_format_version: "3.0" consumers: - jwt_secrets: - algorithm: RS256 key: https://localhost/auth/realms/didi-clients rsa_public_key: |- -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpv0lfjAFPGV4hLK6jp6 EsVlxax2nPA9I2IzGwNUIK8AsKwC9qu+737jarsjewx3ya/0s1uDP0ilbdh+wEzW Do/8jjWd0DxgTxMxCTS7DU07UZKXJWGc/Z+ansUPUcjqJ+uLTdu331z7ajK2FIZF 7yYH2WgjzApF6YSMx/dqybp/bdmBrvsPDGv1EJK4a72jV3P86WCW4ZDax2Qayw1t iKnO3+o6xvyoVSMeVJbs9ArjpAldueMLfTZqYBSmWe/rlBSIMWYkKTSgS+pdakez G71qs2RcSkI+GxlfJw0DJA8TfSjol6zc+EIUtAYG0pwwAqPB2PvkxMoDbL2UDkZE /wIDAQAB -----END PUBLIC KEY----- secret: 1qG51hpfTte1TGQzcAhKWjVkXsMWNIun - algorithm: RS256 key: https://didi365.eu/auth/realms/didi-clients rsa_public_key: | -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpv0lfjAFPGV4hLK6jp6 EsVlxax2nPA9I2IzGwNUIK8AsKwC9qu+737jarsjewx3ya/0s1uDP0ilbdh+wEzW Do/8jjWd0DxgTxMxCTS7DU07UZKXJWGc/Z+ansUPUcjqJ+uLTdu331z7ajK2FIZF 7yYH2WgjzApF6YSMx/dqybp/bdmBrvsPDGv1EJK4a72jV3P86WCW4ZDax2Qayw1t iKnO3+o6xvyoVSMeVJbs9ArjpAldueMLfTZqYBSmWe/rlBSIMWYkKTSgS+pdakez G71qs2RcSkI+GxlfJw0DJA8TfSjol6zc+EIUtAYG0pwwAqPB2PvkxMoDbL2UDkZE /wIDAQAB -----END PUBLIC KEY----- secret: IS8AJNbvC3taNROALc4bHslsZnSKELQD username: keycloak-users plugins: - config: echo_downstream: true generator: uuid header_name: X-Request-ID enabled: true name: correlation-id protocols: - grpc - grpcs - http - https - config: credentials: true exposed_headers: - X-Request-ID headers: - Accept - Authorization - Content-Type - X-Request-ID max_age: 3600 methods: - GET - POST - PUT - DELETE - OPTIONS - PATCH origins: - https://didi365.eu - https://www.didi365.eu preflight_continue: false enabled: true name: cors protocols: - grpc - grpcs - http - https - config: day: 500000 error_code: 429 error_message: API rate limit exceeded fault_tolerant: true header_name: null hide_client_headers: false hour: 100000 limit_by: ip minute: 5000 month: null path: null policy: local redis_database: 0 redis_host: null redis_password: null redis_port: 6379 redis_server_name: null redis_ssl: false redis_ssl_verify: false redis_timeout: 2000 redis_username: null second: 200 sync_rate: -1 year: null enabled: false name: rate-limiting protocols: - grpc - grpcs - http - https - config: allowed_payload_size: 104857600 require_content_length: false size_unit: bytes enabled: true name: request-size-limiting protocols: - grpc - grpcs - http - https - config: add: headers: - X-Gateway:DIDI-Kong-Staging - X-API-Version:2.0 json: [] json_types: [] append: headers: [] json: [] json_types: [] remove: headers: - Server - Via json: [] rename: headers: [] replace: headers: [] json: [] json_types: [] enabled: true name: response-transformer protocols: - grpc - grpcs - http - https services: - connect_timeout: 30000 enabled: true host: didi-admin name: admin-dashboard path: / port: 443 protocol: https read_timeout: 30000 retries: 3 routes: - https_redirect_status_code: 426 methods: - GET - POST - PUT - DELETE - OPTIONS name: admin-api path_handling: v0 paths: - /admin/api preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: admin-ui path_handling: v0 paths: - /admin preserve_host: true protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false tags: - ui - dashboard - staging write_timeout: 30000 - connect_timeout: 120000 enabled: true host: didi-agent-v3 name: agent-api port: 24803 protocol: http read_timeout: 300000 retries: 3 routes: - https_redirect_status_code: 426 methods: - POST - OPTIONS name: agent-abort path_handling: v0 paths: - /api/abort plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - OPTIONS name: agent-admin-services path_handling: v0 paths: - /api/v1/admin/services plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: agent-analysis path_handling: v0 paths: - /api/analysis plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 100 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - POST - OPTIONS name: agent-analyze path_handling: v0 paths: - /api/analyze plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - OPTIONS name: agent-health path_handling: v0 paths: - /agent/health preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: agent-jobs path_handling: v0 paths: - /api/v1/jobs plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - OPTIONS name: agent-pipelines path_handling: v0 paths: - /api/pipelines plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: agent-progress path_handling: v0 paths: - /api/progress plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 100 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - OPTIONS name: agent-sessions path_handling: v0 paths: - /api/sessions plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - OPTIONS name: agent-status path_handling: v0 paths: - /api/status preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: agent-storage path_handling: v0 paths: - /api/storage plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: agent-subscriptions path_handling: v0 paths: - /api/v1/subscriptions plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - POST - OPTIONS name: agent-upload path_handling: v0 paths: - /api/upload plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false tags: - agent - analysis write_timeout: 300000 - connect_timeout: 30000 enabled: true host: didi-agent-v3 name: agent-v3 port: 24803 protocol: http read_timeout: 300000 retries: 5 write_timeout: 300000 - connect_timeout: 30000 enabled: true host: didi-agent-v3 name: agent-v3-api port: 24803 protocol: http read_timeout: 300000 retries: 5 routes: - https_redirect_status_code: 426 name: agent-v3-media-public path_handling: v0 paths: - /api/v3/media/file preserve_host: true protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: agent-v3-route path_handling: v0 paths: - /agent-v3 plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true write_timeout: 300000 - connect_timeout: 120000 enabled: true host: orchestrationLayer-analysis name: analysis-api port: 8004 protocol: http read_timeout: 120000 retries: 3 tags: - analysis - legacy write_timeout: 120000 - connect_timeout: 60000 enabled: true host: didi-framework name: didi-framework port: 3005 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 name: framework-api path_handling: v0 paths: - /framework preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: waitlist-api path_handling: v0 paths: - /api/waitlist preserve_host: true protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false write_timeout: 60000 - connect_timeout: 30000 enabled: true host: didi-framework name: framework-api port: 3005 protocol: http read_timeout: 30000 retries: 3 routes: - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: agent-subscriptions-v2 path_handling: v0 paths: - /api/subscriptions plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - POST name: auth-verify-email path_handling: v0 paths: - /api/auth/verify-email preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - POST - PUT - DELETE - OPTIONS name: framework-auth path_handling: v0 paths: - /api/auth plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: framework-history path_handling: v0 paths: - /api/history plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: true protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 methods: - GET - POST - DELETE - OPTIONS name: framework-waitlist path_handling: v0 paths: - /api/waitlist plugins: - config: anonymous: null claims_to_verify: - exp cookie_names: [] header_names: - authorization key_claim_name: iss maximum_expiration: 0 run_on_preflight: true secret_is_base64: false uri_param_names: - jwt enabled: true name: jwt protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false write_timeout: 30000 - connect_timeout: 60000 enabled: true host: keycloak name: keycloak port: 8080 protocol: http read_timeout: 60000 retries: 5 write_timeout: 60000 - connect_timeout: 30000 enabled: true host: keycloak name: keycloak-api port: 8080 protocol: http read_timeout: 30000 retries: 3 routes: - https_redirect_status_code: 426 id: 749a5444-71bb-44c2-ac64-e66351372cce path_handling: v0 paths: - /auth plugins: - config: day: null error_code: 429 error_message: API rate limit exceeded fault_tolerant: true header_name: null hide_client_headers: false hour: 5000 limit_by: ip minute: 300 month: null path: null policy: local redis_database: 0 redis_host: null redis_password: null redis_port: 6379 redis_server_name: null redis_ssl: false redis_ssl_verify: false redis_timeout: 2000 redis_username: null second: null sync_rate: -1 year: null enabled: true name: rate-limiting protocols: - grpc - grpcs - http - https preserve_host: true protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true - https_redirect_status_code: 426 name: keycloak-resources path_handling: v0 paths: - /resources preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false tags: - auth - keycloak - staging write_timeout: 30000 - connect_timeout: 60000 enabled: true host: staging-dataLayer-minio name: minio-console port: 9001 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 id: cd97a29b-c0d4-46e5-91f5-fce5e9772d13 path_handling: v0 paths: - /minio preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true - https_redirect_status_code: 426 id: e0c22c51-5504-478d-b0d6-4343fd2a66fd path_handling: v0 paths: - /minio preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true write_timeout: 60000 - connect_timeout: 60000 enabled: true host: staging-dataLayer-minio name: minio-storage port: 9000 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 name: minio-public path_handling: v0 paths: - /storage preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: true write_timeout: 60000 - connect_timeout: 60000 enabled: true host: orchestrationLayer-orchestrator name: orchestrator-api port: 8000 protocol: http read_timeout: 60000 retries: 5 tags: - orchestrator - legacy write_timeout: 60000 - connect_timeout: 60000 enabled: true host: staging-dataLayer-pgadmin name: pgadmin port: 80 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 id: 142908a5-9e62-4e9f-8a6a-3b73944bbc78 path_handling: v0 paths: - /pgadmin preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false write_timeout: 60000 - connect_timeout: 60000 enabled: true host: staging-dataLayer-rabbitmq name: rabbitmq-management port: 15672 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 id: 026affcb-bde7-4ab6-aab7-ccdebd066a3b path_handling: v0 paths: - /rabbitmq preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 id: 54193652-1a6a-4c27-b4a4-a0f52845479d path_handling: v0 paths: - /rabbitmq preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false write_timeout: 60000 - connect_timeout: 60000 enabled: true host: staging-dataLayer-redis-commander name: redis-commander port: 8081 protocol: http read_timeout: 60000 retries: 5 routes: - https_redirect_status_code: 426 id: 9ddb9376-32cc-4cfb-892b-5b976683b1fc path_handling: v0 paths: - /redis-commander plugins: - config: day: null error_code: 429 error_message: API rate limit exceeded fault_tolerant: true header_name: null hide_client_headers: false hour: 3600000 limit_by: ip minute: 60000 month: null path: null policy: local redis_database: 0 redis_host: null redis_password: null redis_port: 6379 redis_server_name: null redis_ssl: false redis_ssl_verify: false redis_timeout: 2000 redis_username: null second: 1000 sync_rate: -1 year: null enabled: true name: rate-limiting protocols: - grpc - grpcs - http - https preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false write_timeout: 60000 - connect_timeout: 30000 enabled: true host: didi-admin name: web-frontend port: 443 protocol: https read_timeout: 30000 retries: 3 routes: - https_redirect_status_code: 426 name: web-ui path_handling: v0 paths: - /demo - /dashboard - /assets - /src - /@ - /node_modules - /\$ preserve_host: false protocols: - http - https regex_priority: 0 request_buffering: true response_buffering: true strip_path: false - https_redirect_status_code: 426 name: web-ui-root path_handling: v0 paths: - / preserve_host: false protocols: - http - https regex_priority: -1000 request_buffering: true response_buffering: true strip_path: false tags: - ui - web - staging write_timeout: 30000 upstreams: - algorithm: round-robin hash_fallback: none hash_on: none hash_on_cookie_path: / healthchecks: active: concurrency: 5 healthy: http_statuses: - 200 interval: 10 successes: 1 http_path: /api/v3/health https_verify_certificate: true timeout: 10 type: http unhealthy: http_failures: 5 http_statuses: - 429 - 500 - 503 interval: 10 tcp_failures: 3 timeouts: 3 passive: healthy: http_statuses: - 200 - 201 - 202 - 203 - 204 - 205 - 206 - 207 - 208 - 226 - 300 - 301 - 302 - 303 - 304 - 305 - 306 - 307 - 308 successes: 1 type: http unhealthy: http_failures: 5 http_statuses: - 429 - 500 - 503 tcp_failures: 3 timeouts: 0 threshold: 0 name: agent-upstream slots: 10000 tags: - agent - staging targets: - target: didi-agent-v3:24803 weight: 100 use_srv_name: false