apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: dbaas-auth
config:
  # The prod-op dbaas_auth binary only accepts rbac and
  # tidb-cloud-account. Remove legacy fields inherited from the shared base;
  # otherwise Kong rejects the entire declarative config and keeps stale
  # upstream Pod IPs.
  secret-config-path: null
  db: null
  session-id-validation: null
  rbac:
    server-endpoint: 47.117.165.65:10000
  tidb-cloud-account:
    endpoint: 47.117.165.65:10000