I have been trying to setup my Cloud Endpoints using ESPv2, GKE, and OpenAPI. I followed
this tutorial and when successfully set up, I wanted to lock down the endpoints with API Keys.
I wanted to option to restrict the
entire API using API key restriction, however in using the correct OpenAPI top level option security, the calls still come through
without checking the API key.
Am I missing something or have something misconfigured in my openapi.yaml below? I would happy to share more of the sensitive configuration in a private DM if it helps.
Cheers,
Erick Holguin