apisix.yaml

deployment:
  role: data_plane
  role_data_plane:
    config_provider: yaml
ssls:
  -
    snis:
      - "kongateway.de" # Some sni to associate the TLS certificate with.
    # Certificate for server-side TLS authentication to the clients
    cert: |
      <ADD_YOUR_API_GATEWAY_TLS_CERTIFICATE_HERE>
    # According private key for server-side TLS authentication to the clients
    key: |
      <ADD_YOUR_API_GATEWAY_TLS_PRIVATE_KEY_HERE>
consumers:
  - username: konnektor
    plugins:
      basic-auth:
        username: konnektor
        password: abc
routes:
  # Replace <KONNEKTOR_ADDRESS> with your actual Konnektor origin
  -
    id: konnektor-sds
    uri: /connector.sds
    upstream:
      scheme: https
      nodes:
        "<KONNEKTOR_ADDRESS>": 1
      type: roundrobin
    plugin_config_id: 1
  -
    id: konnektor-external-auth
    uri: /service/authsignatureservice
    upstream:
      scheme: https
      nodes:
        "<KONNEKTOR_ADDRESS>": 1
      type: roundrobin
    plugin_config_id: 2
  -
    id: konnektor-cards
    uri: /service/cardservice
    upstream:
      scheme: https
      nodes:
        "<KONNEKTOR_ADDRESS>": 1
      type: roundrobin
    plugin_config_id: 2
  -
    id: konnektor-certs
    uri: /service/certificateservice
    upstream:
      scheme: https
      nodes:
        "<KONNEKTOR_ADDRESS>": 1
      type: roundrobin
    plugin_config_id: 2
  -
    id: konnektor-systeminfo
    uri: /service/systeminformationservice
    upstream:
      scheme: https
      nodes:
        "<KONNEKTOR_ADDRESS>": 1
      type: roundrobin
    plugin_config_id: 2
plugin_configs:
  # Replace <BASIC_AUTHENTICATION_CREDENTIALS_OF_THE_KONNEKTOR_API> with your Konnektor credentials
  # This plugin does not require authentication itself. It adds authentication credentials to the request
  -
    id: 1
    plugins:
      proxy-rewrite:
        host: <KONNEKTOR_ADDRESS>
        headers:
          set:
            Authorization: Basic <BASIC_AUTHENTICATION_CREDENTIALS_OF_THE_KONNEKTOR_API>
  # This plugin does require authentication plus it adds authentication credentials to the request
  -
    id: 2
    plugins:
      proxy-rewrite:
        host: <KONNEKTOR_ADDRESS>
        headers:
          set:
            Authorization: Basic <BASIC_AUTHENTICATION_CREDENTIALS_OF_THE_KONNEKTOR_API>
      basic-auth:
        username: konnektor
#END