CircleCI: Enable plug-in signing (#24240)

* CircleCI: Include signed manifest when building plug-ins

.circleci/config.yml

@@ -54,7 +54,7 @@ commands:
       - run:
           name: "Install Grafana build pipeline tool"
           command: |
-            VERSION=0.4.3
+            VERSION=0.4.4
             curl -fLO https://grafana-downloads.storage.googleapis.com/grafana-build-pipeline/v${VERSION}/grabpl
             chmod +x grabpl
             mv grabpl /tmp
@@ -192,7 +192,13 @@ jobs:
       - run:
           name: Build internal Grafana plug-ins
           command: |
-            /tmp/grabpl build-plugins --jobs 2 --edition << parameters.edition >>
+            if [[ -n "$CIRCLE_PR_NUMBER" ]]; then
+              # This is a forked PR, so don't sign as it requires an API secret
+              /tmp/grabpl build-plugins --jobs 2 --edition << parameters.edition >>
+            else
+              export GRAFANA_API_KEY=$GRAFANA_COM_API_KEY
+              /tmp/grabpl build-plugins --jobs 2 --edition << parameters.edition >> --sign --signing-admin
+            fi
       - run:
           name: Move artifacts
           command: |

plugins-bundled/internal/input-datasource/src/plugin.json

@@ -7,6 +7,7 @@
   "metrics": true,
 
   "info": {
+    "version": "1.0.0",
     "description": "Data source that supports manual table & CSV input",
     "author": {
       "name": "Grafana Labs",