwarded.",
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "required": ["target"]
+          },
+          {
+            "type": "string"
+          }
+        ]
+      }
+    },
+    "scaffolder": {
+      "description": "Configuration options for the scaffolder plugin",
+      "type": "object",
+      "properties": {
+        "github": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "properties": {
+            "visiblity": {
+              "description": "The visibility to set on created repositories.",
+              "enum": ["internal", "private", "public"],
+              "type": "string"
+            }
+          }
+        },
+        "gitlab": {
+          "type": "object",
+          "required": ["api"],
+          "properties": {
+            "api": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            },
+            "visiblity": {
+              "description": "The visibility to set on created repositories.",
+              "enum": ["internal", "private", "public"],
+              "type": "string"
+            }
+          }
+        },
+        "azure": {
+          "type": "object",
+          "required": ["api", "baseUrl"],
+          "properties": {
+            "baseUrl": {
+              "type": "string"
+            },
+            "api": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            }
+          }
+        },
+        "bitbucket": {
+          "type": "object",
+          "required": ["api"],
+          "properties": {
+            "api": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            },
+            "visiblity": {
+              "description": "The visibility to set on created repositories.",
+              "enum": ["private", "public"],
+              "type": "string"
+            }
+          }
+        }
+      }
+    },
+    "sonarQube": {
+      "description": "Optional configurations for the SonarQube plugin",
+      "type": "object",
+      "required": ["baseUrl"],
+      "properties": {
+        "baseUrl": {
+          "description": "The base url of the sonarqube installation. Defaults to https://sonarcloud.io.",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    },
+    "sentry": {
+      "description": "Configuration options for the sentry plugin",
+      "type": "object",
+      "required": ["organization"],
+      "properties": {
+        "organization": {
+          "description": "The 'organization' attribute",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    },
+    "techdocs": {
+      "description": "Configuration options for the techdocs-backend plugin",
+      "type": "object",
+      "required": ["builder"],
+      "properties": {
+        "builder": {
+          "description": "Documentation building process depends on the builder attr",
+          "visibility": "frontend",
+          "enum": ["external", "local"],
+          "type": "string"
+        },
+        "generators": {
+          "description": "Techdocs generator information",
+          "type": "object",
+          "required": ["techdocs"],
+          "properties": {
+            "techdocs": {
+              "enum": ["docker", "local"],
+              "type": "string"
+            }
+          }
+        },
+        "publisher": {
+          "description": "Techdocs publisher information",
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["local"]
+                }
+              },
+              "required": ["type"]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["awsS3"]
+                },
+                "awsS3": {
+                  "description": "Required when 'type' is set to awsS3",
+                  "type": "object",
+                  "required": ["bucketName"],
+                  "properties": {
+                    "credentials": {
+                      "description": "(Optional) Credentials used to access a storage bucket.\nIf not set, environment variables or aws config file will be used to authenticate.",
+                      "visibility": "secret",
+                      "type": "object",
+                      "required": ["accessKeyId", "secretAccessKey"],
+                      "properties": {
+                        "accessKeyId": {
+                          "description": "User access key id",
+                          "visibility": "secret",
+                          "type": "string"
+                        },
+                        "secretAccessKey": {
+                          "description": "User secret access key",
+                          "visibility": "secret",
+                          "type": "string"
+                        },
+                        "roleArn": {
+                          "description": "ARN of role to be assumed",
+                          "visibility": "backend",
+                          "type": "string"
+                        }
+                      }
+                    },
+                    "bucketName": {
+                      "description": "(Required) Cloud Storage Bucket Name",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "region": {
+                      "description": "(Optional) AWS Region.\nIf not set, AWS_REGION environment variable or aws config file will be used.",
+                      "visibility": "secret",
+                      "type": "string"
+                    },
+                    "endpoint": {
+                      "description": "(Optional) AWS Endpoint.\nThe endpoint URI to send requests to. The default endpoint is built from the configured region.",
+                      "visibility": "secret",
+                      "type": "string"
+                    }
+                  }
+                }
+              },
+              "required": ["type"]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["openStackSwift"]
+                },
+                "openStackSwift": {
+                  "description": "Required when 'type' is set to openStackSwift",
+                  "type": "object",
+                  "required": [
+                    "authUrl",
+                    "containerName",
+                    "credentials",
+                    "domainId",
+                    "domainName",
+                    "keystoneAuthVersion",
+                    "region"
+                  ],
+                  "properties": {
+                    "credentials": {
+                      "description": "(Required) Credentials used to access a storage bucket.",
+                      "visibility": "secret",
+                      "type": "object",
+                      "required": ["password", "username"],
+                      "properties": {
+                        "username": {
+                          "description": "(Required) Root user name",
+                          "visibility": "secret",
+                          "type": "string"
+                        },
+                        "password": {
+                          "description": "(Required) Root user password",
+                          "visibility": "secret",
+                          "type": "string"
+                        }
+                      }
+                    },
+                    "containerName": {
+                      "description": "(Required) Cloud Storage Container Name",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "authUrl": {
+                      "description": "(Required) Auth url sometimes OpenStack uses different port check your OpenStack apis.",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "keystoneAuthVersion": {
+                      "description": "(Optional) Auth version\nIf not set, 'v2.0' will be used.",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "domainId": {
+                      "description": "(Required) Domain Id",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "domainName": {
+                      "description": "(Required) Domain Name",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "region": {
+                      "description": "(Required) Region",
+                      "visibility": "backend",
+                      "type": "string"
+                    }
+                  }
+                }
+              },
+              "required": ["type"]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["azureBlobStorage"]
+                },
+                "azureBlobStorage": {
+                  "description": "Required when 'type' is set to azureBlobStorage",
+                  "type": "object",
+                  "required": ["containerName", "credentials"],
+                  "properties": {
+                    "credentials": {
+                      "description": "(Required) Credentials used to access a storage container.",
+                      "visibility": "secret",
+                      "type": "object",
+                      "required": ["accountName"],
+                      "properties": {
+                        "accountName": {
+                          "description": "Account access name",
+                          "visibility": "secret",
+                          "type": "string"
+                        },
+                        "accountKey": {
+                          "description": "(Optional) Account secret primary key\nIf not set, environment variables will be used to authenticate.",
+                          "visibility": "secret",
+                          "type": "string"
+                        }
+                      }
+                    },
+                    "containerName": {
+                      "description": "(Required) Cloud Storage Container Name",
+                      "visibility": "backend",
+                      "type": "string"
+                    }
+                  }
+                }
+              },
+              "required": ["type"]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string",
+                  "enum": ["googleGcs"]
+                },
+                "googleGcs": {
+                  "description": "Required when 'type' is set to googleGcs",
+                  "type": "object",
+                  "required": ["bucketName"],
+                  "properties": {
+                    "bucketName": {
+                      "description": "(Required) Cloud Storage Bucket Name",
+                      "visibility": "backend",
+                      "type": "string"
+                    },
+                    "credentials": {
+                      "description": "(Optional) API key used to write to a storage bucket.\nIf not set, environment variables will be used to authenticate.",
+                      "visibility": "secret",
+                      "type": "string"
+                    }
+                  }
+                }
+              },
+              "required": ["type"]
+            }
+          ]
+        },
+        "requestUrl": {
+          "visibility": "frontend",
+          "type": "string"
+        },
+        "storageUrl": {
+          "type": "string"
+        }
+      }
+    },
+    "travisci": {
+      "description": "Configuration options for the travisci plugin",
+      "type": "object",
+      "properties": {
+        "baseUrl": {
+          "description": "The 'baseUrl' attribute. It should point to the address of the travis portal.\nIf not provided, frontend plugin will use 'https://travis-ci.com/'",
+          "visibility": "frontend",
+          "type": "string"
+        }
+      }
+    }
+  },
+  "description": "This is the schema describing the structure of the app-config.yaml configuration file."
+}
diff --git a/plugins/config-schema/dev/index.tsx b/plugins/config-schema/dev/index.tsx
new file mode 100644
index 0000000000..412f0d283e
--- /dev/null
+++ b/plugins/config-schema/dev/index.tsx
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { createDevApp } from '@backstage/dev-utils';
+import { Schema } from 'jsonschema';
+import React from 'react';
+import Observable from 'zen-observable';
+import { configSchemaApiRef } from '../src/api';
+import { ConfigSchemaResult } from '../src/api/types';
+import { ConfigSchemaPage, configSchemaPlugin } from '../src/plugin';
+import exampleSchema from './example-schema.json';
+
+createDevApp()
+  .registerPlugin(configSchemaPlugin)
+  .registerApi({
+    api: configSchemaApiRef,
+    deps: {},
+    factory: () => ({
+      schema$: () =>
+        new Observable<ConfigSchemaResult>(sub =>
+          sub.next({ schema: (exampleSchema as unknown) as Schema }),
+        ),
+    }),
+  })
+  .addPage({
+    element: <ConfigSchemaPage />,
+    title: 'Root Page',
+  })
+  .render();
diff --git a/plugins/config-schema/package.json b/plugins/config-schema/package.json
new file mode 100644
index 0000000000..2db05d549a
--- /dev/null
+++ b/plugins/config-schema/package.json
@@ -0,0 +1,51 @@
+{
+  "name": "@backstage/plugin-config-schema",
+  "version": "0.1.1",
+  "main": "src/index.ts",
+  "types": "src/index.ts",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public",
+    "main": "dist/index.esm.js",
+    "types": "dist/index.d.ts"
+  },
+  "scripts": {
+    "build": "backstage-cli plugin:build",
+    "start": "backstage-cli plugin:serve",
+    "lint": "backstage-cli lint",
+    "test": "backstage-cli test",
+    "diff": "backstage-cli plugin:diff",
+    "prepack": "backstage-cli prepack",
+    "postpack": "backstage-cli postpack",
+    "clean": "backstage-cli clean"
+  },
+  "dependencies": {
+    "@backstage/config": "^0.1.4",
+    "@backstage/core": "^0.7.5",
+    "@backstage/errors": "^0.1.1",
+    "@backstage/theme": "^0.2.5",
+    "@material-ui/core": "^4.11.0",
+    "@material-ui/icons": "^4.9.1",
+    "@material-ui/lab": "4.0.0-alpha.45",
+    "jsonschema": "^1.2.6",
+    "zen-observable": "^0.8.15",
+    "react": "^16.13.1",
+    "react-dom": "^16.13.1",
+    "react-use": "^15.3.3"
+  },
+  "devDependencies": {
+    "@backstage/cli": "^0.6.8",
+    "@backstage/dev-utils": "^0.1.13",
+    "@backstage/test-utils": "^0.1.10",
+    "@testing-library/jest-dom": "^5.10.1",
+    "@testing-library/react": "^11.2.5",
+    "@testing-library/user-event": "^12.0.7",
+    "@types/jest": "^26.0.7",
+    "@types/node": "^14.14.32",
+    "msw": "^0.21.2",
+    "cross-fetch": "^3.0.6"
+  },
+  "files": [
+    "dist"
+  ]
+}
diff --git a/plugins/config-schema/src/api/StaticSchemaLoader.ts b/plugins/config-schema/src/api/StaticSchemaLoader.ts
new file mode 100644
index 0000000000..ee61370468
--- /dev/null
+++ b/plugins/config-schema/src/api/StaticSchemaLoader.ts
@@ -0,0 +1,57 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Observable } from '@backstage/core';
+import ObservableImpl from 'zen-observable';
+import { ResponseError } from '@backstage/errors';
+import { Schema } from 'jsonschema';
+import { ConfigSchemaApi, ConfigSchemaResult } from './types';
+
+const DEFAULT_URL = 'config-schema.json';
+
+/**
+ * A ConfigSchemaApi implementation that loads the configuration from a URL.
+ */
+export class StaticSchemaLoader implements ConfigSchemaApi {
+  private readonly url: string;
+
+  constructor({ url = DEFAULT_URL }: { url?: string } = {}) {
+    this.url = url;
+  }
+
+  schema$(): Observable<ConfigSchemaResult> {
+    return new ObservableImpl(subscriber => {
+      this.fetchSchema().then(
+        schema => subscriber.next({ schema }),
+        error => subscriber.error(error),
+      );
+    });
+  }
+
+  private async fetchSchema(): Promise<undefined | Schema> {
+    const res = await fetch(this.url);
+
+    if (!res.ok) {
+      if (res.status === 404) {
+        return undefined;
+      }
+
+      throw ResponseError.fromResponse(res);
+    }
+
+    return await res.json();
+  }
+}
diff --git a/plugins/config-schema/src/api/index.ts b/plugins/config-schema/src/api/index.ts
new file mode 100644
index 0000000000..eb705b3fa3
--- /dev/null
+++ b/plugins/config-schema/src/api/index.ts
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export { configSchemaApiRef } from './types';
+export type { ConfigSchemaApi } from './types';
+export { StaticSchemaLoader } from './StaticSchemaLoader';
diff --git a/plugins/config-schema/src/api/types.ts b/plugins/config-schema/src/api/types.ts
new file mode 100644
index 0000000000..025ef76f0c
--- /dev/null
+++ b/plugins/config-schema/src/api/types.ts
@@ -0,0 +1,30 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { createApiRef, Observable } from '@backstage/core';
+import { Schema } from 'jsonschema';
+
+export interface ConfigSchemaResult {
+  schema?: Schema;
+}
+
+export interface ConfigSchemaApi {
+  schema$(): Observable<ConfigSchemaResult>;
+}
+
+export const configSchemaApiRef = createApiRef<ConfigSchemaApi>({
+  id: 'plugin.config-schema',
+});
diff --git a/plugins/config-schema/src/components/ConfigSchemaPage/ConfigSchemaPage.tsx b/plugins/config-schema/src/components/ConfigSchemaPage/ConfigSchemaPage.tsx
new file mode 100644
index 0000000000..a2082ef972
--- /dev/null
+++ b/plugins/config-schema/src/components/ConfigSchemaPage/ConfigSchemaPage.tsx
@@ -0,0 +1,48 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import React, { useMemo } from 'react';
+import { Header, Page, Content, useApi, Progress } from '@backstage/core';
+import { useObservable } from 'react-use';
+import { configSchemaApiRef } from '../../api';
+import { SchemaViewer } from '../SchemaViewer';
+import { Typography } from '@material-ui/core';
+
+export const ConfigSchemaPage = () => {
+  const configSchemaApi = useApi(configSchemaApiRef);
+  const schemaResult = useObservable(
+    useMemo(() => configSchemaApi.schema$(), [configSchemaApi]),
+  );
+
+  let content;
+  if (schemaResult) {
+    if (schemaResult.schema) {
+      content = <SchemaViewer schema={schemaResult.schema} />;
+    } else {
+      content = (
+        <Typography variant="h4">No configuration schema available</Typography>
+      );
+    }
+  } else {
+    content = <Progress />;
+  }
+
+  return (
+    <Page themeId="tool">
+      <Header title="Configuration Reference" />
+      <Content stretch>{content}</Content>
+    </Page>
+  );
+};
diff --git a/plugins/config-schema/src/components/ConfigSchemaPage/index.ts b/plugins/config-schema/src/components/ConfigSchemaPage/index.ts
new file mode 100644
index 0000000000..e373ae71c6
--- /dev/null
+++ b/plugins/config-schema/src/components/ConfigSchemaPage/index.ts
@@ -0,0 +1,16 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export { ConfigSchemaPage } from './ConfigSchemaPage';
diff --git a/plugins/config-schema/src/components/SchemaBrowser/SchemaBrowser.tsx b/plugins/config-schema/src/components/SchemaBrowser/SchemaBrowser.tsx
new file mode 100644
index 0000000000..52005802b8
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaBrowser/SchemaBrowser.tsx
@@ -0,0 +1,196 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { createStyles, fade, withStyles } from '@material-ui/core';
+import ChevronRightIcon from '@material-ui/icons/ChevronRight';
+import ExpandMoreIcon from '@material-ui/icons/ExpandMore';
+import { TreeItem, TreeItemProps, TreeView } from '@material-ui/lab';
+import { Schema } from 'jsonschema';
+import React, { ReactNode, useMemo, useRef } from 'react';
+import { useScrollTargets } from '../ScrollTargetsContext';
+
+const StyledTreeItem = withStyles(theme =>
+  createStyles({
+    label: {
+      userSelect: 'none',
+    },
+    group: {
+      marginLeft: 7,
+      paddingLeft: theme.spacing(1),
+      borderLeft: `1px solid ${fade(theme.palette.text.primary, 0.15)}`,
+    },
+  }),
+)((props: TreeItemProps) => <TreeItem {...props} />);
+
+export function createSchemaBrowserItems(
+  expanded: string[],
+  schema: Schema,
+  path: string = '',
+  depth: number = 0,
+): ReactNode {
+  let matchArr;
+  if (schema.anyOf) {
+    matchArr = schema.anyOf;
+  } else if (schema.oneOf) {
+    matchArr = schema.oneOf;
+  } else if (schema.allOf) {
+    matchArr = schema.allOf;
+  }
+  if (matchArr) {
+    return matchArr.map((childSchema, index) => {
+      const childPath = `${path}/${index + 1}`;
+      if (depth > 0) expanded.push(childPath);
+      return (
+        <StyledTreeItem
+          key={childPath}
+          nodeId={childPath}
+          label={`<Option ${index + 1}>`}
+        >
+          {createSchemaBrowserItems(
+            expanded,
+            childSchema,
+            childPath,
+            depth + 1,
+          )}
+        </StyledTreeItem>
+      );
+    });
+  }
+
+  switch (schema.type) {
+    case 'array': {
+      const childPath = `${path}[]`;
+      if (depth > 0) expanded.push(childPath);
+      return (
+        <StyledTreeItem nodeId={childPath} label="[]">
+          {schema.items &&
+            createSchemaBrowserItems(
+              expanded,
+              schema.items as Schema,
+              childPath,
+              depth + 1,
+            )}
+        </StyledTreeItem>
+      );
+    }
+    case 'object':
+    case undefined: {
+      const children = [];
+
+      if (schema.properties) {
+        children.push(
+          ...Object.entries(schema.properties).map(([name, childSchema]) => {
+            const childPath = path ? `${path}.${name}` : name;
+            if (depth > 0) expanded.push(childPath);
+            return (
+              <StyledTreeItem key={childPath} nodeId={childPath} label={name}>
+                {createSchemaBrowserItems(
+                  expanded,
+                  childSchema,
+                  childPath,
+                  depth + 1,
+                )}
+              </StyledTreeItem>
+            );
+          }),
+        );
+      }
+
+      if (schema.patternProperties) {
+        children.push(
+          ...Object.entries(schema.patternProperties).map(
+            ([name, childSchema]) => {
+              const childPath = `${path}.<${name}>`;
+              if (depth > 0) expanded.push(childPath);
+              return (
+                <StyledTreeItem
+                  key={childPath}
+                  nodeId={childPath}
+                  label={`<${name}>`}
+                >
+                  {createSchemaBrowserItems(
+                    expanded,
+                    childSchema,
+                    childPath,
+                    depth + 1,
+                  )}
+                </StyledTreeItem>
+              );
+            },
+          ),
+        );
+      }
+
+      if (schema.additionalProperties && schema.additionalProperties !== true) {
+        const childPath = `${path}.*`;
+        if (depth > 0) expanded.push(childPath);
+        children.push(
+          <StyledTreeItem key={childPath} nodeId={childPath} label="*">
+            {createSchemaBrowserItems(
+              expanded,
+              schema.additionalProperties,
+              childPath,
+              depth + 1,
+            )}
+          </StyledTreeItem>,
+        );
+      }
+
+      return <>{children}</>;
+    }
+
+    default:
+      return null;
+  }
+}
+
+export function SchemaBrowser({ schema }: { schema: Schema }) {
+  const scroll = useScrollTargets();
+  const expandedRef = useRef<string[]>([]);
+  const data = useMemo(() => {
+    const expanded = new Array<string>();
+
+    const items = createSchemaBrowserItems(expanded, schema);
+
+    return { items, expanded };
+  }, [schema]);
+
+  if (!scroll) {
+    throw new Error('No scroll handler available');
+  }
+
+  const handleToggle = (_event: unknown, expanded: string[]) => {
+    expandedRef.current = expanded;
+  };
+
+  const handleSelect = (_event: unknown, nodeId: string) => {
+    if (expandedRef.current.includes(nodeId)) {
+      scroll.scrollTo(nodeId);
+    }
+  };
+
+  return (
+    <TreeView
+      defaultExpanded={data.expanded}
+      defaultCollapseIcon={<ExpandMoreIcon />}
+      defaultExpandIcon={<ChevronRightIcon />}
+      onNodeToggle={handleToggle}
+      onNodeSelect={handleSelect}
+    >
+      {data.items}
+    </TreeView>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaBrowser/index.ts b/plugins/config-schema/src/components/SchemaBrowser/index.ts
new file mode 100644
index 0000000000..2b3e8fe79a
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaBrowser/index.ts
@@ -0,0 +1,17 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export { SchemaBrowser } from './SchemaBrowser';
diff --git a/plugins/config-schema/src/components/SchemaView/ArrayView.tsx b/plugins/config-schema/src/components/SchemaView/ArrayView.tsx
new file mode 100644
index 0000000000..15f4dd8800
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/ArrayView.tsx
@@ -0,0 +1,59 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Box, Typography } from '@material-ui/core';
+import { Schema } from 'jsonschema';
+import React from 'react';
+import { ChildView } from './ChildView';
+import { MetadataView } from './MetadataView';
+import { SchemaViewProps } from './types';
+
+export function ArrayView({ path, depth, schema }: SchemaViewProps) {
+  const itemDepth = depth + 1;
+  const itemPath = path ? `${path}[]` : '[]';
+  const itemSchema = schema.items;
+
+  return (
+    <>
+      <Box marginBottom={4}>
+        {schema.description && (
+          <Box marginBottom={4}>
+            <Typography variant="body1">{schema.description}</Typography>
+          </Box>
+        )}
+        <MetadataView schema={schema} />
+      </Box>
+      <Typography variant="overline">Items</Typography>
+      <ChildView
+        lastChild
+        path={itemPath}
+        depth={itemDepth}
+        schema={itemSchema as Schema | undefined}
+      />
+      {schema.additionalItems && schema.additionalItems !== true && (
+        <>
+          <Typography variant="overline">Additional Items</Typography>
+          <ChildView
+            path={itemPath}
+            depth={itemDepth}
+            schema={schema.additionalItems}
+            lastChild
+          />
+        </>
+      )}
+    </>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/ChildView.tsx b/plugins/config-schema/src/components/SchemaView/ChildView.tsx
new file mode 100644
index 0000000000..ff970d5251
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/ChildView.tsx
@@ -0,0 +1,123 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { JsonValue } from '@backstage/config';
+import { Box, Chip, Divider, makeStyles, Typography } from '@material-ui/core';
+import { Schema } from 'jsonschema';
+import React, { useEffect, useRef } from 'react';
+import { useScrollTargets } from '../ScrollTargetsContext/ScrollTargetsContext';
+import { SchemaView } from './SchemaView';
+
+export interface MetadataViewRowProps {
+  label: string;
+  text?: string;
+  data?: JsonValue;
+}
+
+function titleVariant(depth: number) {
+  if (depth <= 1) {
+    return 'h2';
+  } else if (depth === 2) {
+    return 'h3';
+  } else if (depth === 3) {
+    return 'h4';
+  } else if (depth === 4) {
+    return 'h5';
+  }
+  return 'h6';
+}
+
+const useChildViewStyles = makeStyles(theme => ({
+  title: {
+    marginBottom: 0,
+  },
+  chip: {
+    marginLeft: theme.spacing(1),
+    marginRight: 0,
+    marginBottom: 0,
+  },
+}));
+
+export function ChildView({
+  path,
+  depth,
+  schema,
+  required,
+  lastChild,
+}: {
+  path: string;
+  depth: number;
+  schema?: Schema;
+  required?: boolean;
+  lastChild?: boolean;
+}) {
+  const classes = useChildViewStyles();
+  const titleRef = useRef<HTMLElement>(null);
+  const scroll = useScrollTargets();
+
+  useEffect(() => {
+    return scroll?.setScrollListener(path, () => {
+      titleRef.current?.scrollIntoView({ behavior: 'smooth' });
+    });
+  }, [scroll, path]);
+
+  const chips = new Array<JSX.Element>();
+  const chipProps = { size: 'small' as const, classes: { root: classes.chip } };
+
+  if (required) {
+    chips.push(
+      <Chip label="required" color="default" key="required" {...chipProps} />,
+    );
+  }
+
+  const visibility = (schema as { visibility?: string })?.visibility;
+  if (visibility === 'frontend') {
+    chips.push(
+      <Chip label="frontend" color="primary" key="visibility" {...chipProps} />,
+    );
+  } else if (visibility === 'secret') {
+    chips.push(
+      <Chip label="secret" color="secondary" key="visibility" {...chipProps} />,
+    );
+  }
+
+  return (
+    <Box paddingBottom={lastChild ? 4 : 8} display="flex" flexDirection="row">
+      <Divider orientation="vertical" flexItem />
+      <Box paddingLeft={2} flex={1}>
+        <Box
+          display="flex"
+          flexDirection="row"
+          marginBottom={2}
+          alignItems="center"
+        >
+          <Typography
+            ref={titleRef}
+            variant={titleVariant(depth)}
+            classes={{ root: classes.title }}
+          >
+            {path}
+          </Typography>
+          {chips.length > 0 && <Box marginLeft={1} />}
+          {chips}
+        </Box>
+        {schema && (
+          <SchemaView path={path} depth={depth} schema={schema as Schema} />
+        )}
+      </Box>
+    </Box>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/MatchView.tsx b/plugins/config-schema/src/components/SchemaView/MatchView.tsx
new file mode 100644
index 0000000000..db6060b31a
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/MatchView.tsx
@@ -0,0 +1,46 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { Typography } from '@material-ui/core';
+import { Schema } from 'jsonschema';
+import React from 'react';
+import { ChildView } from './ChildView';
+
+export function MatchView({
+  path,
+  depth,
+  schema,
+  label,
+}: {
+  path: string;
+  depth: number;
+  schema: Schema[];
+  label: string;
+}) {
+  return (
+    <>
+      <Typography variant="overline">{label}</Typography>
+      {schema.map((optionSchema, index) => (
+        <ChildView
+          key={index}
+          path={`${path}/${index + 1}`}
+          depth={depth + 1}
+          schema={optionSchema}
+          lastChild={index === schema.length - 1}
+        />
+      ))}
+    </>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/MetadataView.tsx b/plugins/config-schema/src/components/SchemaView/MetadataView.tsx
new file mode 100644
index 0000000000..41d48149ad
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/MetadataView.tsx
@@ -0,0 +1,110 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { JsonValue } from '@backstage/config';
+import {
+  Paper,
+  Table,
+  TableBody,
+  TableCell,
+  TableRow,
+  Typography,
+} from '@material-ui/core';
+import { Schema } from 'jsonschema';
+import React from 'react';
+
+export interface MetadataViewRowProps {
+  label: string;
+  text?: string;
+  data?: JsonValue;
+}
+
+export function MetadataViewRow({ label, text, data }: MetadataViewRowProps) {
+  if (text === undefined && data === undefined) {
+    return null;
+  }
+  return (
+    <TableRow>
+      <TableCell style={{ width: 160 }}>
+        <Typography variant="body1" noWrap style={{ fontWeight: 900 }}>
+          {label}
+        </Typography>
+      </TableCell>
+      <TableCell>
+        <Typography variant="body1">
+          {data ? JSON.stringify(data) : text}
+        </Typography>
+      </TableCell>
+    </TableRow>
+  );
+}
+
+export function MetadataView({ schema }: { schema: Schema }) {
+  return (
+    <Paper variant="outlined" square style={{ width: '100%' }}>
+      <Table size="small">
+        <TableBody>
+          <MetadataViewRow label="Type" data={schema.type} />
+          <MetadataViewRow label="Allowed values" data={schema.enum} />
+          {schema.additionalProperties === true && (
+            <MetadataViewRow label="Additional Properties" text="true" />
+          )}
+          {schema.additionalItems === true && (
+            <MetadataViewRow label="Additional Items" text="true" />
+          )}
+          <MetadataViewRow label="Format" text={schema.format} />
+          <MetadataViewRow
+            label="Pattern"
+            text={schema.pattern && String(schema.pattern)}
+          />
+          <MetadataViewRow label="Minimum" data={schema.minimum} />
+          <MetadataViewRow label="Maximum" data={schema.maximum} />
+          <MetadataViewRow
+            label="Exclusive minimum"
+            data={schema.exclusiveMinimum}
+          />
+          <MetadataViewRow
+            label="Exclusive maximum"
+            data={schema.exclusiveMaximum}
+          />
+          <MetadataViewRow label="Multiple of" data={schema.multipleOf} />
+          <MetadataViewRow
+            label="Maximum number of items"
+            data={schema.maxItems}
+          />
+          <MetadataViewRow
+            label="Minimum number of items"
+            data={schema.minItems}
+          />
+          <MetadataViewRow
+            label="Maximum number of properties"
+            data={schema.maxProperties}
+          />
+          <MetadataViewRow
+            label="Minimum number of properties"
+            data={schema.minProperties}
+          />
+          <MetadataViewRow label="Maximum Length" data={schema.maxLength} />
+          <MetadataViewRow label="Minimum Length" data={schema.minLength} />
+          <MetadataViewRow
+            label="Items must be unique"
+            data={schema.uniqueItems}
+          />
+        </TableBody>
+      </Table>
+    </Paper>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/ObjectView.tsx b/plugins/config-schema/src/components/SchemaView/ObjectView.tsx
new file mode 100644
index 0000000000..8c72e169d3
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/ObjectView.tsx
@@ -0,0 +1,94 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Box, Typography } from '@material-ui/core';
+import React from 'react';
+import { ChildView } from './ChildView';
+import { MetadataView } from './MetadataView';
+import { SchemaViewProps } from './types';
+
+function isRequired(name: string, required?: boolean | string[]) {
+  if (required === true) {
+    return true;
+  }
+  if (Array.isArray(required)) {
+    return required.includes(name);
+  }
+  return false;
+}
+
+export function ObjectView({ path, depth, schema }: SchemaViewProps) {
+  const properties = Object.entries(schema.properties ?? {});
+  const patternProperties = Object.entries(schema.patternProperties ?? {});
+
+  return (
+    <>
+      {depth > 0 && (
+        <Box marginBottom={4}>
+          {schema.description && (
+            <Box marginBottom={4}>
+              <Typography variant="body1">{schema.description}</Typography>
+            </Box>
+          )}
+          <MetadataView schema={schema} />
+        </Box>
+      )}
+      {properties.length > 0 && (
+        <>
+          {depth > 0 && <Typography variant="overline">Properties</Typography>}
+          {properties.map(([name, propSchema], index) => (
+            <ChildView
+              key={name}
+              path={path ? `${path}.${name}` : name}
+              depth={depth + 1}
+              schema={propSchema}
+              lastChild={index === properties.length - 1}
+              required={isRequired(name, schema.required)}
+            />
+          ))}
+        </>
+      )}
+      {patternProperties.length > 0 && (
+        <>
+          {depth > 0 && (
+            <Typography variant="overline">Pattern Properties</Typography>
+          )}
+          {patternProperties.map(([name, propSchema], index) => (
+            <ChildView
+              key={name}
+              path={path ? `${path}.<${name}>` : name}
+              depth={depth + 1}
+              schema={propSchema}
+              lastChild={index === patternProperties.length - 1}
+              required={isRequired(name, schema.required)}
+            />
+          ))}
+        </>
+      )}
+      {schema.additionalProperties && schema.additionalProperties !== true && (
+        <>
+          <Typography variant="overline">Additional Properties</Typography>
+          <ChildView
+            path={`${path}.*`}
+            depth={depth + 1}
+            schema={schema.additionalProperties}
+            lastChild
+          />
+        </>
+      )}
+    </>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/ScalarView.tsx b/plugins/config-schema/src/components/SchemaView/ScalarView.tsx
new file mode 100644
index 0000000000..1349358abd
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/ScalarView.tsx
@@ -0,0 +1,33 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Box, Typography } from '@material-ui/core';
+import React from 'react';
+import { MetadataView } from './MetadataView';
+import { SchemaViewProps } from './types';
+
+export function ScalarView({ schema }: SchemaViewProps) {
+  return (
+    <>
+      {schema.description && (
+        <Box marginBottom={4}>
+          <Typography variant="body1">{schema.description}</Typography>
+        </Box>
+      )}
+      <MetadataView schema={schema} />
+    </>
+  );
+}
diff --git a/plugins/config-schema/src/components/SchemaView/SchemaView.tsx b/plugins/config-schema/src/components/SchemaView/SchemaView.tsx
new file mode 100644
index 0000000000..bf5d7fd18c
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/SchemaView.tsx
@@ -0,0 +1,62 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import React from 'react';
+import { ArrayView } from './ArrayView';
+import { MatchView } from './MatchView';
+import { ObjectView } from './ObjectView';
+import { ScalarView } from './ScalarView';
+import { SchemaViewProps } from './types';
+
+export function SchemaView(props: SchemaViewProps) {
+  const { schema } = props;
+  if (schema.anyOf) {
+    return (
+      <MatchView
+        {...props}
+        schema={schema.anyOf}
+        label="Any of the following"
+      />
+    );
+  }
+  if (schema.oneOf) {
+    return (
+      <MatchView
+        {...props}
+        schema={schema.oneOf}
+        label="One of the following"
+      />
+    );
+  }
+  if (schema.allOf) {
+    return (
+      <MatchView
+        {...props}
+        schema={schema.allOf}
+        label="All of the following"
+      />
+    );
+  }
+  switch (schema.type) {
+    case 'array':
+      return <ArrayView {...props} />;
+    case 'object':
+    case undefined:
+      return <ObjectView {...props} />;
+    default:
+      return <ScalarView {...props} />;
+  }
+}
diff --git a/plugins/config-schema/src/components/SchemaView/index.ts b/plugins/config-schema/src/components/SchemaView/index.ts
new file mode 100644
index 0000000000..8840696be6
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/index.ts
@@ -0,0 +1,17 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export { SchemaView } from './SchemaView';
diff --git a/plugins/config-schema/src/components/SchemaView/types.ts b/plugins/config-schema/src/components/SchemaView/types.ts
new file mode 100644
index 0000000000..94b676ec3e
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaView/types.ts
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Schema } from 'jsonschema';
+
+export interface SchemaViewProps {
+  path: string;
+  depth: number;
+  schema: Schema;
+}
diff --git a/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.test.tsx b/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.test.tsx
new file mode 100644
index 0000000000..48dc92098a
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.test.tsx
@@ -0,0 +1,136 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { render, screen } from '@testing-library/react';
+import { Schema } from 'jsonschema';
+import React from 'react';
+import { SchemaViewer } from './SchemaViewer';
+
+describe('SchemaViewer', () => {
+  it('should render a simple schema', () => {
+    const schema = {
+      type: 'object',
+      properties: {
+        a: {
+          description: 'My A',
+          type: 'string',
+        },
+        b: {
+          description: 'My B',
+          type: 'number',
+        },
+      },
+    };
+
+    render(<SchemaViewer schema={schema} />);
+
+    expect(screen.getAllByText('a').length).toBe(2);
+    expect(screen.getByText('My A')).toBeInTheDocument();
+
+    expect(screen.getAllByText('b').length).toBe(2);
+    expect(screen.getByText('My B')).toBeInTheDocument();
+  });
+
+  it('should render complex schema', () => {
+    const schema: Schema = {
+      type: 'object',
+      properties: {
+        a: {
+          description: 'My A',
+          type: 'object',
+          patternProperties: {
+            'prefix.*': {
+              description: 'Prefix prop',
+              type: 'string',
+            },
+          },
+          additionalProperties: {
+            description: 'Additional properties for A',
+            type: 'number',
+            minimum: 72,
+            maximum: 79,
+          },
+        },
+        b: {
+          oneOf: [
+            { type: 'string', description: 'B one of 1' },
+            {
+              type: 'array',
+              description: 'B one of 2',
+              items: {
+                anyOf: [
+                  { type: 'string', description: 'Any of B 1' },
+                  { type: 'number', description: 'Any of B 2' },
+                  {
+                    type: 'object',
+                    description: 'Any of B 3',
+                    properties: {
+                      deep: {
+                        allOf: [
+                          {
+                            type: 'number',
+                            description: 'Impossible 1',
+                          },
+                          {
+                            type: 'boolean',
+                            description: 'Impossible 2',
+                          },
+                        ],
+                      },
+                    },
+                  },
+                ],
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    render(<SchemaViewer schema={schema} />);
+
+    expect(screen.getAllByText('a').length).toBe(2);
+    expect(screen.getByText('My A')).toBeInTheDocument();
+    expect(screen.getByText('a.<prefix.*>')).toBeInTheDocument();
+    expect(screen.getByText('Prefix prop')).toBeInTheDocument();
+
+    expect(screen.getByText('a.*')).toBeInTheDocument();
+    expect(screen.getByText('Additional properties for A')).toBeInTheDocument();
+    expect(screen.getByText('72')).toBeInTheDocument();
+    expect(screen.getByText('79')).toBeInTheDocument();
+
+    expect(screen.getAllByText('b').length).toBe(2);
+    expect(screen.getByText('b/1')).toBeInTheDocument();
+    expect(screen.getByText('B one of 1')).toBeInTheDocument();
+
+    expect(screen.getByText('b/2')).toBeInTheDocument();
+    expect(screen.getByText('B one of 2')).toBeInTheDocument();
+
+    expect(screen.getByText('b/2[]')).toBeInTheDocument();
+    expect(screen.getByText('b/2[]/1')).toBeInTheDocument();
+    expect(screen.getByText('Any of B 1')).toBeInTheDocument();
+    expect(screen.getByText('b/2[]/2')).toBeInTheDocument();
+    expect(screen.getByText('Any of B 2')).toBeInTheDocument();
+    expect(screen.getByText('b/2[]/3')).toBeInTheDocument();
+    expect(screen.getByText('Any of B 3')).toBeInTheDocument();
+
+    expect(screen.getByText('b/2[]/3.deep')).toBeInTheDocument();
+    expect(screen.getByText('b/2[]/3.deep/1')).toBeInTheDocument();
+    expect(screen.getByText('Impossible 1')).toBeInTheDocument();
+    expect(screen.getByText('b/2[]/3.deep/2')).toBeInTheDocument();
+    expect(screen.getByText('Impossible 2')).toBeInTheDocument();
+  });
+});
diff --git a/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.tsx b/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.tsx
new file mode 100644
index 0000000000..3ed3cca0ee
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaViewer/SchemaViewer.tsx
@@ -0,0 +1,53 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { Box, Paper } from '@material-ui/core';
+import { Schema } from 'jsonschema';
+import React from 'react';
+import { SchemaView } from '../SchemaView';
+import { SchemaBrowser } from '../SchemaBrowser';
+import { ScrollTargetsProvider } from '../ScrollTargetsContext/ScrollTargetsContext';
+
+export interface SchemaViewerProps {
+  schema: Schema;
+}
+
+export const SchemaViewer = ({ schema }: SchemaViewerProps) => {
+  return (
+    <Box flex="1" position="relative">
+      <Box
+        clone
+        position="absolute"
+        display="flex"
+        flexDirection="row"
+        flexWrap="nowrap"
+        maxHeight="100%"
+      >
+        <Paper elevation={3}>
+          <ScrollTargetsProvider>
+            <Box padding={1} overflow="auto" width={300}>
+              <SchemaBrowser schema={schema} />
+            </Box>
+
+            <Box flex="1" overflow="auto">
+              <SchemaView schema={schema} path="" depth={0} />
+            </Box>
+          </ScrollTargetsProvider>
+        </Paper>
+      </Box>
+    </Box>
+  );
+};
diff --git a/plugins/config-schema/src/components/SchemaViewer/index.ts b/plugins/config-schema/src/components/SchemaViewer/index.ts
new file mode 100644
index 0000000000..4852c4e21d
--- /dev/null
+++ b/plugins/config-schema/src/components/SchemaViewer/index.ts
@@ -0,0 +1,17 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export { SchemaViewer } from './SchemaViewer';
diff --git a/plugins/config-schema/src/components/ScrollTargetsContext/ScrollTargetsContext.tsx b/plugins/config-schema/src/components/ScrollTargetsContext/ScrollTargetsContext.tsx
new file mode 100644
index 0000000000..085b237754
--- /dev/null
+++ b/plugins/config-schema/src/components/ScrollTargetsContext/ScrollTargetsContext.tsx
@@ -0,0 +1,52 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import React, { createContext, ReactNode, useContext } from 'react';
+
+class ScrollTargetsForwarder {
+  private readonly listeners = new Map<string, () => void>();
+
+  setScrollListener(id: string, listener: () => void): () => void {
+    this.listeners.set(id, listener);
+
+    return () => {
+      if (this.listeners.get(id) === listener) {
+        this.listeners.delete(id);
+      }
+    };
+  }
+
+  scrollTo(id: string) {
+    this.listeners.get(id)?.();
+  }
+}
+
+const ScrollTargetsContext = createContext<ScrollTargetsForwarder | undefined>(
+  undefined,
+);
+
+export function ScrollTargetsProvider({ children }: { children: ReactNode }) {
+  return (
+    <ScrollTargetsContext.Provider
+      value={new ScrollTargetsForwarder()}
+      children={children}
+    />
+  );
+}
+
+export function useScrollTargets() {
+  return useContext(ScrollTargetsContext);
+}
diff --git a/plugins/config-schema/src/components/ScrollTargetsContext/index.ts b/plugins/config-schema/src/components/ScrollTargetsContext/index.ts
new file mode 100644
index 0000000000..d2d35ec6b1
--- /dev/null
+++ b/plugins/config-schema/src/components/ScrollTargetsContext/index.ts
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export {
+  ScrollTargetsProvider,
+  useScrollTargets,
+} from './ScrollTargetsContext';
diff --git a/plugins/config-schema/src/index.ts b/plugins/config-schema/src/index.ts
new file mode 100644
index 0000000000..009b093d50
--- /dev/null
+++ b/plugins/config-schema/src/index.ts
@@ -0,0 +1,18 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export * from './api';
+export { configSchemaPlugin, ConfigSchemaPage } from './plugin';
diff --git a/plugins/config-schema/src/plugin.test.ts b/plugins/config-schema/src/plugin.test.ts
new file mode 100644
index 0000000000..0f71d800d4
--- /dev/null
+++ b/plugins/config-schema/src/plugin.test.ts
@@ -0,0 +1,22 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { configSchemaPlugin } from './plugin';
+
+describe('config-schema', () => {
+  it('should export plugin', () => {
+    expect(configSchemaPlugin).toBeDefined();
+  });
+});
diff --git a/plugins/config-schema/src/plugin.ts b/plugins/config-schema/src/plugin.ts
new file mode 100644
index 0000000000..841f9f7f04
--- /dev/null
+++ b/plugins/config-schema/src/plugin.ts
@@ -0,0 +1,33 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { createPlugin, createRoutableExtension } from '@backstage/core';
+
+import { rootRouteRef } from './routes';
+
+export const configSchemaPlugin = createPlugin({
+  id: 'config-schema',
+  routes: {
+    root: rootRouteRef,
+  },
+});
+
+export const ConfigSchemaPage = configSchemaPlugin.provide(
+  createRoutableExtension({
+    component: () =>
+      import('./components/ConfigSchemaPage').then(m => m.ConfigSchemaPage),
+    mountPoint: rootRouteRef,
+  }),
+);
diff --git a/plugins/config-schema/src/routes.ts b/plugins/config-schema/src/routes.ts
new file mode 100644
index 0000000000..8128e1f49f
--- /dev/null
+++ b/plugins/config-schema/src/routes.ts
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { createRouteRef } from '@backstage/core';
+
+export const rootRouteRef = createRouteRef({
+  title: 'config-schema',
+});
diff --git a/plugins/config-schema/src/setupTests.ts b/plugins/config-schema/src/setupTests.ts
new file mode 100644
index 0000000000..0cec5b395d
--- /dev/null
+++ b/plugins/config-schema/src/setupTests.ts
@@ -0,0 +1,17 @@
+/*
+ * Copyright 2021 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import '@testing-library/jest-dom';
+import 'cross-fetch/polyfill';
diff --git a/plugins/cost-insights/package.json b/plugins/cost-insights/package.json
index a983e4ed3e..bec5db9fe0 100644
--- a/plugins/cost-insights/package.json
+++ b/plugins/cost-insights/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@backstage/config": "^0.1.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -55,7 +55,7 @@
     "yup": "^0.29.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/explore/package.json b/plugins/explore/package.json
index ea6c41fcd4..7765760906 100644
--- a/plugins/explore/package.json
+++ b/plugins/explore/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.5",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.4",
     "@backstage/plugin-explore-react": "^0.0.4",
     "@backstage/theme": "^0.2.5",
@@ -45,7 +45,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/fossa/README.md b/plugins/fossa/README.md
index 6e53ced0cf..722d8d2cf3 100644
--- a/plugins/fossa/README.md
+++ b/plugins/fossa/README.md
@@ -50,9 +50,7 @@ proxy:
     target: https://app.fossa.io/api
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        # Content: 'token <your-fossa-api-token>'
-        $env: FOSSA_AUTH_HEADER
+      Authorization: token ${FOSSA_API_TOKEN}
 
 # if you have a fossa organization, configure your id here
 fossa:
diff --git a/plugins/fossa/package.json b/plugins/fossa/package.json
index 209f7512aa..fd94c6b906 100644
--- a/plugins/fossa/package.json
+++ b/plugins/fossa/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -44,7 +44,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/gcp-projects/package.json b/plugins/gcp-projects/package.json
index a381d785a0..fecf9bdf22 100644
--- a/plugins/gcp-projects/package.json
+++ b/plugins/gcp-projects/package.json
@@ -30,7 +30,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -41,7 +41,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/github-actions/package.json b/plugins/github-actions/package.json
index a744fcdc6e..3dba840b8b 100644
--- a/plugins/github-actions/package.json
+++ b/plugins/github-actions/package.json
@@ -34,7 +34,7 @@
   "dependencies": {
     "@backstage/catalog-model": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/integration": "^0.5.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -50,7 +50,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/github-deployments/package.json b/plugins/github-deployments/package.json
index b625316ed8..c5571b6e1f 100644
--- a/plugins/github-deployments/package.json
+++ b/plugins/github-deployments/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.6",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.3",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -34,7 +34,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/gitops-profiles/package.json b/plugins/gitops-profiles/package.json
index 2d12272e22..d3a0d0df66 100644
--- a/plugins/gitops-profiles/package.json
+++ b/plugins/gitops-profiles/package.json
@@ -31,7 +31,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -42,7 +42,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/graphiql/package.json b/plugins/graphiql/package.json
index e9d1353112..4ebedffd74 100644
--- a/plugins/graphiql/package.json
+++ b/plugins/graphiql/package.json
@@ -31,7 +31,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -43,7 +43,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/jenkins/README.md b/plugins/jenkins/README.md
index 13ff9b3547..b3bc21b7d5 100644
--- a/plugins/jenkins/README.md
+++ b/plugins/jenkins/README.md
@@ -29,15 +29,13 @@ proxy:
     target: 'http://localhost:8080' # your Jenkins URL
     changeOrigin: true
     headers:
-      Authorization:
-        $env: JENKINS_BASIC_AUTH_HEADER
+      Authorization: Basic ${JENKINS_BASIC_AUTH_HEADER}
 ```
 
 4. Add an environment variable which contains the Jenkins credentials, (note: use an API token not your password). Here user is the name of the user created in Jenkins.
 
 ```shell
-HEADER=$(echo -n user:api-token | base64)
-export JENKINS_BASIC_AUTH_HEADER="Basic $HEADER"
+export JENKINS_BASIC_AUTH_HEADER=$(echo -n user:api-token | base64)
 ```
 
 5. Run app with `yarn start`
diff --git a/plugins/jenkins/package.json b/plugins/jenkins/package.json
index 3e00ae9373..c736eb0b5b 100644
--- a/plugins/jenkins/package.json
+++ b/plugins/jenkins/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.3",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -47,7 +47,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/kafka/package.json b/plugins/kafka/package.json
index 52cd84b790..644c074b81 100644
--- a/plugins/kafka/package.json
+++ b/plugins/kafka/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -33,7 +33,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/kubernetes-backend/CHANGELOG.md b/plugins/kubernetes-backend/CHANGELOG.md
index 0f61b71858..379f0dd872 100644
--- a/plugins/kubernetes-backend/CHANGELOG.md
+++ b/plugins/kubernetes-backend/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @backstage/plugin-kubernetes-backend
 
+## 0.3.4
+
+### Patch Changes
+
+- 7fd46f26d: Use `string` TypeScript type instead of `String`.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+  - @backstage/catalog-model@0.7.7
+
 ## 0.3.3
 
 ### Patch Changes
diff --git a/plugins/kubernetes-backend/package.json b/plugins/kubernetes-backend/package.json
index c6f9f02dc2..79864b7b48 100644
--- a/plugins/kubernetes-backend/package.json
+++ b/plugins/kubernetes-backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-kubernetes-backend",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/backend-common": "^0.6.1",
-    "@backstage/catalog-model": "^0.7.5",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@google-cloud/container": "^2.2.0",
     "@kubernetes/client-node": "^0.14.0",
@@ -52,7 +52,7 @@
     "yn": "^4.0.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.6",
+    "@backstage/cli": "^0.6.8",
     "@types/aws4": "^1.5.1",
     "supertest": "^6.1.3"
   },
diff --git a/plugins/kubernetes-backend/src/kubernetes-auth-translator/KubernetesAuthTranslatorGenerator.ts b/plugins/kubernetes-backend/src/kubernetes-auth-translator/KubernetesAuthTranslatorGenerator.ts
index 4ae2aff35a..d222bdbce1 100644
--- a/plugins/kubernetes-backend/src/kubernetes-auth-translator/KubernetesAuthTranslatorGenerator.ts
+++ b/plugins/kubernetes-backend/src/kubernetes-auth-translator/KubernetesAuthTranslatorGenerator.ts
@@ -21,7 +21,7 @@ import { AwsIamKubernetesAuthTranslator } from './AwsIamKubernetesAuthTranslator
 
 export class KubernetesAuthTranslatorGenerator {
   static getKubernetesAuthTranslatorInstance(
-    authProvider: String,
+    authProvider: string,
   ): KubernetesAuthTranslator {
     switch (authProvider) {
       case 'google': {
diff --git a/plugins/kubernetes-backend/src/service/KubernetesFanOutHandler.test.ts b/plugins/kubernetes-backend/src/service/KubernetesFanOutHandler.test.ts
index e76a114d54..7ec1a317d8 100644
--- a/plugins/kubernetes-backend/src/service/KubernetesFanOutHandler.test.ts
+++ b/plugins/kubernetes-backend/src/service/KubernetesFanOutHandler.test.ts
@@ -34,8 +34,8 @@ const mockFetch = (mock: jest.Mock) => {
 };
 
 function generateMockResourcesAndErrors(
-  serviceId: String,
-  clusterName: String,
+  serviceId: string,
+  clusterName: string,
 ) {
   if (clusterName === 'empty-cluster') {
     return {
diff --git a/plugins/kubernetes/package.json b/plugins/kubernetes/package.json
index 9d01997c13..df00c0801f 100644
--- a/plugins/kubernetes/package.json
+++ b/plugins/kubernetes/package.json
@@ -33,7 +33,7 @@
   "dependencies": {
     "@backstage/catalog-model": "^0.7.4",
     "@backstage/config": "^0.1.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.3",
     "@backstage/plugin-kubernetes-backend": "^0.3.2",
     "@backstage/theme": "^0.2.5",
@@ -50,7 +50,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/lighthouse/package.json b/plugins/lighthouse/package.json
index 2fd25a9add..eb7d69d77d 100644
--- a/plugins/lighthouse/package.json
+++ b/plugins/lighthouse/package.json
@@ -33,7 +33,7 @@
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
     "@backstage/config": "^0.1.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.2",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -46,7 +46,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/newrelic/README.md b/plugins/newrelic/README.md
index e14acedef2..e7cdd0df4a 100644
--- a/plugins/newrelic/README.md
+++ b/plugins/newrelic/README.md
@@ -15,8 +15,7 @@ proxy:
   '/newrelic/apm/api':
     target: https://api.newrelic.com/v2
     headers:
-      X-Api-Key:
-        $env: NEW_RELIC_REST_API_KEY
+      X-Api-Key: ${NEW_RELIC_REST_API_KEY}
 ```
 
 In your production deployment of Backstage, you would also need to ensure that
diff --git a/plugins/newrelic/package.json b/plugins/newrelic/package.json
index 83a46bb8b1..82952c7452 100644
--- a/plugins/newrelic/package.json
+++ b/plugins/newrelic/package.json
@@ -31,7 +31,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -41,7 +41,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/org/package.json b/plugins/org/package.json
index 9fa79e27c6..0a9917cb7d 100644
--- a/plugins/org/package.json
+++ b/plugins/org/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.6",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/core-api": "^0.2.16",
     "@backstage/plugin-catalog-react": "^0.1.4",
     "@backstage/theme": "^0.2.5",
@@ -35,7 +35,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/pagerduty/README.md b/plugins/pagerduty/README.md
index 965a719020..9d8023b9fe 100644
--- a/plugins/pagerduty/README.md
+++ b/plugins/pagerduty/README.md
@@ -74,7 +74,7 @@ proxy:
 Then start the backend passing the token as an environment variable:
 
 ```bash
-$ PAGERDUTY_TOKEN='Token token=<TOKEN>' yarn start
+$ PAGERDUTY_TOKEN='<TOKEN>' yarn start
 ```
 
 This will proxy the request by adding `Authorization` header with the provided token.
diff --git a/plugins/pagerduty/package.json b/plugins/pagerduty/package.json
index 342d375863..44e8cb5b7f 100644
--- a/plugins/pagerduty/package.json
+++ b/plugins/pagerduty/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -46,7 +46,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/register-component/package.json b/plugins/register-component/package.json
index d63800db5c..a8cfcc894a 100644
--- a/plugins/register-component/package.json
+++ b/plugins/register-component/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.5",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.4",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -45,7 +45,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/rollbar-backend/README.md b/plugins/rollbar-backend/README.md
index 6cf3b55948..2dcf6495dd 100644
--- a/plugins/rollbar-backend/README.md
+++ b/plugins/rollbar-backend/README.md
@@ -8,8 +8,7 @@ The following values are read from the configuration file.
 
 ```yaml
 rollbar:
-  accountToken:
-    $env: ROLLBAR_ACCOUNT_TOKEN
+  accountToken: ${ROLLBAR_ACCOUNT_TOKEN}
 ```
 
 _NOTE: The `ROLLBAR_ACCOUNT_TOKEN` environment variable must be set to a read
diff --git a/plugins/rollbar/README.md b/plugins/rollbar/README.md
index 6337d45ffe..993b93d3a0 100644
--- a/plugins/rollbar/README.md
+++ b/plugins/rollbar/README.md
@@ -45,8 +45,7 @@ const ServiceEntityPage = ({ entity }: { entity: Entity }) => (
 rollbar:
   organization: organization-name
   # used by rollbar-backend
-  accountToken:
-    $env: ROLLBAR_ACCOUNT_TOKEN
+  accountToken: ${ROLLBAR_ACCOUNT_TOKEN}
 ```
 
 6. Annotate entities with the rollbar project slug
diff --git a/plugins/rollbar/package.json b/plugins/rollbar/package.json
index 084dcbad32..6d0e49b1ae 100644
--- a/plugins/rollbar/package.json
+++ b/plugins/rollbar/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -47,7 +47,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/scaffolder-backend/CHANGELOG.md b/plugins/scaffolder-backend/CHANGELOG.md
index e2c1717a71..2c45bdc611 100644
--- a/plugins/scaffolder-backend/CHANGELOG.md
+++ b/plugins/scaffolder-backend/CHANGELOG.md
@@ -1,5 +1,66 @@
 # @backstage/plugin-scaffolder-backend
 
+## 0.9.6
+
+### Patch Changes
+
+- d8ffec739: Add built-in publish action for creating GitHub pull requests.
+- 7abec4dbc: Fix for the `file://` protocol check in the `FilePreparer` being too strict, breaking Windows.
+- d840d30bc: Bitbucket server needs username to be set as well as the token or appPassword for the publishing process to work.
+
+  ```yaml
+  integrations:
+    bitbucket:
+      - host: bitbucket.mycompany.com
+        apiBaseUrl: https://bitbucket.mycompany.com/rest/api/1.0
+        token: token
+        username: username
+  ```
+
+- b25846562: Enable the JSON parsing of the response from templated variables in the `v2beta1` syntax. Previously if template parameters json strings they were left as strings, they are now parsed as JSON objects.
+
+  Before:
+
+  ```yaml
+  - id: test
+    name: test-action
+    action: custom:run
+    input:
+      input: '{"hello":"ben"}'
+  ```
+
+  Now:
+
+  ```yaml
+  - id: test
+    name: test-action
+    action: custom:run
+    input:
+      input:
+        hello: ben
+  ```
+
+  Also added the `parseRepoUrl` and `json` helpers to the parameters syntax. You can now use these helpers to parse work with some `json` or `repoUrl` strings in templates.
+
+  ```yaml
+  - id: test
+    name: test-action
+    action: cookiecutter:fetch
+    input:
+      destination: '{{ parseRepoUrl parameters.repoUrl }}'
+  ```
+
+  Will produce a parsed version of the `repoUrl` of type `{ repo: string, owner: string, host: string }` that you can use in your actions. Specifically `cookiecutter` with `{{ cookiecutter.destination.owner }}` like the `plugins/scaffolder-backend/sample-templates/v1beta2-demo/template.yaml` example.
+
+- a376e3ee8: Adds a collaborator field to GitHub publish action for multiple users and access levels
+- 423a514c3: Fix execution of the GitHub Pull Request publish action on Windows.
+- 0b7fd7a9d: Fix bug in pull request sample template.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+- Updated dependencies [442f34b87]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/catalog-client@0.3.10
+
 ## 0.9.5
 
 ### Patch Changes
diff --git a/plugins/scaffolder-backend/package.json b/plugins/scaffolder-backend/package.json
index c86004d7a4..2c65d91604 100644
--- a/plugins/scaffolder-backend/package.json
+++ b/plugins/scaffolder-backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-scaffolder-backend",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -30,8 +30,8 @@
   },
   "dependencies": {
     "@backstage/backend-common": "^0.6.2",
-    "@backstage/catalog-client": "^0.3.9",
-    "@backstage/catalog-model": "^0.7.6",
+    "@backstage/catalog-client": "^0.3.10",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@backstage/errors": "^0.1.1",
     "@backstage/integration": "^0.5.1",
@@ -67,7 +67,7 @@
     "yaml": "^1.10.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/test-utils": "^0.1.10",
     "@types/fs-extra": "^9.0.1",
     "@types/mock-fs": "^4.13.0",
diff --git a/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template.yaml b/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template.yaml
index e90b43b7f3..1a01f7998c 100644
--- a/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template.yaml
+++ b/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template.yaml
@@ -50,6 +50,7 @@ spec:
         values:
           name: '{{ parameters.name }}'
           owner: '{{ parameters.owner }}'
+          destination: '{{ parseRepoUrl parameters.repoUrl }}'
 
     - id: fetch-docs
       name: Fetch Docs
diff --git a/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template/catalog-info.yaml b/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template/catalog-info.yaml
index 875664d2a8..6519d68402 100644
--- a/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template/catalog-info.yaml
+++ b/plugins/scaffolder-backend/sample-templates/v1beta2-demo/template/catalog-info.yaml
@@ -2,6 +2,7 @@ apiVersion: backstage.io/v1alpha1
 kind: Component
 metadata:
   name: {{cookiecutter.name | jsonify}}
+  github.com/project-slug: {{cookiecutter.destination.owner + "/" + cookiecutter.destination.repo}}
 spec:
   type: website
   lifecycle: experimental
diff --git a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.test.ts b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.test.ts
index fb9d3aeaa6..3b17f46bb3 100644
--- a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.test.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.test.ts
@@ -16,6 +16,8 @@
 
 import mockFs from 'mock-fs';
 import { Writable } from 'stream';
+import os from 'os';
+import { resolve as resolvePath } from 'path';
 import {
   PullRequestCreator,
   GithubPullRequestActionInput,
@@ -28,7 +30,8 @@ import { getRootLogger } from '@backstage/backend-common';
 import { ScmIntegrations } from '@backstage/integration';
 import { ConfigReader } from '@backstage/config';
 
-const id = 'createPublishGithubPullRequestAction';
+const root = os.platform() === 'win32' ? 'C:\\root' : '/root';
+const workspacePath = resolvePath(root, 'my-workspace');
 
 describe('createPublishGithubPullRequestAction', () => {
   let instance: TemplateAction<GithubPullRequestActionInput>;
@@ -72,7 +75,7 @@ describe('createPublishGithubPullRequestAction', () => {
       };
 
       mockFs({
-        [id]: { 'file.txt': 'Hello there!' },
+        [workspacePath]: { 'file.txt': 'Hello there!' },
       });
 
       ctx = {
@@ -81,7 +84,7 @@ describe('createPublishGithubPullRequestAction', () => {
         logger: getRootLogger(),
         logStream: new Writable(),
         input,
-        workspacePath: id,
+        workspacePath,
       };
     });
     it('creates a pull request', async () => {
@@ -133,7 +136,7 @@ describe('createPublishGithubPullRequestAction', () => {
       };
 
       mockFs({
-        [id]: {
+        [workspacePath]: {
           source: { 'foo.txt': 'Hello there!' },
           irrelevant: { 'bar.txt': 'Nothing to see here' },
         },
@@ -145,7 +148,7 @@ describe('createPublishGithubPullRequestAction', () => {
         logger: getRootLogger(),
         logStream: new Writable(),
         input,
-        workspacePath: id,
+        workspacePath,
       };
     });
 
@@ -188,7 +191,7 @@ describe('createPublishGithubPullRequestAction', () => {
       };
 
       mockFs({
-        [id]: { 'file.txt': 'Hello there!' },
+        [workspacePath]: { 'file.txt': 'Hello there!' },
       });
 
       ctx = {
@@ -197,7 +200,7 @@ describe('createPublishGithubPullRequestAction', () => {
         logger: getRootLogger(),
         logStream: new Writable(),
         input,
-        workspacePath: id,
+        workspacePath,
       };
     });
     it('creates a pull request', async () => {
diff --git a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.ts b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.ts
index 3a00610a92..e2e4f17efb 100644
--- a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/githubPullRequest.ts
@@ -197,17 +197,21 @@ export const createPublishGithubPullRequestAction = ({
 
       const client = await clientFactory({ integrations, host, owner, repo });
       const fileRoot = sourcePath
-        ? path.join(ctx.workspacePath, sourcePath)
+        ? path.resolve(ctx.workspacePath, sourcePath)
         : ctx.workspacePath;
-      const localFilePaths = await globby(`${fileRoot}/**/*.*`);
+
+      const localFilePaths = await globby(['./**', './**/.*', '!.git'], {
+        cwd: fileRoot,
+        gitignore: true,
+        dot: true,
+      });
 
       const fileContents = await Promise.all(
-        localFilePaths.map(p => readFile(p)),
+        localFilePaths.map(p => readFile(path.resolve(fileRoot, p))),
       );
 
-      const repoFilePaths = localFilePaths.map(p => {
-        const relativePath = path.relative(fileRoot, p);
-        return targetPath ? `${targetPath}/${relativePath}` : relativePath;
+      const repoFilePaths = localFilePaths.map(repoFilePath => {
+        return targetPath ? `${targetPath}/${repoFilePath}` : repoFilePath;
       });
 
       const changes = [
diff --git a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/util.ts b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/util.ts
index 07b3823e7b..acf1351004 100644
--- a/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/util.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/actions/builtin/publish/util.ts
@@ -30,8 +30,14 @@ export const getRepoSourceDirectory = (
   }
   return workspacePath;
 };
+export type RepoSpec = {
+  repo: string;
+  host: string;
+  owner: string;
+  organization?: string;
+};
 
-export const parseRepoUrl = (repoUrl: string) => {
+export const parseRepoUrl = (repoUrl: string): RepoSpec => {
   let parsed;
   try {
     parsed = new URL(`https://${repoUrl}`);
@@ -55,7 +61,7 @@ export const parseRepoUrl = (repoUrl: string) => {
     );
   }
 
-  const organization = parsed.searchParams.get('organization');
+  const organization = parsed.searchParams.get('organization') ?? undefined;
 
   return { host, owner, repo, organization };
 };
diff --git a/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.test.ts b/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.test.ts
index b598b91036..edef02064f 100644
--- a/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.test.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.test.ts
@@ -24,6 +24,7 @@ import { ConfigReader, JsonObject } from '@backstage/config';
 import { StorageTaskBroker } from './StorageTaskBroker';
 import { DatabaseTaskStore } from './DatabaseTaskStore';
 import { createTemplateAction, TemplateActionRegistry } from '../actions';
+import { RepoSpec } from '../actions/builtin/publish/util';
 
 async function createStore(): Promise<DatabaseTaskStore> {
   const manager = SingleConnectionDatabaseManager.fromConfig(
@@ -41,20 +42,24 @@ async function createStore(): Promise<DatabaseTaskStore> {
 
 describe('TaskWorker', () => {
   let storage: DatabaseTaskStore;
+  let actionRegistry = new TemplateActionRegistry();
 
   beforeAll(async () => {
     storage = await createStore();
   });
 
-  const logger = getVoidLogger();
-  const actionRegistry = new TemplateActionRegistry();
-  actionRegistry.register({
-    id: 'test-action',
-    handler: async ctx => {
-      ctx.output('testOutput', 'winning');
-    },
+  beforeEach(() => {
+    actionRegistry = new TemplateActionRegistry();
+    actionRegistry.register({
+      id: 'test-action',
+      handler: async ctx => {
+        ctx.output('testOutput', 'winning');
+      },
+    });
   });
 
+  const logger = getVoidLogger();
+
   it('should fail when action does not exist', async () => {
     const broker = new StorageTaskBroker(storage, logger);
     const taskWorker = new TaskWorker({
@@ -166,4 +171,194 @@ describe('TaskWorker', () => {
     const event = events.find(e => e.type === 'completion');
     expect((event?.body?.output as JsonObject).result).toBe('winning');
   });
+
+  it('should parse strings as objects if possible', async () => {
+    const inputAction = createTemplateAction<{
+      address: { line1: string };
+      list: string[];
+      address2: string;
+    }>({
+      id: 'test-input',
+      schema: {
+        input: {
+          type: 'object',
+          required: ['address'],
+          properties: {
+            address: {
+              title: 'address',
+              description: 'Enter name',
+              type: 'object',
+              properties: {
+                line1: {
+                  type: 'string',
+                },
+              },
+            },
+            address2: {
+              type: 'string',
+            },
+            list: {
+              type: 'array',
+              items: {
+                type: 'string',
+              },
+            },
+          },
+        },
+      },
+      async handler(ctx) {
+        if (ctx.input.list.length !== 1) {
+          throw new Error(
+            `expected list to have length "1" got ${ctx.input.list.length}`,
+          );
+        }
+        if (ctx.input.address.line1 !== 'line 1') {
+          throw new Error(
+            `expected address.line1 to be "line 1" got ${ctx.input.address.line1}`,
+          );
+        }
+
+        if (ctx.input.address2 !== '{"not valid"}') {
+          throw new Error(
+            `expected address2 to be "{"not valid"}" got ${ctx.input.address2}`,
+          );
+        }
+        ctx.output('address', ctx.input.address.line1);
+      },
+    });
+    actionRegistry.register(inputAction);
+
+    const broker = new StorageTaskBroker(storage, logger);
+    const taskWorker = new TaskWorker({
+      logger,
+      workingDirectory: os.tmpdir(),
+      actionRegistry,
+      taskBroker: broker,
+    });
+
+    const { taskId } = await broker.dispatch({
+      steps: [
+        {
+          id: 'test-input',
+          name: 'test-input',
+          action: 'test-input',
+          input: {
+            address: JSON.stringify({ line1: 'line 1' }),
+            list: JSON.stringify(['hey!']),
+            address2: '{"not valid"}',
+          },
+        },
+      ],
+      output: {
+        result: '{{ steps.test-input.output.address }}',
+      },
+      values: {},
+    });
+
+    const task = await broker.claim();
+    await taskWorker.runOneTask(task);
+
+    const { events } = await storage.listEvents({ taskId });
+    const event = events.find(e => e.type === 'completion');
+
+    expect((event?.body?.output as JsonObject).result).toBe('line 1');
+  });
+
+  // TODO(blam): Can delete this test when we make the helpers a public API
+  it('should provide a repoUrlParse helper for the templates', async () => {
+    const inputAction = createTemplateAction<{
+      destination: RepoSpec;
+    }>({
+      id: 'test-input',
+      schema: {
+        input: {
+          type: 'object',
+          required: ['destination'],
+          properties: {
+            destination: {
+              title: 'destination',
+              type: 'object',
+              properties: {
+                repo: {
+                  type: 'string',
+                },
+                host: {
+                  type: 'string',
+                },
+                owner: {
+                  type: 'string',
+                },
+                organization: {
+                  type: 'string',
+                },
+              },
+            },
+          },
+        },
+      },
+      async handler(ctx) {
+        ctx.output('host', ctx.input.destination.host);
+        ctx.output('repo', ctx.input.destination.repo);
+        ctx.output('owner', ctx.input.destination.owner);
+
+        if (ctx.input.destination.host !== 'github.com') {
+          throw new Error(
+            `expected host to be "github.com" got ${ctx.input.destination.host}`,
+          );
+        }
+
+        if (ctx.input.destination.repo !== 'repo') {
+          throw new Error(
+            `expected repo to be "repo" got ${ctx.input.destination.repo}`,
+          );
+        }
+
+        if (ctx.input.destination.owner !== 'owner') {
+          throw new Error(
+            `expected repo to be "owner" got ${ctx.input.destination.owner}`,
+          );
+        }
+      },
+    });
+    actionRegistry.register(inputAction);
+
+    const broker = new StorageTaskBroker(storage, logger);
+    const taskWorker = new TaskWorker({
+      logger,
+      workingDirectory: os.tmpdir(),
+      actionRegistry,
+      taskBroker: broker,
+    });
+
+    const { taskId } = await broker.dispatch({
+      steps: [
+        {
+          id: 'test-input',
+          name: 'test-input',
+          action: 'test-input',
+          input: {
+            destination: '{{ parseRepoUrl parameters.repoUrl }}',
+          },
+        },
+      ],
+      output: {
+        host: '{{ steps.test-input.output.host }}',
+        repo: '{{ steps.test-input.output.repo }}',
+        owner: '{{ steps.test-input.output.owner }}',
+      },
+      values: {
+        repoUrl: 'github.com?repo=repo&owner=owner',
+      },
+    });
+
+    const task = await broker.claim();
+    await taskWorker.runOneTask(task);
+
+    const { events } = await storage.listEvents({ taskId });
+    const event = events.find(e => e.type === 'completion');
+
+    expect((event?.body?.output as JsonObject).host).toBe('github.com');
+    expect((event?.body?.output as JsonObject).repo).toBe('repo');
+    expect((event?.body?.output as JsonObject).owner).toBe('owner');
+  });
 });
diff --git a/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.ts b/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.ts
index 3a846f79a5..14752e1988 100644
--- a/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.ts
+++ b/plugins/scaffolder-backend/src/scaffolder/tasks/TaskWorker.ts
@@ -23,8 +23,9 @@ import { TaskBroker, Task } from './types';
 import fs from 'fs-extra';
 import path from 'path';
 import { TemplateActionRegistry } from '../actions/TemplateActionRegistry';
-import * as handlebars from 'handlebars';
+import * as Handlebars from 'handlebars';
 import { InputError } from '@backstage/errors';
+import { parseRepoUrl } from '../actions/builtin/publish/util';
 
 type Options = {
   logger: Logger;
@@ -34,7 +35,20 @@ type Options = {
 };
 
 export class TaskWorker {
-  constructor(private readonly options: Options) {}
+  private readonly handlebars: typeof Handlebars;
+
+  constructor(private readonly options: Options) {
+    this.handlebars = Handlebars.create();
+
+    // TODO(blam): this should be a public facing API but it's a little
+    // scary right now, so we're going to lock it off like the component API is
+    // in the frontend until we can work out a nice way to do it.
+    this.handlebars.registerHelper('parseRepoUrl', repoUrl => {
+      return JSON.stringify(parseRepoUrl(repoUrl));
+    });
+
+    this.handlebars.registerHelper('json', obj => JSON.stringify(obj));
+  }
 
   start() {
     (async () => {
@@ -102,13 +116,29 @@ export class TaskWorker {
             step.input &&
             JSON.parse(JSON.stringify(step.input), (_key, value) => {
               if (typeof value === 'string') {
-                return handlebars.compile(value, {
+                const templated = this.handlebars.compile(value, {
                   noEscape: true,
                   strict: true,
                   data: false,
                   preventIndent: true,
                 })(templateCtx);
+
+                // If it smells like a JSON object then give it a parse as an object and if it fails return the string
+                if (
+                  (templated.startsWith('{') && templated.endsWith('}')) ||
+                  (templated.startsWith('[') && templated.endsWith(']'))
+                ) {
+                  try {
+                    // Don't recursively JSON parse the values of this string.
+                    // Shouldn't need to, don't want to encourage the use of returning handlebars from somewhere else
+                    return JSON.parse(templated);
+                  } catch {
+                    return templated;
+                  }
+                }
+                return templated;
               }
+
               return value;
             });
 
@@ -171,7 +201,7 @@ export class TaskWorker {
         JSON.stringify(task.spec.output),
         (_key, value) => {
           if (typeof value === 'string') {
-            return handlebars.compile(value, {
+            return this.handlebars.compile(value, {
               noEscape: true,
               strict: true,
               data: false,
diff --git a/plugins/scaffolder/CHANGELOG.md b/plugins/scaffolder/CHANGELOG.md
index 6a43bccab3..b7a8cbb89c 100644
--- a/plugins/scaffolder/CHANGELOG.md
+++ b/plugins/scaffolder/CHANGELOG.md
@@ -1,5 +1,49 @@
 # @backstage/plugin-scaffolder
 
+## 0.9.0
+
+### Minor Changes
+
+- a360f9478: Expose the catalog-import route as an external route from the scaffolder.
+
+  This will make it possible to hide the "Register Existing Component" button
+  when you for example are running backstage with `catalog.readonly=true`.
+
+  As a consequence of this change you need add a new binding to your createApp call to
+  keep the button visible. However, if you instead want to hide the button you can safely
+  ignore the following example.
+
+  To bind the external route from the catalog-import plugin to the scaffolder template
+  index page, make sure you have the appropriate imports and add the following
+  to the createApp call:
+
+  ```typescript
+  import { catalogImportPlugin } from '@backstage/plugin-catalog-import';
+
+  const app = createApp({
+    // ...
+    bindRoutes({ bind }) {
+      // ...
+      bind(scaffolderPlugin.externalRoutes, {
+        registerComponent: catalogImportPlugin.routes.importPage,
+      });
+    },
+  });
+  ```
+
+### Patch Changes
+
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [442f34b87]
+- Updated dependencies [e27cb6c45]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+  - @backstage/catalog-client@0.3.10
+
 ## 0.8.2
 
 ### Patch Changes
diff --git a/plugins/scaffolder/package.json b/plugins/scaffolder/package.json
index 0de3b5ee53..10785a4db7 100644
--- a/plugins/scaffolder/package.json
+++ b/plugins/scaffolder/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-scaffolder",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -30,10 +30,10 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/catalog-client": "^0.3.9",
-    "@backstage/catalog-model": "^0.7.6",
+    "@backstage/catalog-client": "^0.3.10",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/integration": "^0.5.1",
     "@backstage/integration-react": "^0.1.1",
     "@backstage/plugin-catalog-react": "^0.1.4",
@@ -60,7 +60,7 @@
     "zen-observable": "^0.8.15"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/search/package.json b/plugins/search/package.json
index 942035159c..13019c7f32 100644
--- a/plugins/search/package.json
+++ b/plugins/search/package.json
@@ -29,7 +29,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/catalog-model": "^0.7.3",
     "@backstage/plugin-catalog-react": "^0.1.2",
     "@backstage/search-common": "^0.1.1",
@@ -44,7 +44,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/sentry/README.md b/plugins/sentry/README.md
index 5d280de249..52cef9cbe6 100644
--- a/plugins/sentry/README.md
+++ b/plugins/sentry/README.md
@@ -70,9 +70,7 @@ proxy:
     target: https://sentry.io/api/
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        # Content: 'Bearer <your-sentry-token>'
-        $env: SENTRY_TOKEN
+      Authorization: Bearer ${SENTRY_TOKEN}
 
 sentry:
   organization: <your-organization>
diff --git a/plugins/sentry/package.json b/plugins/sentry/package.json
index cfed11acb8..dee05a8c2d 100644
--- a/plugins/sentry/package.json
+++ b/plugins/sentry/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -46,7 +46,7 @@
     "timeago.js": "^4.0.2"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/sonarqube/CHANGELOG.md b/plugins/sonarqube/CHANGELOG.md
index c5992c8e0a..0ed86737dd 100644
--- a/plugins/sonarqube/CHANGELOG.md
+++ b/plugins/sonarqube/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @backstage/plugin-sonarqube
 
+## 0.1.16
+
+### Patch Changes
+
+- db802fafb: Export isSonarQubeAvailable.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [e27cb6c45]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+
 ## 0.1.15
 
 ### Patch Changes
diff --git a/plugins/sonarqube/README.md b/plugins/sonarqube/README.md
index 7afc9cc04a..7c745edf90 100644
--- a/plugins/sonarqube/README.md
+++ b/plugins/sonarqube/README.md
@@ -10,7 +10,6 @@ The SonarQube Plugin displays code statistics from [SonarCloud](https://sonarclo
 
 ```bash
 # packages/app
-
 yarn add @backstage/plugin-sonarqube
 ```
 
@@ -18,70 +17,76 @@ yarn add @backstage/plugin-sonarqube
 
 ```js
 // packages/app/src/plugins.ts
-
 export { plugin as SonarQube } from '@backstage/plugin-sonarqube';
 ```
 
-3. Add the `SonarQubeCard` to the EntityPage:
+3. Add the `EntitySonarQubeCard` to the EntityPage:
 
-```jsx
-// packages/app/src/components/catalog/EntityPage.tsx
+```diff
+  // packages/app/src/components/catalog/EntityPage.tsx
++ import { EntitySonarQubeCard } from '@backstage/plugin-sonarqube';
 
-import { SonarQubeCard } from '@backstage/plugin-sonarqube';
+ ...
 
-const OverviewContent = ({ entity }: { entity: Entity }) => (
-  <Grid container spacing={3} alignItems="stretch">
-    // ...
-    <Grid item xs={12} sm={6} md={4}>
-      <SonarQubeCard entity={entity} />
-    </Grid>
-    // ...
-  </Grid>
-);
+ const overviewContent = (
+   <Grid container spacing={3} alignItems="stretch">
+     <Grid item md={6}>
+       <EntityAboutCard variant="gridItem" />
+     </Grid>
++    <Grid item md={6}>
++      <EntitySonarQubeCard variant="gridItem" />
++    </Grid>
+   </Grid>
+ );
 ```
 
 4. Add the proxy config:
 
-   Provide a method for your Backstage backend to get to your SonarQube API end point.
+   Provide a method for your Backstage backend to get to your SonarQube API end point. Add configuration to your `app-config.yaml` file depending on the product you use.
 
 **SonarCloud**
 
 ```yaml
-# app-config.yaml
-
 proxy:
   '/sonarqube':
     target: https://sonarcloud.io/api
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        # Content: 'Basic base64("<api-key>:")' <-- note the trailing ':'
-        # Example: Basic bXktYXBpLWtleTo=
-        $env: SONARQUBE_AUTH_HEADER
+      Authorization: Basic ${SONARQUBE_AUTH}
+      # Content: 'base64("<api-key>:")' <-- note the trailing ':'
+      # Example: bXktYXBpLWtleTo=
 ```
 
 **SonarQube**
 
 ```yaml
-# app-config.yaml
-
 proxy:
   '/sonarqube':
     target: https://your.sonarqube.instance.com/api
     allowedMethods: ['GET']
     headers:
-      Authorization:
-        # Content: 'Basic base64("<api-key>:")' <-- note the trailing ':'
-        # Example: Basic bXktYXBpLWtleTo=
-        $env: SONARQUBE_AUTH_HEADER
+      Authorization: Basic ${SONARQUBE_AUTH}
+      # Environmental variable: SONARQUBE_AUTH
+      # Value: 'base64("<sonar-auth-token>:")'
+      # Encode the "<sonar-auth-token>:" string using base64 encoder.
+      # Note the trailing colon (:) at the end of the token.
+      # Example environmental config: SONARQUBE_AUTH=bXktYXBpLWtleTo=
+      # Fetch the sonar-auth-token from https://sonarcloud.io/account/security/
 
 sonarQube:
   baseUrl: https://your.sonarqube.instance.com
 ```
 
-5. Get and provide `SONARQUBE_AUTH_HEADER` as env variable (https://sonarcloud.io/account/security or https://docs.sonarqube.org/latest/user-guide/user-token/)
+5. Get and provide `SONARQUBE_AUTH` as an env variable (https://sonarcloud.io/account/security or https://docs.sonarqube.org/latest/user-guide/user-token/)
 
-6. Add the `sonarqube.org/project-key` annotation to your catalog-info.yaml file:
+6. Run the following commands in the root folder of the project to install and compile the changes.
+
+```yaml
+yarn install
+yarn tsc
+```
+
+7. Add the `sonarqube.org/project-key` annotation to the `catalog-info.yaml` file of the target repo for which code quality analysis is needed.
 
 ```yaml
 apiVersion: backstage.io/v1alpha1
diff --git a/plugins/sonarqube/package.json b/plugins/sonarqube/package.json
index 14f3dcfe10..d48f59febe 100644
--- a/plugins/sonarqube/package.json
+++ b/plugins/sonarqube/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-sonarqube",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -32,9 +32,9 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/catalog-model": "^0.7.3",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/plugin-catalog-react": "^0.1.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -47,7 +47,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/splunk-on-call/README.md b/plugins/splunk-on-call/README.md
index 78313d3329..5c1dda33fc 100644
--- a/plugins/splunk-on-call/README.md
+++ b/plugins/splunk-on-call/README.md
@@ -50,7 +50,7 @@ import {
 
 In order to be able to perform certain action (create-acknowledge-resolve an action), you need to provide a REST Endpoint.
 
-To enable the REST Endpoint integration you can go on https://portal.victorops.com/ inside Integrations > 3rd Party Integrations > REST – Generic.  
+To enable the REST Endpoint integration you can go on https://portal.victorops.com/ inside Integrations > 3rd Party Integrations > REST – Generic.
 You can now copy the URL to notify: `<SPLUNK_ON_CALL_REST_ENDPOINT>/$routing_key`
 
 In `app-config.yaml`:
@@ -69,10 +69,8 @@ proxy:
   '/splunk-on-call':
     target: https://api.victorops.com/api-public
     headers:
-      X-VO-Api-Id:
-        $env: SPLUNK_ON_CALL_API_ID
-      X-VO-Api-Key:
-        $env: SPLUNK_ON_CALL_API_KEY
+      X-VO-Api-Id: ${SPLUNK_ON_CALL_API_ID}
+      X-VO-Api-Key: ${SPLUNK_ON_CALL_API_KEY}
 ```
 
 In addition, to make certain API calls (trigger-resolve-acknowledge an incident) you need to add the `PATCH` method to the backend `cors` methods list: `[GET, POST, PUT, DELETE, PATCH]`.
diff --git a/plugins/splunk-on-call/package.json b/plugins/splunk-on-call/package.json
index 4e06c68e3a..990d0acb27 100644
--- a/plugins/splunk-on-call/package.json
+++ b/plugins/splunk-on-call/package.json
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.4",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
@@ -45,7 +45,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/tech-radar/CHANGELOG.md b/plugins/tech-radar/CHANGELOG.md
index 52223a95b1..54cefe487f 100644
--- a/plugins/tech-radar/CHANGELOG.md
+++ b/plugins/tech-radar/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @backstage/plugin-tech-radar
 
+## 0.3.9
+
+### Patch Changes
+
+- 184b02bef: Add markdown support for tech radar entry description
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [e27cb6c45]
+  - @backstage/core@0.7.5
+
 ## 0.3.8
 
 ### Patch Changes
diff --git a/plugins/tech-radar/package.json b/plugins/tech-radar/package.json
index e172fae350..e927ed938a 100644
--- a/plugins/tech-radar/package.json
+++ b/plugins/tech-radar/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-tech-radar",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -30,7 +30,7 @@
     "start": "backstage-cli plugin:serve"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -43,7 +43,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/tech-radar/src/components/RadarDescription/RadarDescription.tsx b/plugins/tech-radar/src/components/RadarDescription/RadarDescription.tsx
index 20c489f630..3ac4f153be 100644
--- a/plugins/tech-radar/src/components/RadarDescription/RadarDescription.tsx
+++ b/plugins/tech-radar/src/components/RadarDescription/RadarDescription.tsx
@@ -19,6 +19,7 @@ import Dialog from '@material-ui/core/Dialog';
 import DialogTitle from '@material-ui/core/DialogTitle';
 import { Button, DialogActions, DialogContent } from '@material-ui/core';
 import LinkIcon from '@material-ui/icons/Link';
+import { MarkdownContent } from '@backstage/core';
 
 export type Props = {
   open: boolean;
@@ -43,7 +44,9 @@ const RadarDescription = (props: Props): JSX.Element => {
       <DialogTitle data-testid="radar-description-dialog-title">
         {title}
       </DialogTitle>
-      <DialogContent dividers>{description}</DialogContent>
+      <DialogContent dividers>
+        <MarkdownContent content={description} />
+      </DialogContent>
       {url && (
         <DialogActions>
           <Button
diff --git a/plugins/tech-radar/src/sampleData.ts b/plugins/tech-radar/src/sampleData.ts
index 8457d1bc6d..70b9303f39 100644
--- a/plugins/tech-radar/src/sampleData.ts
+++ b/plugins/tech-radar/src/sampleData.ts
@@ -50,7 +50,7 @@ entries.push({
   title: 'JavaScript',
   quadrant: 'languages',
   description:
-    'Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum',
+    'Excepteur **sint** occaecat *cupidatat* non proident, sunt in culpa qui officia deserunt mollit anim id est laborum',
 });
 entries.push({
   timeline: [
diff --git a/plugins/techdocs-backend/CHANGELOG.md b/plugins/techdocs-backend/CHANGELOG.md
index 50e98ddf76..2923e452a7 100644
--- a/plugins/techdocs-backend/CHANGELOG.md
+++ b/plugins/techdocs-backend/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @backstage/plugin-techdocs-backend
 
+## 0.7.1
+
+### Patch Changes
+
+- cba5944fc: Change the response status of metadata endpoints in case a documentation is not
+  available to `404 NOT FOUND`. This also introduces the JSON based error messages
+  used by other backends.
+- Updated dependencies [bc9d62f4f]
+- Updated dependencies [bb5055aee]
+- Updated dependencies [5d0740563]
+  - @backstage/techdocs-common@0.5.0
+  - @backstage/catalog-model@0.7.7
+
 ## 0.7.0
 
 ### Minor Changes
diff --git a/plugins/techdocs-backend/package.json b/plugins/techdocs-backend/package.json
index de867d2bfb..53e0865430 100644
--- a/plugins/techdocs-backend/package.json
+++ b/plugins/techdocs-backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-techdocs-backend",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -31,10 +31,10 @@
   },
   "dependencies": {
     "@backstage/backend-common": "^0.6.0",
-    "@backstage/catalog-model": "^0.7.4",
+    "@backstage/catalog-model": "^0.7.7",
     "@backstage/config": "^0.1.4",
     "@backstage/errors": "^0.1.1",
-    "@backstage/techdocs-common": "^0.4.5",
+    "@backstage/techdocs-common": "^0.5.0",
     "@types/dockerode": "^3.2.1",
     "@types/express": "^4.17.6",
     "cross-fetch": "^3.0.6",
@@ -46,7 +46,7 @@
     "winston": "^3.2.1"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.6",
+    "@backstage/cli": "^0.6.8",
     "supertest": "^6.1.3"
   },
   "files": [
diff --git a/plugins/techdocs/CHANGELOG.md b/plugins/techdocs/CHANGELOG.md
index b9db771618..3924a56df3 100644
--- a/plugins/techdocs/CHANGELOG.md
+++ b/plugins/techdocs/CHANGELOG.md
@@ -1,5 +1,21 @@
 # @backstage/plugin-techdocs
 
+## 0.7.2
+
+### Patch Changes
+
+- fef852ecd: Reworked the TechDocs plugin to support using the configured company name instead of
+  'Backstage' in the page title.
+- 18f7345a6: Add borders to TechDocs tables and increase font size. Fixes #5264 and #5276.
+- Updated dependencies [bb5055aee]
+- Updated dependencies [d0d1c2f7b]
+- Updated dependencies [5d0740563]
+- Updated dependencies [5cafcf452]
+- Updated dependencies [86a95ba67]
+- Updated dependencies [e27cb6c45]
+  - @backstage/catalog-model@0.7.7
+  - @backstage/core@0.7.5
+
 ## 0.7.1
 
 ### Patch Changes
diff --git a/plugins/techdocs/package.json b/plugins/techdocs/package.json
index 4342b32a3a..88b3b6a1df 100644
--- a/plugins/techdocs/package.json
+++ b/plugins/techdocs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-techdocs",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "license": "Apache-2.0",
@@ -32,8 +32,8 @@
   },
   "dependencies": {
     "@backstage/config": "^0.1.4",
-    "@backstage/catalog-model": "^0.7.5",
-    "@backstage/core": "^0.7.4",
+    "@backstage/catalog-model": "^0.7.7",
+    "@backstage/core": "^0.7.5",
     "@backstage/plugin-catalog-react": "^0.1.4",
     "@backstage/test-utils": "^0.1.9",
     "@backstage/theme": "^0.2.5",
@@ -49,7 +49,7 @@
     "sanitize-html": "^2.3.2"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/techdocs/src/home/components/TechDocsHome.test.tsx b/plugins/techdocs/src/home/components/TechDocsHome.test.tsx
index 9783c98f27..8067767d39 100644
--- a/plugins/techdocs/src/home/components/TechDocsHome.test.tsx
+++ b/plugins/techdocs/src/home/components/TechDocsHome.test.tsx
@@ -14,7 +14,13 @@
  * limitations under the License.
  */
 
-import { ApiProvider, ApiRegistry } from '@backstage/core';
+import {
+  ApiProvider,
+  ApiRegistry,
+  ConfigApi,
+  configApiRef,
+  ConfigReader,
+} from '@backstage/core';
 import { CatalogApi, catalogApiRef } from '@backstage/plugin-catalog-react';
 import { renderInTestApp } from '@backstage/test-utils';
 import { screen } from '@testing-library/react';
@@ -26,7 +32,16 @@ describe('TechDocs Home', () => {
     getEntities: async () => ({ items: [] }),
   };
 
-  const apiRegistry = ApiRegistry.with(catalogApiRef, catalogApi);
+  const configApi: ConfigApi = new ConfigReader({
+    organization: {
+      name: 'My Company',
+    },
+  });
+
+  const apiRegistry = ApiRegistry.with(catalogApiRef, catalogApi).with(
+    configApiRef,
+    configApi,
+  );
 
   it('should render a TechDocs home page', async () => {
     await renderInTestApp(
@@ -38,7 +53,7 @@ describe('TechDocs Home', () => {
     // Header
     expect(await screen.findByText('Documentation')).toBeInTheDocument();
     expect(
-      await screen.findByText(/Documentation available in Backstage/i),
+      await screen.findByText(/Documentation available in My Company/i),
     ).toBeInTheDocument();
 
     // Explore Content
diff --git a/plugins/techdocs/src/home/components/TechDocsHome.tsx b/plugins/techdocs/src/home/components/TechDocsHome.tsx
index 916a46ab7a..5e9e25e7a0 100644
--- a/plugins/techdocs/src/home/components/TechDocsHome.tsx
+++ b/plugins/techdocs/src/home/components/TechDocsHome.tsx
@@ -21,6 +21,8 @@ import { catalogApiRef, CatalogApi } from '@backstage/plugin-catalog-react';
 import { Entity } from '@backstage/catalog-model';
 import {
   CodeSnippet,
+  ConfigApi,
+  configApiRef,
   Content,
   Header,
   HeaderTabs,
@@ -36,6 +38,7 @@ import { OwnedContent } from './OwnedContent';
 export const TechDocsHome = () => {
   const [selectedTab, setSelectedTab] = useState<number>(0);
   const catalogApi: CatalogApi = useApi(catalogApiRef);
+  const configApi: ConfigApi = useApi(configApiRef);
 
   const tabs = [{ label: 'Overview' }, { label: 'Owned Documents' }];
 
@@ -46,13 +49,14 @@ export const TechDocsHome = () => {
     });
   });
 
+  const generatedSubtitle = `Documentation available in ${
+    configApi.getOptionalString('organization.name') ?? 'Backstage'
+  }`;
+
   if (loading) {
     return (
       <Page themeId="documentation">
-        <Header
-          title="Documentation"
-          subtitle="Documentation available in Backstage"
-        />
+        <Header title="Documentation" subtitle={generatedSubtitle} />
         <Content>
           <Progress />
         </Content>
@@ -63,10 +67,7 @@ export const TechDocsHome = () => {
   if (error) {
     return (
       <Page themeId="documentation">
-        <Header
-          title="Documentation"
-          subtitle="Documentation available in Backstage"
-        />
+        <Header title="Documentation" subtitle={generatedSubtitle} />
         <Content>
           <WarningPanel
             severity="error"
@@ -81,10 +82,7 @@ export const TechDocsHome = () => {
 
   return (
     <Page themeId="documentation">
-      <Header
-        title="Documentation"
-        subtitle="Documentation available in Backstage"
-      />
+      <Header title="Documentation" subtitle={generatedSubtitle} />
       <HeaderTabs
         selectedIndex={selectedTab}
         onChange={index => setSelectedTab(index)}
diff --git a/plugins/techdocs/src/reader/components/Reader.test.tsx b/plugins/techdocs/src/reader/components/Reader.test.tsx
new file mode 100644
index 0000000000..b39134b0cd
--- /dev/null
+++ b/plugins/techdocs/src/reader/components/Reader.test.tsx
@@ -0,0 +1,67 @@
+/*
+ * Copyright 2020 Spotify AB
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { ApiProvider, ApiRegistry } from '@backstage/core';
+import { wrapInTestApp } from '@backstage/test-utils';
+import { act, render } from '@testing-library/react';
+import React from 'react';
+import { TechDocsStorageApi, techdocsStorageApiRef } from '../../api';
+import { Reader } from './Reader';
+
+jest.mock('react-router-dom', () => {
+  const actual = jest.requireActual('react-router-dom');
+  return {
+    ...actual,
+    useParams: jest.fn(),
+  };
+});
+
+const { useParams }: { useParams: jest.Mock } = jest.requireMock(
+  'react-router-dom',
+);
+
+describe('<Reader />', () => {
+  it('should render Reader content', async () => {
+    useParams.mockReturnValue({
+      entityId: 'Component::backstage',
+    });
+
+    const techdocsStorageApi: Partial<TechDocsStorageApi> = {};
+
+    const apiRegistry = ApiRegistry.from([
+      [techdocsStorageApiRef, techdocsStorageApi],
+    ]);
+
+    await act(async () => {
+      const rendered = render(
+        wrapInTestApp(
+          <ApiProvider apis={apiRegistry}>
+            <Reader
+              entityId={{
+                kind: 'Component',
+                namespace: 'default',
+                name: 'example',
+              }}
+            />
+          </ApiProvider>,
+        ),
+      );
+      expect(
+        rendered.getByTestId('techdocs-content-shadowroot'),
+      ).toBeInTheDocument();
+    });
+  });
+});
diff --git a/plugins/techdocs/src/reader/components/Reader.tsx b/plugins/techdocs/src/reader/components/Reader.tsx
index 874ca5e018..feed758caa 100644
--- a/plugins/techdocs/src/reader/components/Reader.tsx
+++ b/plugins/techdocs/src/reader/components/Reader.tsx
@@ -17,10 +17,10 @@ import { EntityName } from '@backstage/catalog-model';
 import { useApi } from '@backstage/core';
 import { BackstageTheme } from '@backstage/theme';
 import { useTheme } from '@material-ui/core';
+import { Alert } from '@material-ui/lab';
+import React, { useEffect, useRef, useState } from 'react';
 import { useNavigate, useParams } from 'react-router-dom';
 import { useAsync } from 'react-use';
-import React, { useEffect, useRef, useState } from 'react';
-import { Alert } from '@material-ui/lab';
 import { techdocsStorageApiRef } from '../../api';
 import transformer, {
   addBaseUrl,
@@ -343,7 +343,7 @@ export const Reader = ({ entityId, onReady }: Props) => {
       {docLoading || (docLoadError && syncInProgress) ? (
         <TechDocsProgressBar />
       ) : null}
-      <div ref={shadowDomRef} />
+      <div data-testid="techdocs-content-shadowroot" ref={shadowDomRef} />
     </>
   );
 };
diff --git a/plugins/todo/package.json b/plugins/todo/package.json
index d253f18fa6..5a80f068cc 100644
--- a/plugins/todo/package.json
+++ b/plugins/todo/package.json
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@backstage/catalog-model": "^0.7.3",
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/errors": "^0.1.1",
     "@backstage/plugin-catalog-react": "^0.1.1",
     "@backstage/theme": "^0.2.5",
@@ -39,7 +39,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/user-settings/package.json b/plugins/user-settings/package.json
index fde05caee8..6055f31b8a 100644
--- a/plugins/user-settings/package.json
+++ b/plugins/user-settings/package.json
@@ -30,7 +30,7 @@
     "clean": "backstage-cli clean"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -41,7 +41,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/plugins/user-settings/src/components/AuthProviders/EmptyProviders.tsx b/plugins/user-settings/src/components/AuthProviders/EmptyProviders.tsx
index 653f449e92..55c83eff3e 100644
--- a/plugins/user-settings/src/components/AuthProviders/EmptyProviders.tsx
+++ b/plugins/user-settings/src/components/AuthProviders/EmptyProviders.tsx
@@ -22,10 +22,8 @@ const EXAMPLE = `auth:
   providers:
     google:
       development:
-        clientId:
-          $env: AUTH_GOOGLE_CLIENT_ID
-        clientSecret:
-          $env: AUTH_GOOGLE_CLIENT_SECRET
+        clientId: \${AUTH_GOOGLE_CLIENT_ID}
+        clientSecret: \${AUTH_GOOGLE_CLIENT_SECRET}
 `;
 
 export const EmptyProviders = () => (
diff --git a/plugins/welcome/package.json b/plugins/welcome/package.json
index d100bd85b8..aa7a746016 100644
--- a/plugins/welcome/package.json
+++ b/plugins/welcome/package.json
@@ -30,7 +30,7 @@
     "start": "backstage-cli plugin:serve"
   },
   "dependencies": {
-    "@backstage/core": "^0.7.4",
+    "@backstage/core": "^0.7.5",
     "@backstage/theme": "^0.2.5",
     "@material-ui/core": "^4.11.0",
     "@material-ui/icons": "^4.9.1",
@@ -41,7 +41,7 @@
     "react-use": "^15.3.3"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.7",
+    "@backstage/cli": "^0.6.8",
     "@backstage/dev-utils": "^0.1.13",
     "@backstage/test-utils": "^0.1.10",
     "@testing-library/jest-dom": "^5.10.1",
diff --git a/yarn.lock b/yarn.lock
index 50a8214372..0f9f2d6a3c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -81,28 +81,29 @@
   dependencies:
     "@openapi-contrib/openapi-schema-to-json-schema" "^3.0.0"
 
-"@asyncapi/parser@^1.4.0":
-  version "1.4.0"
-  resolved "https://registry.npmjs.org/@asyncapi/parser/-/parser-1.4.0.tgz#a0b0e3cb1803400d93b15f7c354fe95824a36e2c"
-  integrity sha512-rI0UF9niaqUxZqFS2+iBvkekxhI3cXOv/O+i+w/1EhpPppLicPVnazQbBqQ1iO37sio+CPejJbeoBgj8m+ylPw==
+"@asyncapi/parser@^1.4.4":
+  version "1.4.4"
+  resolved "https://registry.npmjs.org/@asyncapi/parser/-/parser-1.4.4.tgz#66f2642e3f9ae4166cdea2480b665250b1edbd59"
+  integrity sha512-HEYEDM0BzfCxXNAv/pIS5yZWe11xB8fQo9G/SmsbpJavOpcF0sVZVIELva/NxHVz/ZUKPMKCa4Gqz7DF/lMqpw==
   dependencies:
     "@apidevtools/json-schema-ref-parser" "^9.0.6"
-    "@asyncapi/specs" "^2.7.6"
+    "@asyncapi/specs" "^2.7.7"
     "@fmvilas/pseudo-yaml-ast" "^0.3.1"
     ajv "^6.10.1"
     js-yaml "^3.13.1"
     json-to-ast "^2.1.0"
+    lodash.clonedeep "^4.5.0"
     node-fetch "^2.6.0"
     tiny-merge-patch "^0.1.2"
 
-"@asyncapi/react-component@^0.19.2":
-  version "0.19.2"
-  resolved "https://registry.npmjs.org/@asyncapi/react-component/-/react-component-0.19.2.tgz#364a1d839e6f49a454fcb44b544f9496d1501b93"
-  integrity sha512-NXLBVaJdXqsIX98tF8fKxjTDf6cE+ym3Fkp3IQhMQh/6o1X2y/YVp+XkjfLO2C/Ccb/Cys1C5OnqipfwEY1oqA==
+"@asyncapi/react-component@^0.22.3":
+  version "0.22.3"
+  resolved "https://registry.npmjs.org/@asyncapi/react-component/-/react-component-0.22.3.tgz#6ea7fb1044308e6d46f8455218920389becf2b22"
+  integrity sha512-f47sboqEQ0jNp0z2A+WGzBYYMS3ASmTwAXG/q6SwLuHBW15bSjaIYOVK3E8bmftBl+wVcEgAqUc6RKGtD9iVJg==
   dependencies:
     "@asyncapi/avro-schema-parser" "^0.2.0"
     "@asyncapi/openapi-schema-parser" "^2.0.0"
-    "@asyncapi/parser" "^1.4.0"
+    "@asyncapi/parser" "^1.4.4"
     constate "^1.2.0"
     dompurify "^2.1.1"
     markdown-it "^11.0.1"
@@ -110,10 +111,10 @@
     openapi-sampler "^1.0.0-beta.15"
     react-use "^12.2.0"
 
-"@asyncapi/specs@^2.7.6":
-  version "2.7.6"
-  resolved "https://registry.npmjs.org/@asyncapi/specs/-/specs-2.7.6.tgz#d04ad015a148cd222f7939b9561360ab903de632"
-  integrity sha512-2IYlLA02beYQKVJVCAqV+G5tXRI4s8yeKYiszuoxS178psdAMKxgXtng8hUYPOqSvU6X4lc+Jabk1zSQFHifVg==
+"@asyncapi/specs@^2.7.7":
+  version "2.7.7"
+  resolved "https://registry.npmjs.org/@asyncapi/specs/-/specs-2.7.7.tgz#10f72c95153a3cc10039f6ba9c3a6f7c3b7fecfc"
+  integrity sha512-z8kj4GDJ640DU4msRsWprvmuC9n7vIeJW+D7Tp1xdefoLX5ZJrK7+4Xruna513wV0fSLpFzCmGz7McEP6CtKDg==
 
 "@azure/abort-controller@^1.0.0":
   version "1.0.2"
@@ -4265,9 +4266,9 @@
     react-lifecycles-compat "^3.0.4"
 
 "@rjsf/core@^2.4.0":
-  version "2.4.0"
-  resolved "https://registry.npmjs.org/@rjsf/core/-/core-2.4.0.tgz#c50bcff0d8178948ce08123177399d8816d51929"
-  integrity sha512-8zlydBkGldOxGXFEwNGFa1gzTxpcxaYn7ofegcu8XHJ7IKMCfpnU3ABg+H3eml1KZCX3FODmj1tHFJKuTmfynw==
+  version "2.5.1"
+  resolved "https://registry.npmjs.org/@rjsf/core/-/core-2.5.1.tgz#95a842d22bab5f83929662fcd73739108e9f5cbb"
+  integrity sha512-km8NYScXNONaL5BiSLS6wyDj49pOLZtn0iXg7Zxlm921uuf3o2AAX5SuZS5kB4Zj2zlrVMrXESexfX6bxdDYHw==
   dependencies:
     "@babel/runtime-corejs2" "^7.8.7"
     "@types/json-schema" "^7.0.4"
@@ -4282,9 +4283,9 @@
     shortid "^2.2.14"
 
 "@rjsf/material-ui@^2.4.0":
-  version "2.4.1"
-  resolved "https://registry.npmjs.org/@rjsf/material-ui/-/material-ui-2.4.1.tgz#b0dedff8877b114147e298966ca3faba895a7a62"
-  integrity sha512-pZaWL5Dw+km8S0hFLIK1lRHaeNtheMxTF2mZrWhf6HlGWCTGkQJnXta2UgshJN/nKtZPgO1L4FKz42Eun9nnhg==
+  version "2.5.1"
+  resolved "https://registry.npmjs.org/@rjsf/material-ui/-/material-ui-2.5.1.tgz#b93ac9f1f4a909e2aae729616859c2d72557e53e"
+  integrity sha512-ooKxQJO12+i1xCGtknMZDxWSbVlSEgQ5U1I7lJ+uI/MvwAg3Rz9wb2cTEF3ErBczT7EEW+j1lR19rxBjFd78MA==
 
 "@roadiehq/backstage-plugin-buildkite@^1.0.0":
   version "1.0.0"
@@ -23441,9 +23442,9 @@ semver@7.0.0:
   integrity sha512-+GB6zVA9LWh6zovYQLALHwv5rb2PHGlJi3lfiqIHxR0uuwCgefcOJc59v9fv1w8GbStwxuuqqAjI9NMAOOgq1A==
 
 semver@7.x, semver@^7.0.0, semver@^7.1.1, semver@^7.1.3, semver@^7.2.1, semver@^7.3.2, semver@^7.3.4:
-  version "7.3.4"
-  resolved "https://registry.yarnpkg.com/semver/-/semver-7.3.4.tgz#27aaa7d2e4ca76452f98d3add093a72c943edc97"
-  integrity sha512-tCfb2WLjqFAtXn4KEdxIhalnRtoKFN7nAwj0B3ZXCbQloV2tq5eDbcTmT68JJD3nRJq24/XgxtQKFIpQdtvmVw==
+  version "7.3.5"
+  resolved "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz#0b621c879348d8998e4b0e4be94b3f12e6018ef7"
+  integrity sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==
   dependencies:
     lru-cache "^6.0.0"