feat: native support for plugins

plugins/Dockerfile

@@ -0,0 +1,13 @@
+FROM cgr.dev/chainguard/busybox:latest
+
+# renovate: datasource=github-tags depName=mattermost/mattermost-plugin-ai versioning=semver
+ENV MATTERMOST_AI_PLUGIN_VERSION=0.8.2
+# renovate: datasource=github-tags depName=mattermost/mattermost-plugin-gitlab versioning=semver
+ENV MATTERMOST_GITLAB_PLUGIN_VERSION=1.9.1
+
+USER root
+
+ADD https://github.com/mattermost/mattermost-plugin-ai/releases/download/v$MATTERMOST_AI_PLUGIN_VERSION/mattermost-plugin-ai-v$MATTERMOST_AI_PLUGIN_VERSION-linux-amd64.tar.gz /extra-plugins/
+ADD https://github.com/mattermost/mattermost-plugin-gitlab/releases/download/v$MATTERMOST_GITLAB_PLUGIN_VERSION/com.github.manland.mattermost-plugin-gitlab-$MATTERMOST_GITLAB_PLUGIN_VERSION.tar.gz /extra-plugins/
+
+RUN chmod -R 777 /extra-plugins/*.tar.gz

plugins/ai.melange.yaml

@@ -0,0 +1,50 @@
+package:
+  name: mattermost-plugin-ai
+  version: 0.8.1
+  epoch: 0
+  description: Mattermost plugin for LLMs
+  copyright:
+    - license: Apache-2.0
+  target-architecture:
+    - x86_64
+    - aarch64
+
+environment:
+  contents:
+    keyring:
+      - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
+    repositories:
+      - https://packages.wolfi.dev/os
+    packages:
+      - build-base
+      - busybox
+      - ca-certificates-bundle
+      - openssl-dev
+      - libelf
+      - go
+      - nodejs
+      - npm
+      - make
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/mattermost/mattermost-plugin-ai
+      tag: v${{package.version}}
+      expected-commit: 118283adf71b6f7f48c9c7689f5b49fdb4e2a898
+
+  - runs: |
+      # only build for current architecture (default is all)
+      export MM_SERVICESETTINGS_ENABLEDEVELOPER=1
+
+      make dist
+
+      mv dist/ "${{ targets.destdir }}"
+
+update:
+  enabled: true
+  github:
+    identifier: mattermost/mattermost-plugin-ai
+    strip-prefix: v
+    use-tag: true
+    tag-filter: v

plugins/gitlab.melange.yaml

@@ -0,0 +1,53 @@
+package:
+  name: mattermost-plugin-gitlab
+  version: 1.9.1
+  epoch: 0
+  description: A GitLab plugin for Mattermost.
+  copyright:
+    - license: Apache-2.0
+  target-architecture:
+    - x86_64
+    - aarch64
+
+environment:
+  contents:
+    keyring:
+      - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
+    repositories:
+      - https://packages.wolfi.dev/os
+    packages:
+      - build-base
+      - busybox
+      - ca-certificates-bundle
+      - openssl-dev
+      - libelf
+      - go
+      - nodejs
+      - npm
+      - make
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/mattermost/mattermost-plugin-gitlab
+      tag: v${{package.version}}
+      expected-commit: 69ab85a2bc2ca0ba22242d4d0e9d33bd695a2edb
+
+  - runs: |
+      # only build for current architecture (default is all)
+      export MM_SERVICESETTINGS_ENABLEDEVELOPER=1
+
+      # webpack `ERR_OSSL_EVP_UNSUPPORTED` (Error: error:0308010C:digital envelope routines::unsupported)
+      export NODE_OPTIONS=--openssl-legacy-provider
+
+      make dist
+
+      mv dist/ "${{ targets.destdir }}"
+
+update:
+  enabled: true
+  github:
+    identifier: mattermost/mattermost-plugin-gitlab
+    strip-prefix: v
+    use-tag: true
+    tag-filter: v

values/common-values.yaml

@@ -2,6 +2,10 @@ minio:
   enabled: false
 mysqlha:
   enabled: false
+# TODO @marshall007: this should work pending: https://github.com/chainguard-images/images/issues/923#issuecomment-2181155300
+# initContainerImage:
+#   repository: cgr.dev/chainguard/curl
+#   tag: latest
 mattermostApp:
   # Default replicacount due to HA requiring a license
   replicaCount: 1
@@ -25,6 +29,47 @@ mattermostApp:
   securityContext:
     runAsUser: 2000
     runAsGroup: 2000
+  extraVolumes:
+    - name: mattermost-plugins-init
+      emptyDir: {}
+  extraInitContainers:
+    # Extra Container to install plugins
+    - name: init-plugins-config
+      image: uds-package-mattermost/mattermost-extra-plugins:latest
+      imagePullPolicy: Always
+      command:
+        - sh
+        - "-c"
+        - |
+          set -e
+
+          PLUGINS_TAR=$(ls /extra-plugins)
+
+          cd /mattermost/plugins/
+
+          for plugin_tar in ${PLUGINS_TAR};
+          do
+            plugin_tar="/extra-plugins/${plugin_tar##*/}"
+            echo "extracting $plugin_tar ..."
+            tar -xf $plugin_tar
+          done
+
+          echo "finished loading plugins"
+      volumeMounts:
+        # Must match plugins volumes from chart
+
+        # In mattermost-team-edition chart, this is `/mattermost/$MM_PLUGINSETTINGS_CLIENTDIRECTORY`
+        # see: https://github.com/mattermost/mattermost-helm/blob/master/charts/mattermost-team-edition/templates/deployment.yaml#L103-L104
+
+        # In mattermost-enterprise-edition chart, it is hardcoded to `/mattermost/plugins/`
+        # see: https://github.com/mattermost/mattermost-helm/blob/master/charts/mattermost-enterprise-edition/templates/deployment-mattermost-app.yaml#L174-L177
+
+        # TODO @marshall007: only mattermost-team-edition chart supports plugin persistence. `emptyDir` may cause problems on EE, will need to investigate
+        # see: https://github.com/mattermost/mattermost-helm/blob/master/charts/mattermost-team-edition/templates/deployment.yaml#L123-L133
+        - name: mattermost-plugins
+          mountPath: /mattermost/plugins/
+        - name: mattermost-plugins-client
+          mountPath: /mattermost/client/plugins/
 
 serviceAccount:
   create: true

zarf.yaml

@@ -21,6 +21,17 @@ variables:
     description: "Database Password for Mattermost"
 
 components:
+  - name: mattermost-plugins
+    required: true
+    images:
+      - uds-package-mattermost/mattermost-extra-plugins:latest
+    actions:
+      onCreate:
+        before:
+          - dir: plugins
+            cmd: |
+              docker build . -t uds-package-mattermost/mattermost-extra-plugins:latest
+
   - name: mattermost
     required: true
     description: "Deploy Mattermost"