We upgraded from the legacy OIDC plugin to the official sec-oidc extension in GeoServer 3.0.2.
Previously, our oidc configuration used environment variable placeholders such as ${AUTH_SERVER_URL} for the keycloak endpoints. This was supplied by the docker compose and we also had -DALLOW_ENV_PARAMETRIZATION=true.
With the new sec-oidc plugin, these placeholders remain literal in the security filter config.xml.
e.g.
${AUTH_SERVER_URL}/realms/${AUTH_REALM}/.well-known/openid-configuration
The same applies for other fields with environment variables.
In our case we need to reuse the same docker image and configuration across environments, supplying the specific URLs and configuration through docker compose.
Is environment variable substitution supported for OIDC filter configuration fields in GeoServer 3.0.2? If not, could this be supported by the new oidc extension?
The work around we found out for this is to replace the placeholders before GeoServer loads the configuration.