Loads service type plugins: built-in ones from the classpath, external ones from the plugins directory, each in its own class loader

The services of a tenant that plugins manage permissions of, such as an HDFS cluster: their configuration, with secrets encrypted, connection tests and resource lookups

Spring Boot application that serves the REST API and the web console