Backstage plugins

Setting up widely used third-party and community Backstage plugins that connect the portal to delivery, incident, quality and cost tools, and vetting plugins before installing them.

Backstage Argo CD plugin setup

Showing Argo CD sync and health status on Backstage entity pages: the Roadie and Red Hat plugin options, connecting to one or several Argo CD instances, linking applications to entities and credential handling.

Backstage SonarQube plugin for code quality

Displaying SonarQube quality gates and metrics per component: the community plugin, the sonarqube.org/project-key annotation, connecting to SonarQube Server, and keeping the token out of the frontend.

Backstage Jenkins plugin for build status

Showing Jenkins job status and history on entity pages: the community plugin, the jenkins.io/job-full-name annotation, multiple Jenkins instances and API token scope.

Backstage GitHub Actions plugin

Viewing and re-running GitHub Actions workflows from Backstage: the Spotify-maintained plugin, the github.com/project-slug annotation, and user OAuth tokens versus a shared credential.

Backstage Tech Radar plugin

Publishing an internal technology radar in Backstage: the Spotify Tech Radar plugin, where radar data comes from, and keeping it current through a review process.

Backstage Vault plugin for secrets visibility

Listing secrets paths for a component from HashiCorp Vault or OpenBao with the vault.io/secrets-path annotation, what the plugin shows and does not show, and the token policy it needs.

Backstage Tekton pipelines plugin

Showing Tekton PipelineRuns for a component from Kubernetes clusters with the Red Hat plugin, and how it relies on the Kubernetes plugin's cluster configuration.

Choosing and vetting third-party Backstage plugins

A checklist before installing a plugin: who maintains it, whether it lives in community-plugins or a vendor repository, release activity, the permissions and credentials it needs, and why plugins run unsandboxed.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.