refactor(grafanaplane): split modules into directories and add new ProviderConfig helpers (#105)

* refactor(grafanaplane): split oss.libsonnet into oss/ directory

Split the monolithic oss.libsonnet into separate files per top-level
group, matching the established pattern from oncall/ and alerting/:
- oss/main.libsonnet (entry point)
- oss/team.libsonnet
- oss/folder.libsonnet
- oss/folderpermission.libsonnet
- oss/dashboard.libsonnet
- oss/datasource.libsonnet

* refactor(grafanaplane): split enterprise.libsonnet into enterprise/ directory

Split the monolithic enterprise.libsonnet into separate files per
top-level group, matching the established pattern:
- enterprise/main.libsonnet (entry point)
- enterprise/role.libsonnet
- enterprise/roleassignment.libsonnet

The doc headings now use fully qualified package names (enterprise.role,
enterprise.roleAssignment) consistent with other split modules.

* refactor(grafanaplane): split cloud.libsonnet into cloud/ directory

Split the monolithic cloud.libsonnet into separate files per top-level
group, matching the established pattern:
- cloud/main.libsonnet (entry point)
- cloud/stack.libsonnet
- cloud/stackserviceaccount.libsonnet
- cloud/stackserviceaccounttoken.libsonnet
- cloud/accesspolicy.libsonnet
- cloud/accesspolicytoken.libsonnet

Cross-references that previously used 'local root = self' now use
'local main = import ./main.libsonnet' to access sibling groups.

* refactor(grafanaplane): split sm.libsonnet into sm/ directory

Split the monolithic sm.libsonnet into separate files per top-level
group, matching the established pattern:
- sm/main.libsonnet (entry point)
- sm/check.libsonnet (with nested settings.http and settings.grpc)

* feat(grafanaplane): add namespaced and cluster ProviderConfig helpers

Split global.libsonnet into global/ directory (matching the pattern used
by cloud/, oss/, etc.) and add ClusterProviderConfig and namespaced
ProviderConfig helpers using the crossplane-provider-grafana-libsonnet
vendored library.

Author: Duologic

docs/README.md

@@ -24,10 +24,10 @@ local grafanaplane = import 'github.com/grafana/grafana-crossplane-libsonnet/gra
 ## Subpackages
 
 * [alerting](alerting/index.md)
-* [cloud](cloud.md)
+* [cloud](cloud/index.md)
 * [configurations](configurations.md)
 * [enterprise](enterprise/index.md)
-* [global](global.md)
+* [global](global/index.md)
 * [oncall](oncall/index.md)
 * [oss](oss/index.md)
 * [raw](raw/index.md)

docs/cloud.md

@@ -0,0 +1,89 @@
+# cloud.accessPolicy
+
+
+
+## Index
+
+* [`fn addToken(secretName, secretNamespace)`](#fn-addtoken)
+* [`fn forOrg(name, namespace, scopes)`](#fn-fororg)
+* [`fn forStackResource(stackResource, namespace)`](#fn-forstackresource)
+* [`fn new(name, namespace, scopes)`](#fn-new)
+* [`fn withStack(id, region)`](#fn-withstack)
+
+## Fields
+
+### fn addToken
+
+```jsonnet
+addToken(secretName, secretNamespace)
+```
+
+PARAMETERS:
+
+* **secretName** (`string`)
+* **secretNamespace** (`string`)
+
+`addToken` creates a new Access Policy Token under this Access Policy, the token will be available in the provider secret.
+
+### fn forOrg
+
+```jsonnet
+forOrg(name, namespace, scopes)
+```
+
+PARAMETERS:
+
+* **name** (`string`)
+* **namespace** (`string`)
+* **scopes** (`array`)
+
+`forOrg` configures the `realm` to an org `slug`.
+
+### fn forStackResource
+
+```jsonnet
+forStackResource(stackResource, namespace)
+```
+
+PARAMETERS:
+
+* **stackResource** (`string`)
+* **namespace** (`string`)
+
+`forStackResource` configures the `realm` for a `stackResource`.
+
+ The `stackResource` is in the `stack` key returned by `cloud.stack.new()`.
+
+### fn new
+
+```jsonnet
+new(name, namespace, scopes)
+```
+
+PARAMETERS:
+
+* **name** (`string`)
+* **namespace** (`string`)
+* **scopes** (`array`)
+
+`new` creates a new Access Policy.
+
+For `scopes`, see https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/#scopes for possible values.
+
+A valid Access Policy also needs a `realm`, use one of the following functions:
+- `withStack`: reference a stack by its identifier (id).
+- `forStackResource`: reference a stack by a Crossplane resource.
+- `forOrg`: set realm to org level
+
+### fn withStack
+
+```jsonnet
+withStack(id, region)
+```
+
+PARAMETERS:
+
+* **id** (`string`)
+* **region** (`string`)
+
+`withStack` configures the `realm` to a stack `id`.

docs/cloud/accessPolicy.md

@@ -0,0 +1,56 @@
+# cloud.accessPolicyToken
+
+
+
+## Index
+
+* [`fn forAccessPolicyResource(accessPolicyResource)`](#fn-foraccesspolicyresource)
+* [`fn new(secretName, secretNamespace)`](#fn-new)
+* [`fn withAccessPolicyId(id)`](#fn-withaccesspolicyid)
+
+## Fields
+
+### fn forAccessPolicyResource
+
+```jsonnet
+forAccessPolicyResource(accessPolicyResource)
+```
+
+PARAMETERS:
+
+* **accessPolicyResource** (`object`)
+
+`forAccessPolicyResource` configures the Access Policy` for a `accessPolicyResource`.
+
+ The `accessPolicyResource` is in the `accessPolicy` key returned by `cloud.accessPolicy.new()`.
+
+### fn new
+
+```jsonnet
+new(secretName, secretNamespace)
+```
+
+PARAMETERS:
+
+* **secretName** (`string`)
+* **secretNamespace** (`string`)
+
+`new` creates a new Access Policy Token.
+
+Tip: use `accessPolicy.addToken()` to automatically link the token to the right Access Policy.
+
+A valid Access Policy Token also needs an Access Policy, use one of the following functions:
+- `withAccessPolicyId`: reference a policy by its identifier (id)
+- `forAccessPolicyResource`: reference a policy by a Crossplane resource.
+
+### fn withAccessPolicyId
+
+```jsonnet
+withAccessPolicyId(id)
+```
+
+PARAMETERS:
+
+* **id** (`string`)
+
+`withAccessPolicyId` configures the Access Policy to a policy `id`.

docs/cloud/accessPolicyToken.md

@@ -0,0 +1,11 @@
+# cloud
+
+
+
+## Subpackages
+
+* [accessPolicy](accessPolicy.md)
+* [accessPolicyToken](accessPolicyToken.md)
+* [stack](stack.md)
+* [stackServiceAccount](stackServiceAccount.md)
+* [stackServiceAccountToken](stackServiceAccountToken.md)