GeoServer Terraform IaC + OGC API - Features extension#760
Draft
jirhiker wants to merge 123 commits into
Draft
Conversation
WIP: This is a POC replacement for bureau geospatial databases
Numbers are limited to 10 digits. This reduces the risk of catastrophic backtracking.
Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.16.1 to 1.16.2. - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) --- updated-dependencies: - dependency-name: alembic dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [greenlet](https://github.com/python-greenlet/greenlet) from 3.2.2 to 3.2.3. - [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst) - [Commits](python-greenlet/greenlet@3.2.2...3.2.3) --- updated-dependencies: - dependency-name: greenlet dependency-version: 3.2.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...11.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.3.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…-11.3.0 Bump pillow from 11.2.1 to 11.3.0
…-1.16.2 Bump alembic from 1.16.1 to 1.16.2
…-0.115.14 Bump fastapi from 0.115.12 to 0.115.14
…-0.35.0 Bump uvicorn from 0.34.3 to 0.35.0
…-pagination-0.13.3 Bump fastapi-pagination from 0.13.2 to 0.13.3
…t-3.2.3 Bump greenlet from 3.2.2 to 3.2.3
…n permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Isolate geoserver_iac Terraform files onto a dedicated branch. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Add configurable geoserver_community_extensions and geoserver_stable_extensions vars, plumbed into the docker run so the OSGeo image installs extensions via INSTALL_EXTENSIONS. Defaults to ogcapi-features. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The ogcapi-features artifact ships in the stable extensions folder for 2.28.0, not community-latest, so COMMUNITY_EXTENSIONS 404'd at boot. Move it to STABLE_EXTENSIONS. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
jirhiker
marked this pull request as draft
July 6, 2026 20:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds the GeoServer Terraform IaC (
geoserver_iac/) on a dedicated branch and installs the OGC API - Features extension at VM startup.Changes
geoserver_iac/— Terraform for the GeoServer deployment (VM, instance group, HTTPS LB, firewall, service account, GCS bucket mounts). Isolated onto this branch (not a straight cherry-pick — the original commits were entangled with unrelated AEM/STAC work).geoserver_stable_extensions/geoserver_community_extensions, plumbed through the templated startup script. When set, the OSGeo image installs them viaINSTALL_EXTENSIONS=true.ogcapi-featuresas a stable extension — the 2.28.0 artifact ships in the stable extensions folder, notcommunity-latest, so the initial community config 404'd at boot. Fixed toSTABLE_EXTENSIONS.Verification
Applied to prod. VM recreated, extension downloaded + installed, endpoint live:
GET /geoserver/ogc/features/v1→ 200, valid landing JSON34.54.118.81unchanged; GCS-backed data dir survived the VM recreateKnown follow-ups (not in this PR)
/ogc/features/v1/collectionscurrently errors: the PostGIS storeOcotillo/OcotilloDB(dbocotillo, :5432) times out from the recreated VM's new egress IP — needs the postgres allowlist/firewall updated for the new VM IP.PermissionDenied monitoring.timeSeries.create— VM service account missingroles/monitoring.metricWriter(cosmetic; GeoServer unaffected).🤖 Generated with Claude Code