apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: console-plugin-cookie-filter
  annotations:
    kubernetes.io/ingress.class: kong
plugin: cookie-filter
config:
  env_type: dev
  filt_origins:
    - https://[^/]+\.cp9\.dev\.aws\.tidbcloud\.com
    - https://[^/]+staging-tidbcloud\.netlify\.app
    - https://[^/]+partner-staging\.netlify\.app
    - http://localhost:[0-9]+
  whitelist:
    - account_sid
    - account_sid_dev
    - account_sid_staging
    - jwt
    - clinic.session_id
    - debug.session_id
---
apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: console-plugin-bearer-token-fallback
  annotations:
    kubernetes.io/ingress.class: kong
plugin: bearer-token-fallback
---
apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: console-plugin-cookie-auth
  annotations:
    kubernetes.io/ingress.class: kong
plugin: cookie-auth
config:
  auth_url: http://account-provider-grpc.cp9-global.svc.cluster.local:11000/inner/account-provider/api/v1/user/authn-session
  env_type: dev
  cors_allow_origins:
    - https://[^/]+\.cp9\.dev\.aws\.tidbcloud\.com
    - https://[^/]+staging-tidbcloud\.netlify\.app
    - https://[^/]+partner-staging\.netlify\.app
    - https://[^/]+-nostalgic-varahamihira-62ba08\.netlify\.app
    - http://localhost:[0-9]+
  static_suffixes:
    - "%.css$"
    - "%.js$"
  whitelist:
    - path: /healthz
    - path: /version
    - path: /invitation-verification
    - path: /registration-verification
    - path: /action-verify
    - path: /login_confirm
    - path: /api/v1/user/login_confirm
    - path: /api/v1/metrics/login-metrics
      methods: [POST]
    - path: /api/v1/auth-method
      methods: [GET]
    - path: /api/v1/auth-method/valid-check
      methods: [GET]
    - path: /api/v1/msp/msp-config
      methods: [GET]
    - path: /api/v1/api-keys/msp
      methods: [GET]
    - path: /api/v1/orgs/[0-9A-Za-z]+/auth0-user
      methods: [POST]
    - path: /api/v1/orgs
      methods: [POST]
    - path: /api/v1/orgs/verification-email
      methods: [POST]
    - path: /api/v1/orgs/validate_thirdparty_token
      methods: [POST]
    - path: /proxy/orgs/[0-9A-Za-z]+/clusters/[0-9]+/terminal/.*/ws
    - path: /logout
    - path: /ecosystem/api/v1/vercel/webhooks
    - path: /ecosystem/api/v1/integration/github/webhooks
    - path: /api/v1/dataservices/ghapp/webhook
    - path: /api/v1/test-token
    - path: /third_party_account_redirect/.*
---
apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: console-plugin-console-header-management
  annotations:
    kubernetes.io/ingress.class: kong
plugin: console-header-management