We are a young company that's developing a web app in node.js with the microservice architecture.
Actual development workflow:
- Each microservice is stored in a private repository
- Different developers/teams can access to specific repositories (microservices)
- Each developer can work locally using docker. He must pull a docker "development environment image" that includes all microservices pulled from bitbucket. He can maps his local microservice source path into docker container as volume and start to develop.
The problem: each developer can see all microservices sources passing through the docker container. A developer that can work/access only to "Microservice1" should not see the sources of "Microservice2." If I want to assume an external freelancer develops a microservice I do not want to show him the whole system sources as these might contain valuable intellectual property.
Solutions?