{"id":19993750,"url":"https://github.com/revomatico/docker-kong-oidc","last_synced_at":"2025-05-04T12:32:40.412Z","repository":{"id":43323251,"uuid":"133677483","full_name":"revomatico/docker-kong-oidc","owner":"revomatico","description":"Kong + OIDC plugins","archived":false,"fork":false,"pushed_at":"2023-09-04T14:24:27.000Z","size":132,"stargazers_count":106,"open_issues_count":2,"forks_count":39,"subscribers_count":6,"default_branch":"master","last_synced_at":"2023-11-07T22:11:47.606Z","etag":null,"topics":["docker","gateway","kong","kong-oidc","proxy"],"latest_commit_sha":null,"homepage":null,"language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/revomatico.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-05-16T14:24:17.000Z","updated_at":"2023-10-27T17:15:35.000Z","dependencies_parsed_at":"2023-01-24T20:05:13.577Z","dependency_job_id":null,"html_url":"https://github.com/revomatico/docker-kong-oidc","commit_stats":null,"previous_names":[],"tags_count":73,"template":null,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revomatico%2Fdocker-kong-oidc","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revomatico%2Fdocker-kong-oidc/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revomatico%2Fdocker-kong-oidc/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revomatico%2Fdocker-kong-oidc/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/revomatico","download_url":"https://codeload.github.com/revomatico/docker-kong-oidc/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":224393950,"owners_count":17303725,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","gateway","kong","kong-oidc","proxy"],"created_at":"2024-11-13T04:52:57.994Z","updated_at":"2024-11-13T04:57:12.194Z","avatar_url":"https://github.com/revomatico.png","language":"Dockerfile","funding_links":[],"categories":["Dockerfile"],"sub_categories":[],"readme":"# docker-kong-oidc\n\n\u003e Builds a Docker image (\u003chttps://hub.docker.com/r/cristianchiru/docker-kong-oidc\u003e) from base Kong + [revomatico/kong-oidc](https://github.com/revomatico/kong-oidc) plugin (based on zmartzone/lua-resty-openidc)\n\n\u003e !! Starting with [3.2.2-1](https://github.com/revomatico/docker-kong-oidc/releases/tag/3.2.2-1) Docker repository is available from personal account too because free organization repos where supposed to be removed but then Docker changed their minds on 20th of March 2023. Since I do not trust them anymore, the old repo (\u003chttps://hub.docker.com/r/revomatico/docker-kong-oidc\u003e) is still there, but I consider it deprecated.\n\n## Notes\n\n- Overriding numeric values like ports via env vars: due to a limitation in the lua templating engine in openresty, they must be quoted twice: `KONG_X_VAR=\"'1234'\"`.\n- Dockerfile will patch `nginx_kong.lua` template at build time, to include `set $session_secret \"$KONG_X_SESSION_SECRET\";`\n  - This is needed for the kong-oidc plugin to set a session secret that will later override the template string\n  - See: \u003chttps://github.com/nokia/kong-oidc/issues/1\u003e\n- A common default session_secret must be defined by setting env `KONG_X_SESSION_SECRET` to a string\n- To enable the plugins, set the env variable for the container with comma separated plugin values:\n  - `KONG_PLUGINS=bundled,oidc`\n- Default: `KONG_X_SESSION_NAME=oidc_session`\n\n## Session: Cookie\n\n- This is the default, but not recommended. I would recommend **shm** for a single instance, lightweight deployment.\n- If you have too much information in the session (claims, etc), you may need to [increase the nginx header size](https://github.com/bungle/lua-resty-session#cookie-storage-adapter):\n  - `KONG_NGINX_LARGE_CLIENT_HEADER_BUFFERS='4 16k'`\n- You can also enable [session compression](https://github.com/bungle/lua-resty-session#pluggable-compressors) to reduce cookie size:\n  - `KONG_X_SESSION_COMPRESSOR=zlib`\n\n## Session: Memcached\n\n\u003e Instead of actual memcached, Hazelcast (that is Kubernetes aware), with memcache protocol enabled should be used.\n\u003e See \u003chttps://docs.hazelcast.org/docs/latest-dev/manual/html-single/#memcache-client\u003e.\n\n- Reference: \u003chttps://github.com/bungle/lua-resty-session#memcache-storage-adapter\u003e\n- To replace the default sesion storage: **cookie**, set\n  - `KONG_X_SESSION_STORAGE=memcache`\n- Memcached hostname is by default **memcached** (in my case installed via helm in a Kubernetes cluster)\n  - Set `KONG_X_SESSION_MEMCACHE_HOST=mynewhost`\n  - Alternatively, set up DNS entry for **memcached** to be resolved from within the container\n- Memcached port is by default **11211**, override by setting:\n  - `KONG_X_SESSION_MEMCACHE_PORT=\"'12345'\"`\n- KONG_X_SESSION_MEMCACHE_USELOCKING, default: off\n- KONG_X_SESSION_MEMCACHE_SPINLOCKWAIT, default: 150\n- KONG_X_SESSION_MEMCACHE_MAXLOCKWAIT, default: 30\n- KONG_X_SESSION_MEMCACHE_POOL_TIMEOUT, default: 10\n- KONG_X_SESSION_MEMCACHE_POOL_SIZE, default: 10\n- KONG_X_SESSION_MEMCACHE_CONNECT_TIMEOUT, default 1000 (milliseconds)\n- KONG_X_SESSION_MEMCACHE_SEND_TIMEOUT, default 1000 (milliseconds)\n- KONG_X_SESSION_MEMCACHE_READ_TIMEOUT, default 1000 (milliseconds)\n\n## Session: DSHM (Hazelcast + Vertex)\n\n\u003e This lua-resty-session implementation depends on [grrolland/ngx-distributed-shm](https://github.com/grrolland/ngx-distributed-shm) dshm.lua library.\n\u003e Recommended: Hazelcast with memcache protocol enabled (see above).\n\n- Reference: \u003chttps://github.com/bungle/lua-resty-session#dshm-storage-adapter\u003e\n- To replace the default sesion storage: **cookie**, set\n  - `KONG_X_SESSION_STORAGE=dshm`\n- X_SESSION_DSHM_REGION, default: oidc_sessions\n- X_SESSION_DSHM_CONNECT_TIMEOUT, default: 1000\n- X_SESSION_DSHM_SEND_TIMEOUT, default: 1000\n- X_SESSION_DSHM_READ_TIMEOUT, default: 1000\n- X_SESSION_DSHM_HOST, default: hazelcast\n- X_SESSION_DSHM_PORT, default: 4321\n- X_SESSION_DSHM_POOL_NAME, default: oidc_sessions\n- X_SESSION_DSHM_POOL_TIMEOUT, default: 1000\n- X_SESSION_DSHM_POOL_SIZE, default: 10\n- X_SESSION_DSMM_POOL_BACKLOG, default: 10\n\n## Session: SHM\n\n\u003e Good for single instance. No additional software is required.\n\n- Reference: \u003chttps://github.com/bungle/lua-resty-session#shared-dictionary-storage-adapter\u003e\n- To replace the default sesion storage: **cookie** with **shm**, set\n  - `KONG_X_SESSION_STORAGE=shm`\n- KONG_X_SESSION_SHM_STORE, default: oidc_sessions\n- KONG_X_SESSION_SHM_STORE_SIZE, default: 5m\n- KONG_X_SESSION_SHM_USELOCKING, default: no\n- KONG_X_SESSION_SHM_LOCK_EXPTIME, default: 30\n- KONG_X_SESSION_SHM_LOCK_TIMEOUT, default: 5\n- KONG_X_SESSION_SHM_LOCK_STEP, default: 0.001\n- KONG_X_SESSION_SHM_LOCK_RATIO, default: 2\n- KONG_X_SESSION_SHM_LOCK_MAX_STEP, default: 0.5\n\n## Exclude IPs from access_log\n\n- `KONG_X_NOLOG_LIST_FILE` could be set to a file path, e.g. `/tmp/nolog.txt`\n- File format is `ip 0;`. To exclude for example requests from the kubernetes probes:\n\n    ```\n    127.0.0.1 0;\n    ```\n\n## Releases\n\n- Kong v3.4.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/master/Dockerfile)\n- Kong v3.3.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.3.1-1/Dockerfile)\n- Kong v3.3.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.3.0-1/Dockerfile)\n- Kong v3.2.2: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.2.2-4/Dockerfile)\n- Kong v3.2.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.2.1-2/Dockerfile)\n- Kong v3.1.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.1.1-1/Dockerfile)\n- Kong v3.1.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.1.0-1/Dockerfile)\n- Kong v3.0.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.0.1-1/Dockerfile)\n- Kong v3.0.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/3.0.0-6/Dockerfile)\n- Kong v2.8.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.8.1-1/Dockerfile)\n- Kong v2.8.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.8.0-4/Dockerfile)\n- Kong v2.7.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.7.1-1/Dockerfile)\n- Kong v2.7.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.7.0-3/Dockerfile)\n- Kong v2.6.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.6.0-2/Dockerfile)\n- Kong v2.5.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.5.1-1/Dockerfile)\n- Kong v2.5.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.5.0-2/Dockerfile)\n- Kong v2.4.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.4.1-1/Dockerfile)\n- Kong v2.4.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.4.0-1/Dockerfile)\n- Kong v2.3.2: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.3.3-2/Dockerfile)\n- Kong v2.3.2: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.3.2-2/Dockerfile)\n- Kong v2.3.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.3.0-3/Dockerfile)\n- Kong v2.2.1: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.2.1-3/Dockerfile)\n- Kong v2.1.4: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.1.4-1/Dockerfile)\n- Kong v2.1.0: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.1.0-1/Dockerfile)\n- Kong v2.0.5: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.0.5-4/Dockerfile)\n- Kong v2.0.4: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.0.4-1/Dockerfile)\n- Kong v2.0.3: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.0.3-1/Dockerfile)\n- Kong v2.0.2: [Dockerfile](https://github.com/revomatico/docker-kong-oidc/blob/2.0.2-1/Dockerfile)\n\n## Release notes\n\n- 2023-09-04 [3.4.0-2]\n  - Bump kong-oidc plugin to [1.4.0-1](https://github.com/revomatico/kong-oidc/releases/tag/v1.4.0-1)\n- 2023-08-14 [3.4.0-1]\n  - Bump kong to 3.4.0\n- 2023-08-09 [3.3.1-1]\n  - Bump kong to 3.3.1\n- 2023-06-13 [3.3.0-1]\n  - Bump kong to 3.3.0\n- 2023-03-26 [3.2.2-4]\n  - Introduce `KONG_X_NOLOG_LIST_FILE` that could optionally point to a file containing list of IPs to be excluded from access_log\n- 2023-03-26 [3.2.2-3]\n  - Bump lua-resty-oidc to 1.7.6-3 and kong-plugin-oidc to 1.3.1-1. Based on \u003chttps://github.com/zmartzone/lua-resty-openidc/issues/463\u003e, will fix \u003chttps://github.com/revomatico/docker-kong-oidc/issues/37\u003e\n- 2023-03-24 [3.2.2-2]\n  - Qote X_SESSION_SECRET in an attempt to prevent 500 internal error when it is not set\n- 2023-03-21 [3.2.2-1]\n  - Bump kong to 3.2.2. Went back to the official kong image.\n- 2023-03-08 [3.2.1-2]\n  - Bump [kong-plugin-cookies-to-headers](https://github.com/revomatico/kong-plugin-cookies-to-headers) plugin to 1.2.0-1\n- 2023-03-01 [3.2.1-1]\n  - Bump kong to 3.2.1. Change in base image as 3.2.0 is not yet released in the official image.\n- 2023-02-24 [3.1.1-1]\n  - Bump kong to 3.1.1\n- 2022-12-07 [3.1.0-1]\n  - Bump kong to 3.1.0\n- 2022-12-06 [3.0.1-1]\n  - Bump kong to 3.0.1\n- 2022-09-20 [3.0.0-6]\n  - Bump kong-oidc plugin 1.3.0-3\n- 2022-09-20 [3.0.0-5]\n  - Using kong-oidc plugin 1.3.0-2 that was fixed to work with Kong 3\n- 2022-09-17 [3.0.0-4]\n  - Using kong-oidc plugin 1.3.0-1 that was fixed to work with Kong 3\n  - Fixed build and basic test\n- 2022-09-08 [3.0.0-3]\n  - Fix patching luarocks file\n- 2022-09-08 [3.0.0-2]\n  - Bump kong-oidc plugin to 1.2.5-1\n- 2022-09-08 [3.0.0-1]\n  - Bump kong to 3.0.0\n- 2022-04-06 [2.8.1-1]\n  - Bump kong to 2.8.1\n- 2022-04-03 [2.8.0-4]\n  - Bump kong-oidc plugin to 1.2.4-4, thank you @ruiengana!\n- 2022-04-01 [2.8.0-3]\n  - Bump kong-oidc plugin to 1.2.4-3, thank you @ruiengana!\n  - Bump [ngx-distributed-shm](https://github.com/grrolland/ngx-distributed-shm) to 1.0.7\n- 2022-03-08 [2.8.0-2]\n  - Use kong official release image as base image\n- 2022-03-03 [2.8.0-1]:\n  - Bump kong to 2.8.0\n- 2022-02-15 [2.7.1-1]:\n  - Bump kong to 2.7.1\n  - Bump kong-oidc plugin to 1.2.4-2\n- 2022-01-25 [2.7.0-3]:\n  - Bump kong-oidc plugin to 1.2.4-1\n  - Bump revomatico/kong-plugin-cookies-to-headers to 1.1-1\n- 2022-01-07 [2.7.0-2]:\n  - Change to [kong-plugin-cookies-to-headers](https://github.com/revomatico/kong-plugin-cookies-to-headers)\n- 2022-01-07 [2.7.0-1]:\n  - Bump kong to 2.6.0\n  - Bump lua-resty-oidc to 1.7.5-1\n  - Add [kong-plugin-cookies-to-headers](https://github.com/pravin-raha/kong-plugin-cookies-to-headers)\n- 2021-10-20 [2.6.0-2]:\n  - Fix kong-oidc plugin rockspec [referral to just master](https://github.com/revomatico/docker-kong-oidc/issues/23), breaking older Dockerfile builds.\n- 2021-09-28 [2.6.0-1]:\n  - Bump kong to 2.6.0\n  - No more removing of kong-plugin-session, as this is [moved in tree of kong repo](https://github.com/Kong/kong/blob/master/CHANGELOG.md#260)\n- 2021-09-08 [2.5.1-1]:\n  - Bump kong to 2.5.1\n- 2021-07-14 [2.5.0-2]:\n  - Bumped kong-oidc version to 1.2.3-2 to implement \u003chttps://github.com/revomatico/kong-oidc/pull/8\u003e\n- 2021-07-14 [2.5.0-1]:\n  - Bump kong to 2.5.0\n- 2021-05-13 [2.4.1-1]:\n  - Bump kong to 2.4.1\n- 2021-04-14 [2.4.0-1]:\n  - Bump kong to 2.4.0\n  - Changed base docker image to kong/kong\n  - Bump [kong-plugin-session](https://github.com/Kong/kong-plugin-session) to 2.4.5\n- 2021-04-12 [2.3.3-3]:\n  - Add poor man [test using docker-compose and postgres database](test/docker-compose)\n- 2021-03-16 [2.3.3-2]:\n  - Add [pluggable compressor zlib](https://github.com/bungle/lua-resty-session#pluggable-compressors) dependencies #17\n- 2021-03-10 [2.3.3-1]:\n  - Bumped kong to 2.3.3\n- 2021-02-25 [2.3.2-2]:\n  - Do not add NET_BIND_SERVICE capability to make it easier to deploy the image in environments with security constraints\n  - Improved test script\n- 2021-02-17 [2.3.2-1]:\n  - Bumped kong to 2.3.2\n- 2021-02-17 [2.3.0-3]:\n  - Bumped kong-oidc version to 1.2.3-1 to implement PR [revomatico#3](https://github.com/revomatico/kong-oidc/pull/3) and [revomatico#4](https://github.com/revomatico/kong-oidc/pull/4)\n- 2021-01-21 [2.3.0-2]:\n  - Added session compression configuration using `KONG_X_SESSION_COMPRESSOR`\n- 2021-01-16 [2.3.0-1]:\n  - Bumped Kong to 2.3.0\n- 2021-01-16 [2.2.1-3]:\n  - Added `lua_shared_dict` caching for discovery, jwks and introspection. Default cache size is 128k (small).\n  - Bumped kong-oidc version to 1.2.2-2 to implement PR [revomatico#2](https://github.com/revomatico/kong-oidc/pull/2)\n  - Compatibility note: Groups/credentials are now injected regardless of `disable_userinfo_header` param\n  - Compatibility note: Param `disable_userinfo_header` is now honored also for introspection\n  - Compatibility note: OIDC authenticated request now clears possible (anonymous) consumer identity and sets X-Credential-Identifier\n- 2021-01-06 [2.2.1-2]:\n  - Removed `x_proxy_cache_storage_name` in favor of built-in `nginx_http_lua_shared_dict`. See: \u003chttps://github.com/Kong/kong/issues/4643\u003e\n  - Bump `kong-plugin-session` to 2.4.4\n- 2020-12-14 [2.2.1-1]:\n  - Bumped Kong to 2.2.1\n  - Bumped lua-resty-oidc to 1.7.4-1\n  - Bumped kong-plugin-session to 2.4.3\n- 2020-10-27 [2.1.4-1]:\n  - Bumped Kong to 2.1.4\n  - Bumped lua-resty-oidc to 1.7.3-1\n- 2020-07-26 [2.1.0-1]:\n  - Bumped Kong to 2.1.0\n- 2020-07-26 [2.0.5-4]:\n  - Set default image user to kong\n- 2020-07-03 [2.0.5-3]:\n  - Added DSHM (Hazelcast) session storage support using [ngx-distributed-shm](https://github.com/grrolland/ngx-distributed-shm/) dshm.lua library\n- 2020-07-02 [2.0.5-2]:\n  - Using kong-plugin-session 2.4.1\n  - Using lua-resty-session 3.5\n- 2020-07-02 [2.0.5-1]:\n  - Bumped Kong version to 2.0.5\n  - Add memcache env vars\n- 2020-05-06 [2.0.4-1]:\n  - Bumped Kong version to 2.0.4\n  - Bumped kong-oidc plugin to 1.2.1-1 after implementing PR [nokia#132](https://github.com/nokia/kong-oidc/pull/132)\n- 2020-04-12 [2.0.3-1]:\n  - Bumped Kong version to 2.0.3\n- 2020-03-20 [2.0.2-1]:\n  - Bumped Kong version to 2.0.2, using alpine image instead of centos\n- 2020-02-21 [1.5.0-1]:\n  - Bumped Kong version to 1.5.0, the last 1.x version\n  - Using [revomatico/kong-oidc](https://github.com/revomatico/kong-oidc) repo\n- 2019-11-19 [1.4.2-1]:\n  - Bumped Kong version to 1.4.2\n  - Added proxy cache plugin custom dictionary\n- 2019-10-28 [1.4.1-1]:\n  - Bumped Kong version to 1.4.1\n  - Added shm session storage support\n  - Added test.sh to quickly validate the build\n  - Improved README.md\n- 2019-10-28 [1.4.0-1]:\n  - Bumped Kong version to 1.4.0\n- 2019-09-05 [1.3.0-2]:\n  - Introduced `session_name` to override the default 'session' with 'oidc_session' as it may be overriden by upstream applications.\n- 2019-08-16 [1.3.0-1]:\n  - Bump to Kong 1.3.0-centos image\n  - Trying again lua-resty-oidc 1.7.2-1\n- 2019-08-16 [1.2.2-1]:\n  - Bump to Kong 1.2.2-centos image\n- 2019-07-05 [1.2.1-4]:\n  - Removed **kong-http-to-https-redirect** in favor of the built in route attribute: [https_redirect_status_code=301](https://docs.konghq.com/1.2.x/admin-api/#create-route)\n- 2019-07-04 [1.2.1-3]:\n  - Reverted to original nokia/kong-oidc, that uses lua-resty-oidc 1.6.1-1 - because of bad performance, again, with 1.7.1-1\n- 2019-07-04 [1.2.1-2]:\n  - Correctly added **hostname** package in Dockerfile\n  - Forced a commit to rebuild the image on docker hub, because of changes in kong-oidc plugin\n- 2019-07-01 [1.2.1-1]:\n  - Bump to Kong 1.2.1-centos image\n- 2019-06-13 [1.2.0-1]:\n  - Bump to Kong 1.2.0-centos image\n- 2019-04-27 [1.1.2-1]:\n  - Used Kong 1.1.2-centos image\n  - Changed kong-oidc plugin repo from Nokia to [revomatico](https://github.com/revomatico/kong-oidc) for various improvements and compatibility with lua-resty-openidc 1.7\n- 2019-04-02 [1.1.1-1]:\n  - Using Kong 1.1.1-centos image\n- 2019-02-22 [1.0.3-1]:\n  - Kept creation of `/usr/local/kong` in Dockerfile\n  - Removed Dockerfile's `USER` directive is incompatible with su-exec. See \u003chttps://github.com/ncopa/su-exec/issues/2#issuecomment-336670196\u003e\n- 2019-02-21 [1.0.3]:\n  - Replaced **revomatico/kong-http-to-https-redirect** with [dsteinkopf/kong-http-to-https-redirect](https://github.com/dsteinkopf/kong-http-to-https-redirect) as it has more fixes and improvements\n  - Upgraded rockspec [zmartzone/lua-resty-openidc](https://github.com/zmartzone/lua-resty-openidc) to 1.7.1-1\n  - Using Kong 1.0.3 image\n  - Added new environment variables to configure memcached\n- 2018-11-27 [0.14-2]:\n  - ~~Upgraded rockspec [zmartzone/lua-resty-openidc](https://github.com/zmartzone/lua-resty-openidc) to 1.7.0-2~~ this causes issues, staying with 1.6.1-1 for now\n  - Added env variable KONG_X_SESSION_SECRET to populate $session_secret variable with the same variable for all pods in the cluster\n  - Removed explicitly building lua-resty-openidc in Dockerfile, since is automatically done by luarocks build, since is a dependency of kong-oidc\n  - Set everything to run under regular user kong instead of root\n- 2018-10-09 [0.14-1]:\n  - Upgraded to Kong 0.14\n- 2018-10-09 [0.13-3]:\n  - Changed repo for kong-http-to-https-redirect to [revomatico/kong-http-to-https-redirect](https://github.com/revomatico/kong-http-to-https-redirect)\n- 2018-08-10 [0.13-2]:\n  - Forced a rebuild to update rockspec [HappyValleyIO/kong-http-to-https-redirect](https://github.com/HappyValleyIO/kong-http-to-https-redirect)\n- 2018-07-07 [0.13-1]:\n  - Updated rockspec [zmartzone/lua-resty-openidc](https://github.com/zmartzone/lua-resty-openidc) to 1.6.1-1\n- 2018-07-04 [0.13]:\n  - Updated rockspec [nokia/kong-oidc](https://github.com/nokia/kong-oidc) to 1.1.0-0\n  - Updated rockspec [zmartzone/lua-resty-openidc](https://github.com/zmartzone/lua-resty-openidc) to 1.6.0-1\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frevomatico%2Fdocker-kong-oidc","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frevomatico%2Fdocker-kong-oidc","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frevomatico%2Fdocker-kong-oidc/lists"}