ADR 0001: Kong Gateway OSS as API edge
Status
Accepted. Kong is the public API edge.
Kong runs in PostgreSQL DB mode (schema kong on Postgres 16). splick-backend/infra/kong/kong.yml stays the git source of truth. The Docker manage scripts apply it on bootstrap and restart.
Context
Clients call /api/**. JWT and OAuth belong to auth-service. Social is served at /api/v1/social/** with a legacy alias /api/social/**.
Decision
- Kong Gateway OSS 3.8 with PostgreSQL config (
KONG_PG_SCHEMA=konginsplick_db). - Local proxy 8080. Admin API bound to 127.0.0.1:8001.
- Bootstrap through
infra/docker/manage*.sh.
Kubernetes (not current)
| Concern | Approach |
|---|---|
| Deploy | Kong Ingress Controller or Kong Gateway Helm |
| Config | Git-managed Kong config; schema kong on RDS |
| Secrets | Redis for rate-limit counters; JWT keys only in auth |
| HA | At least two Kong replicas, shared Postgres |
| Health | /status readiness |
References
splick-backend/infra/kong/README.md- API gateway