cmmc-platform/kong/kong.yml

78 lines
1.7 KiB
YAML

_format_version: "3.0"
_transform: true
services:
- name: fastapi-svc
host: fastapi
port: 8000
protocol: http
routes:
- name: api-root
paths: ["/api/"]
strip_path: true
methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
plugins:
- name: request-transformer
config:
add:
headers:
- "X-Forwarded-User: "
- "X-Forwarded-Email: "
remove:
headers:
- "Authorization"
- name: debug-api
url: http://fastapi:8000
# - name: openid
# config:
# issuer: "https://kc.kellsupport.com/realms/cmmc"
# client_id: "kong-gateway"
# client_secret: "3FefJAfN7Rox2x7EW7JzZ38vLI04cXMB"
# redirect_uri: "https://api.kellsupport.com/api/"
# scopes: ["openid", "profile", "email"]
# bearer_only: false
# response_type: "code"
# session_secret: "3b4b1b8c8366b1d7c50c49742f879bdd20b85d5b95adaaf4af38d89a36c372ab"
# ssl_verify: false
# timeout: 10000
- name: cors
config:
origins: ["*"]
methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
headers: ["Accept", "Content-Type", "Authorization"]
credentials: true
max_age: 3600
- name: api-debug-auth
paths: ["/api/debug-auth"]
strip_path: true
methods: ["GET"]
- name: gateway-health
paths: ["/gateway-health"]
strip_path: true
methods: ["GET"]
- name: healthz
paths: ["/healthz"]
strip_path: true
methods: ["GET"]
- name: debug-auth
paths: ["/api/debug-auth"]
strip_path: true
service: ["debug-api"]
plugins:
- name: rate-limiting
config:
second: 25
policy: local