From 21557ef3ecea41a10c9727f11e0da6a9edfe7172 Mon Sep 17 00:00:00 2001 From: David Tuite Date: Thu, 31 Aug 2023 14:00:56 +0100 Subject: [PATCH] Admin security clarity (#1110) * Add clarity on Roadie RBAC feature * Merge lastUpdated into publishedDate lastUpdated doesn't work on docs anyway. It doesn't show anywhere. --- content/docs/details/allowlisting-roadie-traffic/index.md | 3 +-- content/docs/details/backend-reading-allow-list/index.md | 3 +-- content/docs/getting-started/create-admin-group/index.md | 4 +++- content/docs/getting-started/openapi-specs/index.md | 3 +-- content/docs/integrations/github-discovery/index.md | 3 +-- content/docs/integrations/initial-github-discovery/index.md | 1 - 6 files changed, 7 insertions(+), 10 deletions(-) diff --git a/content/docs/details/allowlisting-roadie-traffic/index.md b/content/docs/details/allowlisting-roadie-traffic/index.md index 9d0f1d635..bd4d91c7e 100644 --- a/content/docs/details/allowlisting-roadie-traffic/index.md +++ b/content/docs/details/allowlisting-roadie-traffic/index.md @@ -1,7 +1,6 @@ --- title: Allowlisting Roadie Traffic -publishedDate: '2021-03-18T21:00:00.0Z' -lastUpdated: '2022-03-25T08:33:00.0Z' +publishedDate: '2022-03-25T08:33:00.0Z' description: In order to access Roadie, your IT department may need to allowlist certain IPs and hostnames. --- diff --git a/content/docs/details/backend-reading-allow-list/index.md b/content/docs/details/backend-reading-allow-list/index.md index aac9e5a60..d5a5b4067 100644 --- a/content/docs/details/backend-reading-allow-list/index.md +++ b/content/docs/details/backend-reading-allow-list/index.md @@ -1,7 +1,6 @@ --- title: Accessing Public resources from the Backend -publishedDate: '2021-04-26T21:00:00.0Z' -lastUpdated: '2022-04-26T08:33:00.0Z' +publishedDate: '2022-04-26T08:33:00.0Z' description: The Backstage backend restricts what resources can be fetched by default. This describes how to add sources which can be accessed. --- diff --git a/content/docs/getting-started/create-admin-group/index.md b/content/docs/getting-started/create-admin-group/index.md index 45db8de8d..9bafc7d0d 100644 --- a/content/docs/getting-started/create-admin-group/index.md +++ b/content/docs/getting-started/create-admin-group/index.md @@ -1,6 +1,6 @@ --- title: Designating admins -publishedDate: '2022-03-21T21:00:00.0Z' +publishedDate: '2023-08-31' description: How to designate yourself as an admin of Roadie Backstage. --- @@ -10,6 +10,8 @@ You often want to allow power users to edit the layouts and install plugins whil ordinary users from making unintended changes to the application setup. Roadie Backstage has a concept of admins to enable this. This uses a Group entity in the catalog and users associated with that group are "admins". +⚠️ Roadies admins are a conveniece feature rather than a security feature. Admins have no ability to read secrets or access other secure information inside Roadie. + ## Setup You can set up this group and its associated users manually by defining the group as a normal backstage entity and loading diff --git a/content/docs/getting-started/openapi-specs/index.md b/content/docs/getting-started/openapi-specs/index.md index 5632c4cdf..9610715e8 100644 --- a/content/docs/getting-started/openapi-specs/index.md +++ b/content/docs/getting-started/openapi-specs/index.md @@ -1,7 +1,6 @@ --- title: Using OpenAPI Specs -publishedDate: '2021-03-16T21:00:00.0Z' -lastUpdated: '2022-11-16' +publishedDate: '2022-11-16' description: How to use OpenAPI specs with Roadie Backstage. --- diff --git a/content/docs/integrations/github-discovery/index.md b/content/docs/integrations/github-discovery/index.md index 7eb1470a7..99549f8e1 100644 --- a/content/docs/integrations/github-discovery/index.md +++ b/content/docs/integrations/github-discovery/index.md @@ -1,8 +1,7 @@ --- title: Configuring auto discovery for your organization -publishedDate: '2022-05-10T12:14:39.0Z' +publishedDate: '2022-08-31T14:20:39.0Z' description: How to configure backstage to read catalog files on github -lastUpdated: '2022-08-31T14:20:39.0Z' humanName: GitHub Discovery logoImage: '../../../assets/logos/github/mark/official/PNG/GitHub-Mark-120px-plus.png' diff --git a/content/docs/integrations/initial-github-discovery/index.md b/content/docs/integrations/initial-github-discovery/index.md index 0d5ab997d..60fe8172c 100644 --- a/content/docs/integrations/initial-github-discovery/index.md +++ b/content/docs/integrations/initial-github-discovery/index.md @@ -1,7 +1,6 @@ --- title: Performing a sync with your GitHub for your catalog files publishedDate: '2022-08-23' -lastUpdated: '2022-08-23' description: How to perform a sync between roadie's catalog and your GitHub organisation humanName: Github Discovery Sync