Merge branch 'images/sdx' of https://github.com/bcgov/aps-devops into images/sdx

Author: ikethecoder

sdx/image/Dockerfile

@@ -5,7 +5,7 @@ USER root
 
 RUN apt-get update && apt-get -y install unzip curl
 
-RUN echo add trust-jwks
+RUN echo add trust-jwks trust-kms updates and dpop upd
 RUN git clone -b feature/mtls https://github.com/bcgov/kong-oss-plugins.git \
   && cd kong-oss-plugins \
   && (cd plugins/dpop && luarocks make) \
@@ -23,6 +23,7 @@ RUN git clone -b feature/mtls https://github.com/bcgov/kong-oss-plugins.git \
   && (cd plugins/response-signer && luarocks make) \
   && (cd plugins/token-exchange && luarocks make) \
   && (cd plugins/trust-jwks && luarocks make) \
+  && (cd plugins/trust-kms && luarocks make) \
   && (cd plugins/trust-ledger && luarocks make) \
   && (cd plugins/trust-registry && luarocks make) \
   && (cd plugins/trust-sign && luarocks make) \
@@ -111,7 +112,8 @@ ENV KONG_CLIENT_SSL_CERT="/etc/secrets/sdx-edge-client-cert/tls.crt"
 ENV KONG_CLIENT_SSL_CERT_KEY="/etc/secrets/sdx-edge-client-cert/tls.key"
 
 # Make the env var available for using in custom plugins
-ENV KONG_NGINX_MAIN_ENV="KONG_SIGNING_CERT; env KONG_SIGNING_CERT_KEY"
+# NOTE env KONG_CLIENT_SSL_CERT;env KONG_CLIENT_SSL_CERT_KEY only temporary until we add token exchange plugin
+ENV KONG_NGINX_MAIN_ENV="KONG_SIGNING_CERT;env KONG_SIGNING_CERT_KEY;env AWS_ACCESS_KEY_ID;env AWS_SECRET_ACCESS_KEY;env AWS_REGION;env KONG_CLIENT_SSL_CERT;env KONG_CLIENT_SSL_CERT_KEY"
 
 # Client certificate to present when proxying to upstream services
 ENV KONG_NGINX_PROXY_PROXY_SSL_CERTIFICATE="/etc/secrets/sdx-edge-client-cert/tls.crt"
@@ -162,7 +164,7 @@ ENV KONG_REAL_IP_HEADER="X-Forwarded-For"
 # Plugins Configuration
 # ============================================
 # Enables bundled plugins plus custom authentication, rate limiting, and security plugins
-ENV KONG_PLUGINS="bundled, jwt-keycloak_1010, rate-limiting_902, pre-function_770, post-function_200, post-function_201, oidc, oidc-consumer, kong-spec-expose, jwt-keycloak, kong-upstream-jwt, bcgov-gwa-endpoint, gwa-ip-anonymity, mtls-auth, mtls-acl, openid-authzen, response-signer, dpop, token-exchange, trust-jwks, trust-ledger, trust-registry, trust-sign, trust-timestamp, trust-verify-digest, trust-verify-signature"
+ENV KONG_PLUGINS="bundled, jwt-keycloak_1010, rate-limiting_902, pre-function_770, post-function_200, post-function_201, oidc, oidc-consumer, kong-spec-expose, jwt-keycloak, kong-upstream-jwt, bcgov-gwa-endpoint, gwa-ip-anonymity, mtls-auth, mtls-acl, openid-authzen, response-signer, dpop, token-exchange, trust-jwks, trust-kms, trust-ledger, trust-registry, trust-sign, trust-timestamp, trust-verify-digest, trust-verify-signature"
 
 # Custom Lua module search path for plugin code
 ENV KONG_LUA_PACKAGE_PATH="/opt/?.lua;/opt/?/init.lua;;"