Re: [Geoserver-users] Variable substitution for s3 blobstore [SEC=UNOFFICIAL]

[Nuno Oliveira]

Hi Michael,
yes, that looks like the way to go to me, but as you notice parametrization
of GWC stores will need to be fixed \ extended.

On Thu, Aug 19, 2021 at 2:32 PM Michael Sexton 
wrote:

> OK, I’ve found that you can parameterise the keys
>
> Parameterize catalog settings — GeoServer 2.20.x User Manual
> <https://docs.geoserver.org/latest/en/user/datadirectory/configtemplate.html>
>
>
>
> But there is a bug that writes these keys to the GUI and makes it
> difficult to use the GUI
>
>
>
> Allow runtime parametrization of Azure blobstore configuration · Issue
> #777 · GeoWebCache/geowebcache (github.com)
> <https://github.com/GeoWebCache/geowebcache/issues/777>
>
>
>
> Is this the best method to use?
>
>
>
> *From:* Michael Sexton 
> *Sent:* Thursday, 19 August 2021 5:28 PM
> *To:* 'geoserver-users@lists.sourceforge.net' <
> geoserver-users@lists.sourceforge.net>
> *Subject:* [Geoserver-users] Variable substitution for s3 blobstore
> [SEC=UNOFFICIAL]
>
>
>
> Hi GeoServer Users!
>
>
>
> We’re trying to ensure our AWS keys don’t leak into our code repositories,
> while actively doing development on our tile caches, which use an S3
> blobstore. We write the keys at deploy time to the geowebcache.xml file,
> however to develop and test locally we have to insert the keys into the
> file, then must remove them before commit to ensure we don’t leak the keys.
>
>
>
> Is there a better way? I’ve tried using variable substitution such that
> the keys are inserted at runtime, but I am not having any luck. What is the
> best way to do this?
>
>
>
> Thanks for any help
>
>
>
> Kind Regards
>
>
>
>
> *Michael Sexton *Data Analyst  |  MEGIS
>
> Minerals Energy Groundwater  *|*  *GEOSCIENCE AUSTRALIA*
>
> *__**__*
>
> Phone:  +61 2 6249 9262Fax:  +61 2 6249 
>
> Email:  michael.sex...@ga.gov.auWeb:  www.ga.gov.au
>
> Cnr Jerrabomberra Avenue and Hindmarsh Drive Symonston ACT 2609
>
> GPO Box 378 Canberra ACT 2601 Australia
>
> *Applying geoscience to Australia’s most important challenges*
>
>
>
>
> Geoscience Australia Disclaimer: This e-mail (and files transmitted with
> it) is intended only for the person or entity to which it is addressed. If
> you are not the intended recipient, then you have received this e-mail by
> mistake and any use, dissemination, forwarding, printing or copying of this
> e-mail and its file attachments is prohibited. The security of emails
> transmitted cannot be guaranteed; by forwarding or replying to this email,
> you acknowledge and accept these risks.
>
> Geoscience Australia Disclaimer: This e-mail (and files transmitted with
> it) is intended only for the person or entity to which it is addressed. If
> you are not the intended recipient, then you have received this e-mail by
> mistake and any use, dissemination, forwarding, printing or copying of this
> e-mail and its file attachments is prohibited. The security of emails
> transmitted cannot be guaranteed; by forwarding or replying to this email,
> you acknowledge and accept these risks.
> ___
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines:
> http://geoserver.org/comm/userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>


-- 

Regards,

Nuno Oliveira

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==

Nuno Miguel Carvalho Oliveira
@nmcoliveira
Technical Lead / Project Manager


GeoSolutions Group
phone: +39 0584 962313
fax:  +39 0584 1660272

https://www.geosolutionsgroup.com/
http://twitter.com/geosolutions_it
---


Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE
2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
precisa che ogni circostanza inerente alla presente email (il suo
contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
operazione è illecita

Re: [Geoserver-users] Variable substitution for s3 blobstore [SEC=UNOFFICIAL]

[Michael Sexton]

OK, I've found that you can parameterise the keys
Parameterize catalog settings - GeoServer 2.20.x User 
Manual<https://docs.geoserver.org/latest/en/user/datadirectory/configtemplate.html>

But there is a bug that writes these keys to the GUI and makes it difficult to 
use the GUI

Allow runtime parametrization of Azure blobstore configuration * Issue #777 * 
GeoWebCache/geowebcache 
(github.com)<https://github.com/GeoWebCache/geowebcache/issues/777>

Is this the best method to use?

From: Michael Sexton 
Sent: Thursday, 19 August 2021 5:28 PM
To: 'geoserver-users@lists.sourceforge.net' 

Subject: [Geoserver-users] Variable substitution for s3 blobstore 
[SEC=UNOFFICIAL]

Hi GeoServer Users!

We're trying to ensure our AWS keys don't leak into our code repositories, 
while actively doing development on our tile caches, which use an S3 blobstore. 
We write the keys at deploy time to the geowebcache.xml file, however to 
develop and test locally we have to insert the keys into the file, then must 
remove them before commit to ensure we don't leak the keys.

Is there a better way? I've tried using variable substitution such that the 
keys are inserted at runtime, but I am not having any luck. What is the best 
way to do this?

Thanks for any help

Kind Regards

Michael Sexton
Data Analyst  |  MEGIS
Minerals Energy Groundwater  |  GEOSCIENCE AUSTRALIA

Phone:  +61 2 6249 9262Fax:  +61 2 6249 
Email:  michael.sex...@ga.gov.au<mailto:michael.sex...@ga.gov.au>Web:  
www.ga.gov.au<http://www.ga.gov.au/>
Cnr Jerrabomberra Avenue and Hindmarsh Drive Symonston ACT 2609
GPO Box 378 Canberra ACT 2601 Australia
Applying geoscience to Australia's most important challenges


Geoscience Australia Disclaimer: This e-mail (and files transmitted with it) is 
intended only for the person or entity to which it is addressed. If you are not 
the intended recipient, then you have received this e-mail by mistake and any 
use, dissemination, forwarding, printing or copying of this e-mail and its file 
attachments is prohibited. The security of emails transmitted cannot be 
guaranteed; by forwarding or replying to this email, you acknowledge and accept 
these risks.

Geoscience Australia Disclaimer: This e-mail (and files transmitted with it) is 
intended only for the person or entity to which it is addressed. If you are not 
the intended recipient, then you have received this e-mail by mistake and any 
use, dissemination, forwarding, printing or copying of this e-mail and its file 
attachments is prohibited. The security of emails transmitted cannot be 
guaranteed; by forwarding or replying to this email, you acknowledge and accept 
these risks.
___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

[Geoserver-users] Variable substitution for s3 blobstore [SEC=UNOFFICIAL]

[Michael Sexton]

Hi GeoServer Users!

We're trying to ensure our AWS keys don't leak into our code repositories, 
while actively doing development on our tile caches, which use an S3 blobstore. 
We write the keys at deploy time to the geowebcache.xml file, however to 
develop and test locally we have to insert the keys into the file, then must 
remove them before commit to ensure we don't leak the keys.

Is there a better way? I've tried using variable substitution such that the 
keys are inserted at runtime, but I am not having any luck. What is the best 
way to do this?

Thanks for any help

Kind Regards

Michael Sexton
Data Analyst  |  MEGIS
Minerals Energy Groundwater  |  GEOSCIENCE AUSTRALIA

Phone:  +61 2 6249 9262Fax:  +61 2 6249 
Email:  michael.sex...@ga.gov.auWeb:  
www.ga.gov.au
Cnr Jerrabomberra Avenue and Hindmarsh Drive Symonston ACT 2609
GPO Box 378 Canberra ACT 2601 Australia
Applying geoscience to Australia's most important challenges


Geoscience Australia Disclaimer: This e-mail (and files transmitted with it) is 
intended only for the person or entity to which it is addressed. If you are not 
the intended recipient, then you have received this e-mail by mistake and any 
use, dissemination, forwarding, printing or copying of this e-mail and its file 
attachments is prohibited. The security of emails transmitted cannot be 
guaranteed; by forwarding or replying to this email, you acknowledge and accept 
these risks.
___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users