feat: add support for externalized consumers #7657
Open
+93
−25
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
✅ Deploy Preview for kongdocs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
jschmid1
added
the
do not merge
Guaris
added
the
review:general
mheap
reviewed
Aug 19, 2024
Comment on lines
366
to
367
| - geo: null | ||
| id: null |
There was a problem hiding this comment.
geo and id should be optional (default null) imo
Guaris
reviewed
Aug 19, 2024
|
|
||
| -- Dummy/Link that points to Konnect Docs when ready. | ||
|
|
||
| With the `pool_id` you obtained from the previous step, you can configure the key-auth plugin to validate API keys against the Identity Service. |
There was a problem hiding this comment.
@jschmid1 where does the pool_id come from? Konnect?
smritikjaggi
reviewed
Sep 9, 2024
| @@ -0,0 +1,71 @@ | |||
| --- | |||
| nav_title: | |||
| title: How to configure pools | |||
| --- | ||
|
|
||
|
|
||
| With `pool_id` you can configure the key-auth plugin to validate API keys against the Identity Service. |
|
|
||
| With `pool_id` you can configure the key-auth plugin to validate API keys against the Identity Service. | ||
|
|
||
| ### Configuring Multiple Pools |
|
|
||
| ### Configuring Multiple Pools | ||
|
|
||
| In the key-auth plugin configuration, add the `pools` option as shown below: |
| In the key-auth plugin configuration, add the `pools` option as shown below: | ||
|
|
||
| ```yaml | ||
| pools: |
There was a problem hiding this comment.
change to "identity_realms"
| type: remote | ||
| ``` | ||
|
|
||
| In this configuration, the dataplane will initially check the local pool (LMDB) before querying the remote Identity Service. |
There was a problem hiding this comment.
cp-scoped consumers first
|
|
||
| In this configuration, the dataplane will initially check the local pool (LMDB) before querying the remote Identity Service. | ||
|
|
||
| If a matching key is found in any of these pools, the request will be authenticated. If the key is not found in any of the configured pools, the request will be blocked. |
|
|
||
| If a matching key is found in any of these pools, the request will be authenticated. If the key is not found in any of the configured pools, the request will be blocked. | ||
|
|
||
| ### Configuring Single Pools |
|
|
||
| ### Configuring Single Pools | ||
|
|
||
| It is also possible to configure only a single pool, either local or remote. However, only one of each type can be configured. |
There was a problem hiding this comment.
change pool to realm
change "either local or remote" to "consumers can be scoped to the geo or cp".
|
|
||
| It is also possible to configure only a single pool, either local or remote. However, only one of each type can be configured. | ||
|
|
||
| To configure only a remote pool: |
There was a problem hiding this comment.
change "remote pool" to "realm"
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Testing instructions
Preview link:
Checklist