Adds code comments, updates Makefile.config.example

Makefile.config.example

@@ -3,6 +3,9 @@
 
 GITHUB_TOKEN := ${github_personal_token}
 CREATE_I18N_PLACEHOLDERS:= false
+PULL_RBAC_PERMISSIONS := true
+DD_API_KEY := ${datadog_api_key}
+DD_APP_KEY := ${datadog_application_key}
 RUN_SERVER := true
 RUN_WEBPACK := true
 CONFIGURATION_FILE := "./local/bin/py/build/configurations/pull_config_preview.yaml"

layouts/partials/rbac-permissions-table.html

@@ -1,3 +1,5 @@
+{{/* Scopable columns may be refactored or moved to a different page later, but should remain hardcoded for now. */}}
+
 {{ $scopable_permissions := slice "logs_read_data" "logs_write_exclusion_filters" "logs_write_processors" "logs_read_archives" "logs_read_index_data" }}
 {{ $is_scopable := false }}
 {{ $hide_scopable_column := false }}
@@ -48,7 +50,7 @@
 {{/* Harcoding the legacy logs section until deprecation */}}
 {{ if eq $permission_group "Logs" }}
   Log Management RBAC also includes two legacy permissions, superseded by finer-grained and more extensive <code>logs_read_data</code> permission:
-  
+
   <table>
     <thead>
       <tr>

layouts/shortcodes/permissions.html

@@ -1,6 +1,8 @@
 {{ $permissions_data := $.Site.Data.permissions }}
 {{ $single_permission_group := .Get "group" }}
 
+{{/* Passing a single permission group name allows us to render one set of permissions at a time.   Currently this is used to separate General from Advanced Permissions on the account_management/rbac/permissions page, but could be re-used elsewhere in the future. */}}
+
 {{ if ne $single_permission_group nil }}
   {{ $permissions_data := index $permissions_data $single_permission_group }}
   {{ partial "rbac-permissions-table.html" (dict "data" $permissions_data "group" $single_permission_group) }}