ci: Uses reusable platform starter

.github/workflows/build.yaml

@@ -156,15 +156,10 @@ jobs:
         with:
           name: opentdf-ctl
           path: cli/
-      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
+      - name: Start up the platform with deps and containers
+        uses: opentdf/platform/test/start-up-with-containers@main
         with:
-          go-version: '1.22'
-      - name: Git clone backend
-        run: |
-          git clone --depth 1 https://github.com/opentdf/platform.git
-          go work init
-          for x in platform/{protocol/go,lib/{fixtures,ocrypto},sdk,service}; do go work use "$x"; done
-      - run: docker compose up -d --wait --wait-timeout 240
+          platform-ref: 'main'
       - env:
           PLAYWRIGHT_TESTS_TO_RUN: roundtrip
         run: |-

.github/workflows/roundtrip/config-demo-idp.sh

@@ -3,6 +3,8 @@
 set -x
 
 : "${KC_VERSION:=24.0.3}"
+: "${DEMO_KC_SERVER:=http://localhost:65432/auth}"
+: "${DEMO_WEB_APP_URI:=http://localhost:65432/}"
 
 if ! which kcadm.sh; then
   KCADM_URL=https://github.com/keycloak/keycloak/releases/download/${KC_VERSION}/keycloak-${KC_VERSION}.zip
@@ -26,13 +28,13 @@ if ! which kcadm.sh; then
   fi
 fi
 
-kcadm.sh config credentials --server http://localhost:65432/auth \
+kcadm.sh config credentials --server "${DEMO_KC_SERVER}" \
   --realm master --user admin --password changeme
 
 kcadm.sh create clients -r opentdf \
   -s clientId=browsertest \
   -s enabled=true \
-  -s 'redirectUris=["http://localhost:65432/"]' \
+  -s 'redirectUris=["'"${DEMO_WEB_APP_URI}"'"]' \
   -s consentRequired=false \
   -s standardFlowEnabled=true \
   -s directAccessGrantsEnabled=true \

.github/workflows/roundtrip/encrypt-decrypt.sh

@@ -3,6 +3,11 @@ set -exuo pipefail
 
 APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null && pwd)"
 
+: "${DEMO_KAS_ALLOWLIST:=http://localhost:65432}"
+: "${DEMO_OIDC_ENDPOINT:=http://localhost:65432/auth/realms/tdf}"
+: "${DEMO_KAS_URI:=http://localhost:65432/api/kas}"
+: "${DEMO_WEB_APP_URI:=http://localhost:65432/}"
+
 cd "$APP_DIR"
 
 counter=0
@@ -12,9 +17,9 @@ _nano_test() {
   plain="./sample-${counter}.txt"
   echo "Hello World ${counter}" >"./${plain}"
   npx "$1" --log-level DEBUG \
-    --kasEndpoint http://localhost:65432/api/kas \
-    --allowList http://localhost:65432 \
-    --oidcEndpoint http://localhost:65432/auth/realms/tdf \
+    --kasEndpoint "${DEMO_KAS_URI}" \
+    --allowList "${DEMO_KAS_ALLOWLIST}" \
+    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
     --auth tdf-client:123-456 \
     --output sample.txt.ntdf \
     encrypt "${plain}" \
@@ -23,8 +28,8 @@ _nano_test() {
   [ -f sample.txt.ntdf ]
 
   npx "$2" --log-level DEBUG \
-    --kasEndpoint http://localhost:65432/api/kas \
-    --oidcEndpoint http://localhost:65432/auth/realms/tdf \
+    --kasEndpoint "${DEMO_KAS_URI}" \
+    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
     --auth tdf-client:123-456 \
     --output sample_out.txt \
     decrypt sample.txt.ntdf
@@ -42,8 +47,8 @@ _tdf3_test() {
   plain="./sample-${counter}.txt"
   echo "Hello World ${counter}" >"${plain}"
   npx "$1" --log-level DEBUG \
-    --kasEndpoint http://localhost:65432/api/kas \
-    --oidcEndpoint http://localhost:65432/auth/realms/tdf \
+    --kasEndpoint "${DEMO_KAS_URI}" \
+    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
     --auth tdf-client:123-456 \
     --output sample.txt.tdf \
     encrypt "${plain}" \
@@ -53,8 +58,8 @@ _tdf3_test() {
   [ -f sample.txt.tdf ]
 
   npx "$2" --log-level DEBUG \
-    --kasEndpoint http://localhost:65432/api/kas \
-    --oidcEndpoint http://localhost:65432/auth/realms/tdf \
+    --kasEndpoint "${DEMO_KAS_URI}" \
+    --oidcEndpoint "${DEMO_OIDC_ENDPOINT}" \
     --auth tdf-client:123-456 \
     --output sample_out.txt \
     --containerType tdf3 \