Re: [Geoserver-users] Variable substitution for s3 blobstore [SEC=UNOFFICIAL]

[Michael S. <Mic...@ga...>]

OK, I've found that you can parameterise the keys
Parameterize catalog settings - GeoServer 2.20.x User Manual<https://docs.geoserver.org/latest/en/user/datadirectory/configtemplate.html>

But there is a bug that writes these keys to the GUI and makes it difficult to use the GUI

Allow runtime parametrization of Azure blobstore configuration * Issue #777 * GeoWebCache/geowebcache (github.com)<https://github.com/GeoWebCache/geowebcache/issues/777>

Is this the best method to use?

From: Michael Sexton <Mic...@ga...>
Sent: Thursday, 19 August 2021 5:28 PM
To: 'geo...@li...' <geo...@li...>
Subject: [Geoserver-users] Variable substitution for s3 blobstore [SEC=UNOFFICIAL]

Hi GeoServer Users!

We're trying to ensure our AWS keys don't leak into our code repositories, while actively doing development on our tile caches, which use an S3 blobstore. We write the keys at deploy time to the geowebcache.xml file, however to develop and test locally we have to insert the keys into the file, then must remove them before commit to ensure we don't leak the keys.

Is there a better way? I've tried using variable substitution such that the keys are inserted at runtime, but I am not having any luck. What is the best way to do this?

Thanks for any help

Kind Regards

Michael Sexton
Data Analyst  |  MEGIS
Minerals Energy Groundwater  |  GEOSCIENCE AUSTRALIA
____________________________________________________________
Phone:  +61 2 6249 9262    Fax:  +61 2 6249 9999
Email:  Mic...@ga...<mailto:Mic...@ga...>    Web:  www.ga.gov.au<http://www.ga.gov.au/>
Cnr Jerrabomberra Avenue and Hindmarsh Drive Symonston ACT 2609
GPO Box 378 Canberra ACT 2601 Australia
Applying geoscience to Australia's most important challenges


Geoscience Australia Disclaimer: This e-mail (and files transmitted with it) is intended only for the person or entity to which it is addressed. If you are not the intended recipient, then you have received this e-mail by mistake and any use, dissemination, forwarding, printing or copying of this e-mail and its file attachments is prohibited. The security of emails transmitted cannot be guaranteed; by forwarding or replying to this email, you acknowledge and accept these risks.

Geoscience Australia Disclaimer: This e-mail (and files transmitted with it) is intended only for the person or entity to which it is addressed. If you are not the intended recipient, then you have received this e-mail by mistake and any use, dissemination, forwarding, printing or copying of this e-mail and its file attachments is prohibited. The security of emails transmitted cannot be guaranteed; by forwarding or replying to this email, you acknowledge and accept these risks.