Skip to content

DEV-683 Implement OIDC for GeoServer#27

Open
jason-raitz wants to merge 9 commits into
mainfrom
DEV-683_OIDC
Open

DEV-683 Implement OIDC for GeoServer#27
jason-raitz wants to merge 9 commits into
mainfrom
DEV-683_OIDC

Conversation

@jason-raitz

@jason-raitz jason-raitz commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Purpose

Since we've done away with the local geoserver repo, this is a way to do development on geoserver and geoserver-secure locally.

This repo uses keycloak to mimic CalNet OIDC. There are also some changes to the README to reflect one time adding of oidc configuration to the geoserver and geoserver-secure containers.

@jason-raitz jason-raitz self-assigned this Jul 6, 2026

@anarchivist anarchivist left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good; i have some questions about whether we can incorporate the oidc config for geoserver into something called through the compose file.

also, maybe out of scope for this PR, but i'n now wondering about whether we should be building our own keycloak image.

Comment thread data/geoserver/geoserver_oidc_seed/security/filter/keycloak/config.xml Outdated
Comment thread data/geoserver/geoserver_oidc_seed/security/config.xml Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated

@awilfox awilfox left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some feedback and suggestions.

Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/add-keycloak-to-geoserver.sh Outdated
Comment thread bin/geoserver-oidc-config.sh Outdated
Comment thread docker-compose.yml
Comment thread docker-compose.yml Outdated
Comment thread env.example Outdated
 - also volume mount fix for postgres 18 image
@jason-raitz jason-raitz marked this pull request as ready for review July 8, 2026 19:20

@awilfox awilfox left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, but I don't have the cycles to spin it up locally for testing so I don't want to explicitly approve it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants