apisix-dev-apisix.yaml

routes:
  - uri: /docs
    service_id: 1002
  - uri: /openapi.json
    service_id: 1002
  # This route matches all paths that contain a "public" element
  # This does not mean that these endpoints are not secure
  # It means that a JWT token is not required to access them
  # However, if the controller is programmed to enforce RBAC, the request will fail
  - uri: /*
    vars: [[uri, ~~, public(\/|$)]]
    service_id: 1002
    enable_websocket: true
  - uri: /*
    service_id: 1002
    enable_websocket: true
    plugins:
      authz-keycloak:
        token_endpoint: http://keycloak:8080/realms/moderate/protocol/openid-connect/token
        client_id: apisix
        client_secret: apisix
        permissions: [moderateapi]
        ssl_verify: false
        password_grant_token_generation_incoming_uri: /api/token
      cors: {}
services:
  - id: 1002
    upstream_id: 2002
upstreams:
  - id: 2002
    nodes:
      "api:8000": 1
    type: roundrobin
#END