[BACK-3295] Implement private plugin functionality in platform

.dockerignore

@@ -22,7 +22,10 @@ coverprofile.out
 /_data/
 /_log/
 /_tmp/
-/deploy/
 
 # Development environments
+/.gvm_local
 /.idea
+
+# Travis CI
+mongod.log

.gitignore

@@ -5,6 +5,10 @@
 *.env
 .envrc
 
+# Go
+go.work
+go.work.sum
+
 # Debug binaries
 debug
 __debug_bin*
@@ -22,7 +26,10 @@ coverprofile.out
 /_data/
 /_log/
 /_tmp/
-/deploy/
 
 # Development environments
+/.gvm_local
 /.idea
+
+# Travis CI
+mongod.log

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "private/plugin/redwood"]
+	path = private/plugin/redwood
+	url = https://github.com/tidepool-org/platform-plugin-redwood
+	update = none

.travis.yml

@@ -1,17 +1,19 @@
+os: linux
+
 dist: jammy
 
 language: go
 
 go:
-  - 1.22.2
+  - 1.23.4
 
 services:
   - docker
 
 env:
   global:
-    - MONGODB=6.0.14
-    - MONGOSH=2.2.3
+    - MONGODB=6.0.19
+    - MONGOSH=2.3.7
 
 cache:
   directories:
@@ -21,7 +23,7 @@ before_install:
   - sudo apt-get update
   - sudo apt-get install --allow-downgrades -y docker-buildx-plugin mongodb-org=${MONGODB} mongodb-org-database=${MONGODB} mongodb-org-server=${MONGODB} mongodb-mongosh=${MONGOSH} mongodb-org-mongos=${MONGODB} mongodb-org-tools
   - mkdir /tmp/data
-  - /usr/bin/mongod --dbpath /tmp/data --bind_ip 127.0.0.1 --replSet rs0 --logpath ${PWD}/mongod.log &> /dev/null &
+  - /usr/bin/mongod --dbpath /tmp/data --bind_ip 127.0.0.1 --replSet rs0 --logpath /tmp/mongod.log &> /dev/null &
   - until nc -z localhost 27017; do echo Waiting for MongoDB; sleep 1; done
   - /usr/bin/mongosh --eval 'rs.initiate(); while (rs.status().startupStatus || (rs.status().hasOwnProperty("myState") && rs.status().myState != 1)) { printjson( rs.status() ); sleep(1000); }; printjson( rs.status() );'
 
@@ -30,14 +32,6 @@ addons:
     sources:
       - sourceline: 'deb https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/6.0 multiverse'
         key_url: 'https://pgp.mongodb.com/server-6.0.asc'
-  artifacts:
-    s3_region: us-west-2
-    paths:
-      - $(git ls-files -o deploy/*/*-*.tar.gz | tr "\n" ":")
-    target_paths:
-      - /
-  code_climate:
-    repo_token: 91ded9b66924acbe830541ab3593daf535f05f7c6db91b5cbd2d26dcf37da0b8
 
 script:
-  - make ci-generate ci-build go-ci-test ci-deploy ci-docker TIMING_CMD="time -p"
+  - make plugins-visibility-public && make ci && make plugins-visibility-private && make ci

Dockerfile.auth

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=services/auth
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/services/auth/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/services/auth/ .
 CMD ["./auth"]

Dockerfile.blob

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=services/blob
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/services/blob/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/services/blob/ .
 CMD ["./blob"]

Dockerfile.data

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=services/data
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/services/data/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/services/data/ .
 CMD ["./data"]

Dockerfile.migrations

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=migrations
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/migrations/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/migrations/ .
 CMD ["./migrations"]

Dockerfile.prescription

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=services/prescription
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/services/prescription/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/services/prescription/ .
 CMD ["./prescription"]

Dockerfile.task

@@ -1,25 +1,22 @@
 # Development
-FROM golang:1.22.2-alpine AS development
-WORKDIR /go/src/github.com/tidepool-org/platform
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk --no-cache add make git ca-certificates tzdata && \
-    go install github.com/githubnemo/CompileDaemon@v1.4.0 && \
-    adduser -D tidepool && \
-    chown -R tidepool /go/src/github.com/tidepool-org/platform
+FROM golang:1.23.4-alpine AS development
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata git make
+RUN [ ! -d /go/pkg/mod ] || chmod -R go+w /go/pkg/mod
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --chown=tidepool . .
+WORKDIR /go/src/github.com/tidepool-org/platform
+COPY --chown=tidepool:tidepool . .
+RUN ["make", "CompileDaemon"]
+RUN ["make", "plugins-visibility"]
+RUN ["make", "services-build-common"]
 ENV SERVICE=services/task
-RUN ["make", "service-build"]
 CMD ["make", "service-start"]
 
 # Production
 FROM alpine:latest AS production
-RUN apk --no-cache update && \
-    apk --no-cache upgrade && \
-    apk add --no-cache ca-certificates tzdata && \
-    adduser -D tidepool
-WORKDIR /home/tidepool
+RUN apk --no-cache update && apk --no-cache upgrade && apk --no-cache add ca-certificates tzdata
+RUN adduser --disabled-password tidepool
 USER tidepool
-COPY --from=development --chown=tidepool /go/src/github.com/tidepool-org/platform/_bin/services/task/ .
+WORKDIR /home/tidepool
+COPY --from=development --chown=tidepool:tidepool /go/src/github.com/tidepool-org/platform/_bin/services/task/ .
 CMD ["./task"]