apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  annotations:
    kubernetes.io/ingress.class: kong
  labels:
    global: "true"
  name: custom-prometheus
plugin: custom-prometheus
---
apiVersion: configuration.konghq.com/v1
config:
  bandwidth_metrics: true
  per_consumer: true
kind: KongClusterPlugin
metadata:
  annotations:
    kubernetes.io/ingress.class: kong
  labels:
    global: "true"
  name: prometheus
plugin: prometheus
---
apiVersion: configuration.konghq.com/v1
config:
  credentials: false
  headers:
    - "*"
  methods:
    - GET
    - HEAD
    - PUT
    - PATCH
    - POST
    - DELETE
  origins:
    - "*"
kind: KongClusterPlugin
metadata:
  annotations:
    kubernetes.io/ingress.class: kong
  name: cors
plugin: cors
---
apiVersion: configuration.konghq.com/v1
config:
  secret-config-path: /kong/plugin-secrets/clinic-auth-secrets.yaml
  allow-cidrs:
    - 0.0.0.0/32
  clinic-svc-host: clinic.clinic-dev.8085.svc
  db:
    user: root
    database: clinic_dev
    host: mysql-clinic.cdllqpdubujz.us-west-2.rds.amazonaws.com
    port: 3306
  disable-ip-whitelist: false
  rbac:
    cloud-server-endpoint: cloud-server-service.clinic-dev:8080
    resources:
      delete:/chaos/api/orgs/(\d+)/clusters/\d+/experiments/\d+: orgs/{org_id}/fault-drill-exp/write
      delete:/fault/api/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-feature/write
      get:/chaos/api/components/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-exp/read
      get:/chaos/api/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-exp/read
      get:/chaos/api/orgs/(\d+)/clusters/\d+/experiments/\d+: orgs/{org_id}/fault-drill-exp/read
      get:/fault/api/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-feature/read
      get:/fault/api/ping: orgs/0/fault-drill-feature/read
      post:/chaos/api/approve/orgs/(\d+)/clusters/\d+/experiments/\d+: orgs/{org_id}/fault-drill-exp/write
      post:/chaos/api/draft/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-exp/write
      post:/chaos/api/start/orgs/(\d+)/clusters/\d+/experiments/\d+: orgs/{org_id}/fault-drill-exp/write
      post:/chaos/api/summary/orgs/(\d+)/clusters/\d+/experiments/\d+: orgs/{org_id}/fault-drill-exp/write
      post:/fault/api/orgs/(\d+)/clusters/\d+: orgs/{org_id}/fault-drill-feature/write
    server-endpoint: clinic-rbac.clinic-dev:10000
    userdebuglist:
      - /clinic/api/v1/dashboard/proxy/.*
    whitelist:
      - /clinic/.*
      - /metric/.*
      - /ngm/.*
      - /grafana/.*
      - /kibana/.*
      - /login/.*
      - /swagger/.*
      - /chaos/api/actions/schema
      - /api/byoc/v1/.*
  session:
    disabled: true
    secure: false
kind: KongClusterPlugin
metadata:
  annotations:
    kubernetes.io/ingress.class: kong
  name: clinic-auth
plugin: clinic
---
apiVersion: configuration.konghq.com/v1
config:
  rbac:
    resources:
      /api/userdebug/v1/(\d+)/(\d+)/authorization: userdebug/v1/orgs/{org_id}/{cluster_id}/authorizationt
      /api/v1/orgs/(\d+)/projects/(\d+)/clusters/([0-9a-zA-Z-]+)/ngm/keyvisual/config: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      /api/v1/orgs/(\d+)/projects/(\d+)/clusters/([0-9a-zA-Z-]+)/ngm/keyvisual/heatmaps: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/slow_query/available_fields: orgs/{org_id}/tidbs/{cluster_id}/ngm/slow_query/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/slow_query/detail: orgs/{org_id}/tidbs/{cluster_id}/ngm/slow_query/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/slow_query/list: orgs/{org_id}/tidbs/{cluster_id}/ngm/slow_query/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/available_fields: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/config: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/list: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/plan/detail: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/plans: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/stmt_types: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/\d+/clusters/([0-9a-zA-Z-]+)/ngm/statements/time_ranges: orgs/{org_id}/tidbs/{cluster_id}/ngm/statements/read
      /api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/eventfilters: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/eventfilters/read
      /api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/events: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/events/read
      /api/v1/orgs/(\d+)/clusters/(\d+)/eventfilters: orgs/{org_id}/clusters/{cluster_id}/eventfilters/read
      /api/v1/orgs/(\d+)/clusters/(\d+)/events: orgs/{org_id}/clusters/{cluster_id}/events/read
      delete:/api/alert/v1/orgs/(\d+)/clusters/(\d+)/alertSubscribers/(\d+): as/orgs/{org_id}/tidbs/{cluster_id}/user_alert/{user_alert_id}/delete
      delete:/api/alert/v1/orgs/(\d+)/projects/(\d+)/alertSubscribers/(\d+): as/orgs/{org_id}/projects/{project_id}/user_alert/{user_alert_id}/delete
      delete:/api/alert/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/alertSubscribers/(\d+): as/orgs/{org_id}/projects/{project_id}/tidbs/{cluster_id}/user_alert/{user_alert_id}/delete
      delete:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tasks/\d+: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/ngm/performance_insight/delete
      delete:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tidb_connection: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/ngm/performance_insight/delete
      get:/api/alert/v1/orgs/(\d+)/clusters/(\d+)/alertSubscriberQuota: as/orgs/{org_id}/tidbs/{cluster_id}/user_alert/list
      get:/api/alert/v1/orgs/(\d+)/clusters/(\d+)/alertSubscribers: as/orgs/{org_id}/tidbs/{cluster_id}/user_alert/list
      get:/api/alert/v1/orgs/(\d+)/projects/(\d+)/alertSubscriberQuota: as/orgs/{org_id}/projects/{project_id}/user_alert/list
      get:/api/alert/v1/orgs/(\d+)/projects/(\d+)/alertSubscribers: as/orgs/{org_id}/projects/{project_id}/user_alert/list
      get:/api/alert/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/alertSubscriberQuota: as/orgs/{org_id}/projects/{project_id}/tidbs/{cluster_id}/user_alert/list
      get:/api/alert/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/alertSubscribers: as/orgs/{org_id}/projects/{project_id}/tidbs/{cluster_id}/user_alert/list
      get:/api/userdebug/v1/(\d+)/(\d+)/authorization/details/(\d+): userdebug/v1/orgs/{org_id}/{cluster_id}/authorization/details/{auth_id}
      get:/api/userdebug/v1/(\d+)/(\d+)/authorization/records: userdebug/v1/orgs/{org_id}/{cluster_id}/authorization/records
      get:/api/userdebug/v1/(\d+)/(\d+)/authorization/records/(\d+): userdebug/v1/orgs/{org_id}/{cluster_id}/authorization/records/{auth_id}
      get:/api/userdebug/v1/(\d+)/authorizations: userdebug/v1/orgs/{org_id}/authorizations
      get:/api/userdebug/v1/(\d+)/features: userdebug/v1/orgs/{org_id}/features
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/index_advisor/results: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/index_advisor/results/\d+: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tasks: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tasks/\d+: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tasks/latest: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tidb_connection: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tidb_connection/clinic_outbound_public_addresses: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/unstable_plan/statements: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      get:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/unstable_plan/statements/\d+: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/get
      post:/api/alert/v1/orgs/(\d+)/clusters/(\d+)/alertSubscribers: as/orgs/{org_id}/tidbs/{cluster_id}/user_alert/create
      post:/api/alert/v1/orgs/(\d+)/projects/(\d+)/alertSubscribers: as/orgs/{org_id}/projects/{project_id}/user_alert/create
      post:/api/alert/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/alertSubscribers: as/orgs/{org_id}/projects/{project_id}/tidbs/{cluster_id}/user_alert/create
      post:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tasks: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/ngm/performance_insight/post
      post:/api/v1/orgs/(\d+)/projects/(\d+)/clusters/(\d+)/ngm/performance_insight/tidb_connection: orgs/{org_id}/projects/{project_id}/clusters/{cluster_id}/ngm/performance_insight/post
    server-endpoint: vpce-0e48c341c5fb5d84b-zn8mt90m.vpce-svc-01119127cf27eff3b.us-west-2.vpce.amazonaws.com:10000
    whitelist:
      - /pingchat/.*
  tidb-cloud-account:
    endpoint: vpce-0e48c341c5fb5d84b-zn8mt90m.vpce-svc-01119127cf27eff3b.us-west-2.vpce.amazonaws.com:10000
kind: KongClusterPlugin
metadata:
  annotations:
    kubernetes.io/ingress.class: kong
  name: dbaas-auth
plugin: dbaas_auth