apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: ${NAME}-customers-mcp-audit-log
  namespace: ${NAMESPACE}
plugin: http-log
# dev only: the raw Authorization (JWT) header is captured in clear text,
# not acceptable as-is for a non-dev environment. request_body/response_body
# below read from kong.ctx.shared, populated by audit-log-body-capture.yaml
# — nil (and silently omitted) if that file isn't applied.
config:
  http_endpoint: ${AUDIT_LOG_ENDPOINT}
  method: POST
  content_type: application/json
  custom_fields_by_lua:
    request_body: "return kong.ctx.shared.audit_request_body"
    response_body: "return kong.ctx.shared.audit_response_body"