Публічний API та рейт-ліміти на читання даних реєстру

<exposeSearchCondition public="true" name="search-laboratories-by-city"/>

apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: kong-prometheus-plugin
  annotations:
    kubernetes.io/ingress.class: kong
  labels:
    global: "true"
config:
  status_code_metrics: true
  latency_metrics: true
  bandwidth_metrics: true
  per_consumer: true
plugin: prometheus

apiVersion: v1
kind: Service
metadata:
  name: kong-prometheus-monitoring
  labels:
    app: kong-prometheus-monitoring
spec:
  selector:
    app.kubernetes.io/name: kong
  type: ClusterIP
  ports:
  - name: metrics
    protocol: TCP
    port: 8100
    targetPort: 8100

apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: kong-service-monitor
spec:
  namespaceSelector:
    any: true
  endpoints:
  - port: metrics
  selector:
    matchLabels:
      app: kong-prometheus-monitoring

apiVersion: v1
kind: ConfigMap
metadata:
  name: grafana-public-api
data:
  public-api-statistic.json: |-
  ...

dashboardsConfigMaps:
  - configMapName: grafana-public-api
    fileName: public-api-statistic.json

    publicUser:
      name: public-user
      clientId: public-user
      public: false
      secretName: keycloak-public-user-client-secret
      targetRealm:
        name: external-system
    ...

apiVersion: v1
kind: Service
metadata:
  name: public-city-lab-route
  labels:
    app: registry-rest-api-public
  annotations:
    konghq.com/plugins: post-transformer, city-lab-rate-limiting
    konghq.com/override: registry-rest-api-public:/search-laboratories-by-city
    konghq.com/path: /search-laboratories-by-city
spec:
  ports:
  - port: 80
    targetPort: 8080
    protocol: TCP
    name: registry-rest-api-public
  selector:
    app: registry-rest-api-public

apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: city-lab-rate-limiting
plugin: rate-limiting
config:
  second: 5
  hour: 100
  limit_by: ip
  policy: redis
  ...

publicApi:
  - name: city-lab
    enabled: true
    url: /search-laboratories-by-city
    limits:
        second: 5
        hour: 100
  - ...

{ "message": "API rate limit exceeded" }