feat: setup configuration for private plugin signin

Reword the RELEASING instructions to reflect latest token updates and
provide a signin token and root url for our organization

.github/workflows/release.yml

@@ -12,6 +12,7 @@ jobs:
       # usage of GRAFANA_API_KEY is deprecated
       # GRAFANA_API_KEY: ${{ secrets.GRAFANA_API_KEY }}
       GRAFANA_ACCESS_POLICY_TOKEN: ${{ secrets.GRAFANA_ACCESS_POLICY_TOKEN }}
+      ROOT_URLS: ${{ secrets.ROOT_URLS }}
     steps:
       - uses: actions/checkout@v3
       - name: Setup Node.js environment
@@ -60,7 +61,7 @@ jobs:
         if: ${{ env.GRAFANA_ACCESS_POLICY_TOKEN == '' }}
 
       - name: Sign plugin
-        run: npm run sign
+        run: npm run sign -- --rootUrls ${ROOT_URLS}
         if: ${{ env.GRAFANA_ACCESS_POLICY_TOKEN != '' }}
 
       - name: Get plugin metadata

CHANGELOG.md

@@ -3,3 +3,7 @@
 ## 0.0.1 (Unreleased)
 
 Initial release.
+
+## 0.0.2 (Unreleased)
+
+Private plugin signing procedure

RELEASING.md

@@ -15,8 +15,9 @@ Before signing a plugin for the first time please consult the Grafana [plugin si
 1. Create a [Grafana Cloud account](https://grafana.com/signup).
 2. Make sure that the first part of the plugin ID matches the slug of your Grafana Cloud account.
    - _You can find the plugin ID in the `plugin.json` file inside your plugin directory. For example, if your account slug is `acmecorp`, you need to prefix the plugin ID with `acmecorp-`._
-3. Create a Grafana Cloud API key with the `PluginPublisher` role.
-4. Keep a record of this API key as it will be required for signing a plugin.
+3. Create a Grafana Cloud Access policy with the `plugins:write` scope.
+4. Create an Access Token for this Access policy
+5. Keep a record of this token as it will be required for signing a plugin.
 
 ## Signing a plugin
 
@@ -26,8 +27,8 @@ If the plugin is using the GitHub actions supplied with `@grafana/create-plugin`
 
 1. Please navigate to "settings > secrets > actions" within your repo to create secrets.
 2. Click "New repository secret"
-3. Name the secret "GRAFANA_API_KEY"
-4. Paste your Grafana Cloud API key in the Secret field
+3. Name the secret "GRAFANA_ACCESS_POLICY_TOKEN"
+4. Paste your Grafana Cloud Access token in the Secret field
 5. Click "Add secret"
 
 #### Push a version tag