New image-service demands apikey for image uploading

[andrevtg]

It seems to me that image-service (1.0.x) requires api keys in special http headers for certain endpoints (including image uploads at "/ws/uploadImage") and biocache does not provide it. I had no issues with that on 0.9.x, but I'm not sure if this is just a setting I missed.

I'll try to submit a PR for that.

[ansell]

I think that is part of this PR that I am currently reviewing: #336

[andrevtg]

Nice. I'll use my custom biocache until next release. Thanks for pointing this out.

[ansell]

@andrevtg The pull request was merged and a new version of biocache-store has been released. Can you test it to verify it is working for you against your image-service (may need to bump to the image-service version that was also released in the last few hours)

[djtfmartin]

@andrevtg note the API checks can be bypassed by whitelisting IP address

security:
  apikey:
    ip:
      whitelist: 123.123.123.123,124.124.124.124

[andrevtg]

Thanks, Dave, I am aware of that. The problem is we are deploying ALA as containers on Kubernetes, so no fixed IPs should be used.