Min Replicas: {value?.minReplicas}
Max Replicas: {value?.maxReplicas}
Current Replicas: {value?.currentReplicas}
Triggers: {value?.triggers?.length}
);
};
```
### Plugin Summary
| Plugin | Purpose | Data Source | Installation |
| -------------------------------------- | --------------------------- | ---------------------------------- | -------------------- |
| **@backstage/plugin-kubernetes** | Pod/Deployment status | Kubernetes API | Official |
| **@roadiehq/backstage-plugin-argo-cd** | Sync status, deploy history | ArgoCD API | Community (Roadie) |
| **@kubecost/backstage-plugin** | Per-service cost breakdown | Kubecost API | Community (Kubecost) |
| **Custom KEDA Plugin** | Autoscaler status | Kubernetes API (keda.sh CRDs) | Custom build |
| **Custom Karpenter Plugin** | Node provisioning status | Kubernetes API (karpenter.sh CRDs) | Custom build |
| **@backstage/plugin-techdocs** | Documentation viewer | S3 / GCS | Official |
| **@backstage/plugin-github-actions** | CI pipeline status | GitHub API | Official |
***
## RBAC and Governance
### Permission Framework Overview
Backstage には、カタログエンティティ、templates、プラグイン機能へのアクセスを制御する組み込みの permission framework があります。permission system はポリシーベースで、カタログの所有権モデルと統合されます。
```mermaid
graph LR
Request["User Request"] --> Policy["Permission Policy"]
Policy --> Decision{"Allow / Deny / Conditional"}
Decision -->|Allow| Action["Execute Action"]
Decision -->|Deny| Reject["403 Forbidden"]
Decision -->|Conditional| Filter["Filter Results"]
Catalog["Catalog Ownership"] --> Policy
Groups["Group Membership"] --> Policy
```
### Enabling the Permission Framework
```yaml
# app-config.yaml
permission:
enabled: true
```
### Team-Based Access Control
所有権ベースのアクセスを強制するカスタム permission policy を実装します。
```typescript
// packages/backend/src/plugins/permission.ts
import {
PolicyDecision,
AuthorizeResult,
isPermission,
} from '@backstage/plugin-permission-common';
import {
PermissionPolicy,
PolicyQuery,
} from '@backstage/plugin-permission-node';
import {
catalogEntityDeletePermission,
catalogEntityCreatePermission,
} from '@backstage/plugin-catalog-common/alpha';
import {
createCatalogConditionalDecision,
catalogConditions,
} from '@backstage/plugin-catalog-backend/alpha';
import { BackstageIdentityResponse } from '@backstage/plugin-auth-node';
import { createBackendModule } from '@backstage/backend-plugin-api';
import { policyExtensionPoint } from '@backstage/plugin-permission-node/alpha';
class TeamBasedPermissionPolicy implements PermissionPolicy {
async handle(
request: PolicyQuery,
user?: BackstageIdentityResponse,
): Promise