key-auth-kubernets-ingress-controller.yaml

apiVersion: configuration.konghq.com/v1
kind: KongIngress
metadata:
  name: wallet-kong-ingress
  namespace: default
proxy:
  path: /
route:
  protocols:
    - https
    - http
  strip_path: true
  preserve_host: true
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: kong-wallet-ingress
  namespace:  default
  annotations:
    kubernetes.io/ingress.class: "kong"
    configuration.konghq.com: wallet-kong-ingress
spec:
  tls:
    - hosts:
        - ${KONG_AWS_DNS}
      secretName: ${KONG_AWS_CERT_NAME}
  rules:
    - host: ${KONG_AWS_DNS}
      http:
        paths:
          - path: "/api/wallet"
            backend:
              serviceName: wallet
              servicePort: http
---
apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: wallet-key-auth
  namespace: default #this should match the namespace of the route or service you're adding it too.
plugin: key-auth
---
apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: wallet-acl
  namespace: default #this should match the namespace of the route or service you're adding it too.
config:
  whitelist: ['app-checkin']
plugin: acl
---
# Checkin app Consumer and credentials
apiVersion: configuration.konghq.com/v1
kind: KongConsumer
metadata:
  name: app-checkin-consumer
  namespace: default
username: app-checkin
---
apiVersion: configuration.konghq.com/v1
kind: KongCredential
metadata:
  name: wallet-credential
consumerRef: app-checkin-consumer
type: key-auth
config:
  key: ${API_KEY}
---
apiVersion: configuration.konghq.com/v1
kind: KongCredential
metadata:
  name: app-checkin
consumerRef: app-checkin-consumer
type: acl
config:
  group: "app-checkin"