didi-lot2-backend/backend/services/gateway-auth-layer/didiKong/declarative/kong-local-backup.yml
2026-07-10 03:39:53 -07:00

1321 lines
26 KiB
YAML

_format_version: "3.0"
consumers:
- jwt_secrets:
- algorithm: RS256
key: https://localhost/auth/realms/didi-clients
rsa_public_key: |-
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpv0lfjAFPGV4hLK6jp6
EsVlxax2nPA9I2IzGwNUIK8AsKwC9qu+737jarsjewx3ya/0s1uDP0ilbdh+wEzW
Do/8jjWd0DxgTxMxCTS7DU07UZKXJWGc/Z+ansUPUcjqJ+uLTdu331z7ajK2FIZF
7yYH2WgjzApF6YSMx/dqybp/bdmBrvsPDGv1EJK4a72jV3P86WCW4ZDax2Qayw1t
iKnO3+o6xvyoVSMeVJbs9ArjpAldueMLfTZqYBSmWe/rlBSIMWYkKTSgS+pdakez
G71qs2RcSkI+GxlfJw0DJA8TfSjol6zc+EIUtAYG0pwwAqPB2PvkxMoDbL2UDkZE
/wIDAQAB
-----END PUBLIC KEY-----
secret: 1qG51hpfTte1TGQzcAhKWjVkXsMWNIun
- algorithm: RS256
key: https://didi365.eu/auth/realms/didi-clients
rsa_public_key: |
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpv0lfjAFPGV4hLK6jp6
EsVlxax2nPA9I2IzGwNUIK8AsKwC9qu+737jarsjewx3ya/0s1uDP0ilbdh+wEzW
Do/8jjWd0DxgTxMxCTS7DU07UZKXJWGc/Z+ansUPUcjqJ+uLTdu331z7ajK2FIZF
7yYH2WgjzApF6YSMx/dqybp/bdmBrvsPDGv1EJK4a72jV3P86WCW4ZDax2Qayw1t
iKnO3+o6xvyoVSMeVJbs9ArjpAldueMLfTZqYBSmWe/rlBSIMWYkKTSgS+pdakez
G71qs2RcSkI+GxlfJw0DJA8TfSjol6zc+EIUtAYG0pwwAqPB2PvkxMoDbL2UDkZE
/wIDAQAB
-----END PUBLIC KEY-----
secret: IS8AJNbvC3taNROALc4bHslsZnSKELQD
username: keycloak-users
plugins:
- config:
echo_downstream: true
generator: uuid
header_name: X-Request-ID
enabled: true
name: correlation-id
protocols:
- grpc
- grpcs
- http
- https
- config:
credentials: true
exposed_headers:
- X-Request-ID
headers:
- Accept
- Authorization
- Content-Type
- X-Request-ID
max_age: 3600
methods:
- GET
- POST
- PUT
- DELETE
- OPTIONS
- PATCH
origins:
- https://didi365.eu
- https://www.didi365.eu
preflight_continue: false
enabled: true
name: cors
protocols:
- grpc
- grpcs
- http
- https
- config:
day: 500000
error_code: 429
error_message: API rate limit exceeded
fault_tolerant: true
header_name: null
hide_client_headers: false
hour: 100000
limit_by: ip
minute: 5000
month: null
path: null
policy: local
redis_database: 0
redis_host: null
redis_password: null
redis_port: 6379
redis_server_name: null
redis_ssl: false
redis_ssl_verify: false
redis_timeout: 2000
redis_username: null
second: 200
sync_rate: -1
year: null
enabled: false
name: rate-limiting
protocols:
- grpc
- grpcs
- http
- https
- config:
allowed_payload_size: 104857600
require_content_length: false
size_unit: bytes
enabled: true
name: request-size-limiting
protocols:
- grpc
- grpcs
- http
- https
- config:
add:
headers:
- X-Gateway:DIDI-Kong-Staging
- X-API-Version:2.0
json: []
json_types: []
append:
headers: []
json: []
json_types: []
remove:
headers:
- Server
- Via
json: []
rename:
headers: []
replace:
headers: []
json: []
json_types: []
enabled: true
name: response-transformer
protocols:
- grpc
- grpcs
- http
- https
services:
- connect_timeout: 30000
enabled: true
host: didi-admin
name: admin-dashboard
path: /
port: 443
protocol: https
read_timeout: 30000
retries: 3
routes:
- https_redirect_status_code: 426
methods:
- GET
- POST
- PUT
- DELETE
- OPTIONS
name: admin-api
path_handling: v0
paths:
- /admin/api
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: admin-ui
path_handling: v0
paths:
- /admin
preserve_host: true
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
tags:
- ui
- dashboard
- staging
write_timeout: 30000
- connect_timeout: 120000
enabled: true
host: didi-agent-v3
name: agent-api
port: 24803
protocol: http
read_timeout: 300000
retries: 3
routes:
- https_redirect_status_code: 426
methods:
- POST
- OPTIONS
name: agent-abort
path_handling: v0
paths:
- /api/abort
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- OPTIONS
name: agent-admin-services
path_handling: v0
paths:
- /api/v1/admin/services
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: agent-analysis
path_handling: v0
paths:
- /api/analysis
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 100
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- POST
- OPTIONS
name: agent-analyze
path_handling: v0
paths:
- /api/analyze
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- OPTIONS
name: agent-health
path_handling: v0
paths:
- /agent/health
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: agent-jobs
path_handling: v0
paths:
- /api/v1/jobs
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- OPTIONS
name: agent-pipelines
path_handling: v0
paths:
- /api/pipelines
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: agent-progress
path_handling: v0
paths:
- /api/progress
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 100
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- OPTIONS
name: agent-sessions
path_handling: v0
paths:
- /api/sessions
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- OPTIONS
name: agent-status
path_handling: v0
paths:
- /api/status
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: agent-storage
path_handling: v0
paths:
- /api/storage
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: agent-subscriptions
path_handling: v0
paths:
- /api/v1/subscriptions
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- POST
- OPTIONS
name: agent-upload
path_handling: v0
paths:
- /api/upload
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
tags:
- agent
- analysis
write_timeout: 300000
- connect_timeout: 30000
enabled: true
host: didi-agent-v3
name: agent-v3
port: 24803
protocol: http
read_timeout: 300000
retries: 5
write_timeout: 300000
- connect_timeout: 30000
enabled: true
host: didi-agent-v3
name: agent-v3-api
port: 24803
protocol: http
read_timeout: 300000
retries: 5
routes:
- https_redirect_status_code: 426
name: agent-v3-media-public
path_handling: v0
paths:
- /api/v3/media/file
preserve_host: true
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: agent-v3-route
path_handling: v0
paths:
- /agent-v3
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
write_timeout: 300000
- connect_timeout: 120000
enabled: true
host: orchestrationLayer-analysis
name: analysis-api
port: 8004
protocol: http
read_timeout: 120000
retries: 3
tags:
- analysis
- legacy
write_timeout: 120000
- connect_timeout: 60000
enabled: true
host: didi-framework
name: didi-framework
port: 3005
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
name: framework-api
path_handling: v0
paths:
- /framework
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: waitlist-api
path_handling: v0
paths:
- /api/waitlist
preserve_host: true
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
write_timeout: 60000
- connect_timeout: 30000
enabled: true
host: didi-framework
name: framework-api
port: 3005
protocol: http
read_timeout: 30000
retries: 3
routes:
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: agent-subscriptions-v2
path_handling: v0
paths:
- /api/subscriptions
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- POST
name: auth-verify-email
path_handling: v0
paths:
- /api/auth/verify-email
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- POST
- PUT
- DELETE
- OPTIONS
name: framework-auth
path_handling: v0
paths:
- /api/auth
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: framework-history
path_handling: v0
paths:
- /api/history
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: true
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
methods:
- GET
- POST
- DELETE
- OPTIONS
name: framework-waitlist
path_handling: v0
paths:
- /api/waitlist
plugins:
- config:
anonymous: null
claims_to_verify:
- exp
cookie_names: []
header_names:
- authorization
key_claim_name: iss
maximum_expiration: 0
run_on_preflight: true
secret_is_base64: false
uri_param_names:
- jwt
enabled: true
name: jwt
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
write_timeout: 30000
- connect_timeout: 60000
enabled: true
host: keycloak
name: keycloak
port: 8080
protocol: http
read_timeout: 60000
retries: 5
write_timeout: 60000
- connect_timeout: 30000
enabled: true
host: keycloak
name: keycloak-api
port: 8080
protocol: http
read_timeout: 30000
retries: 3
routes:
- https_redirect_status_code: 426
id: 749a5444-71bb-44c2-ac64-e66351372cce
path_handling: v0
paths:
- /auth
plugins:
- config:
day: null
error_code: 429
error_message: API rate limit exceeded
fault_tolerant: true
header_name: null
hide_client_headers: false
hour: 5000
limit_by: ip
minute: 300
month: null
path: null
policy: local
redis_database: 0
redis_host: null
redis_password: null
redis_port: 6379
redis_server_name: null
redis_ssl: false
redis_ssl_verify: false
redis_timeout: 2000
redis_username: null
second: null
sync_rate: -1
year: null
enabled: true
name: rate-limiting
protocols:
- grpc
- grpcs
- http
- https
preserve_host: true
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
- https_redirect_status_code: 426
name: keycloak-resources
path_handling: v0
paths:
- /resources
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
tags:
- auth
- keycloak
- staging
write_timeout: 30000
- connect_timeout: 60000
enabled: true
host: staging-dataLayer-minio
name: minio-console
port: 9001
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
id: cd97a29b-c0d4-46e5-91f5-fce5e9772d13
path_handling: v0
paths:
- /minio
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
- https_redirect_status_code: 426
id: e0c22c51-5504-478d-b0d6-4343fd2a66fd
path_handling: v0
paths:
- /minio
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
write_timeout: 60000
- connect_timeout: 60000
enabled: true
host: staging-dataLayer-minio
name: minio-storage
port: 9000
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
name: minio-public
path_handling: v0
paths:
- /storage
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: true
write_timeout: 60000
- connect_timeout: 60000
enabled: true
host: orchestrationLayer-orchestrator
name: orchestrator-api
port: 8000
protocol: http
read_timeout: 60000
retries: 5
tags:
- orchestrator
- legacy
write_timeout: 60000
- connect_timeout: 60000
enabled: true
host: staging-dataLayer-pgadmin
name: pgadmin
port: 80
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
id: 142908a5-9e62-4e9f-8a6a-3b73944bbc78
path_handling: v0
paths:
- /pgadmin
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
write_timeout: 60000
- connect_timeout: 60000
enabled: true
host: staging-dataLayer-rabbitmq
name: rabbitmq-management
port: 15672
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
id: 026affcb-bde7-4ab6-aab7-ccdebd066a3b
path_handling: v0
paths:
- /rabbitmq
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
id: 54193652-1a6a-4c27-b4a4-a0f52845479d
path_handling: v0
paths:
- /rabbitmq
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
write_timeout: 60000
- connect_timeout: 60000
enabled: true
host: staging-dataLayer-redis-commander
name: redis-commander
port: 8081
protocol: http
read_timeout: 60000
retries: 5
routes:
- https_redirect_status_code: 426
id: 9ddb9376-32cc-4cfb-892b-5b976683b1fc
path_handling: v0
paths:
- /redis-commander
plugins:
- config:
day: null
error_code: 429
error_message: API rate limit exceeded
fault_tolerant: true
header_name: null
hide_client_headers: false
hour: 3600000
limit_by: ip
minute: 60000
month: null
path: null
policy: local
redis_database: 0
redis_host: null
redis_password: null
redis_port: 6379
redis_server_name: null
redis_ssl: false
redis_ssl_verify: false
redis_timeout: 2000
redis_username: null
second: 1000
sync_rate: -1
year: null
enabled: true
name: rate-limiting
protocols:
- grpc
- grpcs
- http
- https
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
write_timeout: 60000
- connect_timeout: 30000
enabled: true
host: didi-admin
name: web-frontend
port: 443
protocol: https
read_timeout: 30000
retries: 3
routes:
- https_redirect_status_code: 426
name: web-ui
path_handling: v0
paths:
- /demo
- /dashboard
- /assets
- /src
- /@
- /node_modules
- /\$
preserve_host: false
protocols:
- http
- https
regex_priority: 0
request_buffering: true
response_buffering: true
strip_path: false
- https_redirect_status_code: 426
name: web-ui-root
path_handling: v0
paths:
- /
preserve_host: false
protocols:
- http
- https
regex_priority: -1000
request_buffering: true
response_buffering: true
strip_path: false
tags:
- ui
- web
- staging
write_timeout: 30000
upstreams:
- algorithm: round-robin
hash_fallback: none
hash_on: none
hash_on_cookie_path: /
healthchecks:
active:
concurrency: 5
healthy:
http_statuses:
- 200
interval: 10
successes: 1
http_path: /api/v3/health
https_verify_certificate: true
timeout: 10
type: http
unhealthy:
http_failures: 5
http_statuses:
- 429
- 500
- 503
interval: 10
tcp_failures: 3
timeouts: 3
passive:
healthy:
http_statuses:
- 200
- 201
- 202
- 203
- 204
- 205
- 206
- 207
- 208
- 226
- 300
- 301
- 302
- 303
- 304
- 305
- 306
- 307
- 308
successes: 1
type: http
unhealthy:
http_failures: 5
http_statuses:
- 429
- 500
- 503
tcp_failures: 3
timeouts: 0
threshold: 0
name: agent-upstream
slots: 10000
tags:
- agent
- staging
targets:
- target: didi-agent-v3:24803
weight: 100
use_srv_name: false