apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: clinic-auth
config:
  secret-config-path: /kong/plugin-secrets/clinic-auth-secrets.yaml
  allow-cidrs:
    - 203.90.236.195/27
    - 34.215.93.162/32
    - 173.248.249.128/27
    - 117.134.13.184/29
    - 45.251.23.184/29
    - 103.85.175.128/29
    - 80.167.192.138/32
    - 180.167.192.138/32
    - 211.95.24.8/29
    - 118.113.15.98/32
    - 101.207.139.187/32
    - 183.129.144.200/29
    - 39.170.92.156/32
    - 183.6.107.178/32
    - 119.136.31.176/32
    - 117.50.84.111/32
    - 106.75.96.68/32
    - 106.75.54.70/32
    - 106.75.116.22/32
    - 120.92.100.187/32
    - 20.63.218.57/32
    - 106.75.21.237/32
    - 152.32.135.177/32
    - 152.104.28.129/32
    - 106.75.52.157/32
    - 128.1.49.135/32
    - 120.92.102.252/32
    - 45.64.247.112/32
    - 45.64.247.96/32
    - 40.74.68.232/32
    - 117.50.66.239/32
    - 128.1.49.85/32
    - 172.31.0.0/16
    - 128.1.48.244/32
    - 118.194.230.143/32
    - 52.41.43.61/32
    - 203.90.236.205/32
    - 34.208.189.148/32
    - 54.218.33.179/32
    - 34.209.53.107/32
    - 35.233.250.206/32
    - 104.196.246.224/32
    - 35.83.225.251/32
    # o11y rs dev
    - 35.85.207.121/32
    # o11y rs staging
    - 35.86.46.244/32
    - 34.168.76.146/32
    # o11y rs prod
    - 52.72.84.40/32
    - 54.148.161.241/32
    - 35.155.73.60/32
    - 43.205.61.225/32
    - 52.79.124.61/32
    - 13.214.108.29/32
    - 54.250.172.151/32
    - 3.71.167.176/32
    - 34.145.152.214/32
    - 35.227.188.59/32
    - 34.81.117.163/32
    - 104.197.161.194/32
    - 35.221.98.244/32
    - 34.97.253.89/32
    - 35.187.249.236/32
    # Escalation Engineering
    - 54.219.132.198/32
    - 13.52.252.208/32
    - 13.56.192.33/32
    - 52.53.225.210/32
    - 52.41.109.133/32
    # ee-deploy-nat
    - 18.144.139.176/32
    # dev-base
    - 54.148.240.60/32
    - 52.13.110.238/32
    - 54.71.2.116/32
    # staging-base
    - 34.208.168.149/32
    - 44.232.56.92/32
    - 44.234.235.72/32
    # prod-base
    - 44.231.162.131/32
    - 54.188.27.23/32
    - 100.20.198.224/32
    # Seed AWS us-west-2
    - 44.228.18.33/32
    - 52.27.165.242/32
    - 44.229.240.125/32
    # Seed AWS ap-southeast-1
    - 54.179.199.245/32
    - 54.179.200.40/32
    - 54.151.153.55/32
    # Seed AWS us-east-1
    - 54.160.183.243/32
    - 54.166.186.135/32
    - 54.91.191.4/32
    # Seed AWS ap-northeast-2
    - 3.34.115.170/32
    - 52.79.68.176/32
    - 3.35.39.51/32
    # Seed AWS ap-northeast-1
    - 18.181.117.169/32
    - 35.72.212.231/32
    - 54.248.62.133/32
    # Seed AWS eu-central-1
    - 18.198.94.7/32
    - 3.67.108.237/32
    - 3.69.209.34/32
    # Seed AWS ap-south-1
    - 43.204.80.75/32
    - 65.1.120.92/32
    - 13.232.20.117/32
    # Seed AWS ap-southeast-3
    - 108.137.140.45/32
    - 108.137.182.212/32
    - 108.137.180.131/32
    # Seed GCP us-west1
    - 34.82.228.7/32
    - 35.197.97.193/32
    # Seed GCP asia-northeast1
    - 34.85.97.116/32
    - 34.84.117.115/32
    # Seed GCP asia-northeast2
    - 34.97.6.124/32
    - 34.97.9.28/32
    # Seed GCP asia-southeast1
    - 35.240.206.166/32
    - 35.247.136.255/32
    # Seed GCP us-central1
    - 35.226.183.20/32
    - 34.70.129.125/32
    # Seed GCP us-east-4
    - 34.145.155.85/32
    - 34.86.10.16/32
    # Seed GCP asia-east1
    - 35.194.200.113/32
    - 34.81.174.88/32
    # dev-seed-us-east-1
    - 54.156.147.26/32
    - 54.81.145.46/32
    - 107.22.53.149/32
    # dev-seed-us-west-2
    - 44.231.198.187/32
    - 54.188.254.195/32
    - 35.167.232.17/32
    # staging-seed-us-east-1
    - 34.193.189.203/32
    - 18.207.70.160/32
    - 35.170.28.53/32
    # staging-seed-us-west-2
    - 44.235.21.181/32
    - 44.227.240.197/32
    - 52.33.28.246/32
    # devops-staging
    - 44.245.243.63/32
    # devops-prod
    - 35.82.108.84/32
    # byoc deploy prod
    - 3.125.152.33/32
    # shuning ec2
    - 120.92.55.209/32
    - 107.3.159.175/32
    # guohu
    - 50.18.233.180/32
  clinic-svc-host: clinic.clinic-prod-cloud.8085.svc
  db:
    database: clinic
    host: mysql-clinic.cpzks1zjl1yh.us-west-2.rds.amazonaws.com
    port: 3306
    user: root
  disable-ip-whitelist: false
  rbac:
    cloud-server-endpoint: cloud-server-service.clinic-prod-cloud:8080
    server-endpoint: clinic-rbac.clinic-prod-cloud:10000
  session:
    disabled: true
    secure: false