curl -X POST https://{region}.api.konghq.com/v1/event-gateways/{eventGatewayId}/virtual-clusters/{virtualClusterId}/consume-policies \ --header "accept: application/json" \ --header "Content-Type: application/json" \ --header "Authorization: Bearer $KONNECT_TOKEN " \ --data ' { "name": "decrypt-static-key", "type": "decrypt", "config": { "failure_mode": "error", "part_of_record": [ "value" ], "key_sources": [ { "type": "static" } ] } } '
Make sure to replace the following placeholders with your own values:
region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
virtualClusterId: The id of the Virtual Cluster.
eventGatewayId: The id of the Event Gateway.
eventGatewayListenerId: The id of the Event Gateway Listener.
See the Konnect Event Gateway API reference to learn about region-specific URLs and personal access tokens.
Prerequisite: Configure your Personal Access Token
terraform { required_providers { konnect-beta = { source = "kong/konnect-beta" } } } provider "konnect-beta" { personal_access_token = "$KONNECT_TOKEN" server_url = "https://us.api.konghq.com/" }
resource "konnect_event_gateway_consume_policy_decrypt" "my_virtual_cluster_policy_decrypt" { provider = konnect - beta type = "decrypt" config = { failure_mode = "error" part_of_record = [ "value" ] key_sources = [ { type = "static" } ] } virtual_cluster_id = konnect_event_gateway_virtual_cluster . my_virtual_cluster . id gateway_id = konnect_event_gateway . my_event_gateway . id }
The following example creates a new decrypt policy.
Add this snippet to an event_gateways resource in your declarative configuration file, and then manage it with kongctl :
event_gateways : - ref : eventGatewayName name : eventGatewayName virtual_clusters : - ref : virtualClusterName name : virtualClusterName consume_policies : - ref : decrypt-static-key type : decrypt decrypt : name : decrypt-static-key config : failure_mode : error part_of_record : - value key_sources : - type : static
Make sure to replace the following placeholders with your own values:
