Stéphane Tailland
bf5adadb24
6 routes over Payment, composite key (customernumber + checknumber), proxying to classic-models-api. openid-connect with RFC 8693 token exchange to classic-models-api audience, rate-limiting, proxy-cache, audit-log — same structure as customers-api's REST layer. Keycloak (local): payments-api-audience client scope + payments-api resource client added, attached to kong-token-exchange-broker's default scopes. No dedicated protocol mappers on payments-api itself, same practice as customers-api/mcp-customers. No MCP layer — same as customers-api, not needed yet.
26 lines
638 B
YAML
26 lines
638 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: payments-api-git-auth
|
|
namespace: payments
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: vault-kong-v2
|
|
target:
|
|
name: payments-api-git-auth
|
|
data:
|
|
- secretKey: identity
|
|
remoteRef:
|
|
key: kong-v2/payments-api/git-deploy-key
|
|
property: identity
|
|
- secretKey: identity.pub
|
|
remoteRef:
|
|
key: kong-v2/payments-api/git-deploy-key
|
|
property: identity.pub
|
|
- secretKey: known_hosts
|
|
remoteRef:
|
|
key: kong-v2/payments-api/git-deploy-key
|
|
property: known_hosts
|