Skip to main content

Permissions

The Kubernetes plugin integrates with the permission framework. Administrators can define PermissionPolicies to restrict access to the /clusters, /services/:serviceId, /resources and /proxy endpoints.

This feature assumes your Backstage instance has enabled the permissions framework.

Available permissions

NamePolicyDescription
kubernetes.clusters.readreadAllows the user to read Kubernetes clusters information under /clusters
kubernetes.resources.readreadAllows the user to read Kubernetes resources information under /services/:serviceId and /resources
kubernetes.proxyAllows the user to make arbitrary requests to the REST API under /proxy