apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: ${NAME}-catalog-mcp-audit-log
  namespace: ${NAMESPACE}
plugin: http-log
# dev only: request/response bodies and the raw Authorization (JWT) header
# are captured in clear text. Not acceptable as-is for a non-dev environment.
config:
  http_endpoint: ${AUDIT_LOG_ENDPOINT}
  method: POST
  content_type: application/json
  custom_fields_by_lua:
    request_body: "return kong.request.get_raw_body()"
    response_body: "return kong.response.get_raw_body()"