Merge pull request #14 from IBM-Security/v22.07-assets

IAG v22.07 release updates

Author: keiran-ibm

config-ui/generator/src/com/ibm/iag/ui/Component.java

@@ -1148,7 +1148,15 @@ else if(_tabDescription.containsKey(name))
             StringBuffer disabledStr = new StringBuffer();
             handleRequiredFields(disabledStr);
 
-            retVal.append("                    <Button disabled={" + disabledStr.toString() + "} onClick={() => { handleSave(loadGrid, idPrefix, " + Constants.EXTRA_BTN_PARAMS + " doClose); }}>Save</Button>\n");
+            if(disabledStr.length() > 0)
+            {
+                retVal.append("                    <Button disabled={" + disabledStr.toString() + "} onClick={() => { handleSave(loadGrid, idPrefix, " + Constants.EXTRA_BTN_PARAMS + " doClose); }}>Save</Button>\n");
+            }
+            else
+            {
+                retVal.append("                    <Button onClick={() => { handleSave(loadGrid, idPrefix, " + Constants.EXTRA_BTN_PARAMS + " doClose); }}>Save</Button>\n");
+            }
+
             retVal.append("                  </div>\n");
         }
 

config-ui/react.skeleton/src/content/landingPage/landingPage.js

@@ -15,14 +15,14 @@ import yaml from 'js-yaml';
 
 const DOC_URL = "https://docs.verify.ibm.com/gateway/docs/";
 
-const SAMPLE_EMPTY_YAML = "version: 21.12";
+const SAMPLE_EMPTY_YAML = "version: 22.07";
 
 const SAMPLE_EMPTY = {
     "yaml": SAMPLE_EMPTY_YAML,
     "link": "#"
 }
 
-const SAML_AUTHZ_YAML = "version: \"21.12\"\n" +
+const SAML_AUTHZ_YAML = "version: \"22.07\"\n" +
                         "#\n" +
                         "# Configure an IAG container to proxy a single Web application, and define \n" +
                         "# an authorization policy for the Web application.  This configuration will \n" +
@@ -132,7 +132,7 @@ const SAMPLE_AUTHZ = {
     "link": DOC_URL + "examples-authorization-yaml"
 }
 
-const SAMPLE_BASIC_YAML = "version: \"21.12\"\n" +
+const SAMPLE_BASIC_YAML = "version: \"22.07\"\n" +
                           "\n" +
                           "#\n" +
                           "# Configure an IAG container with a very basic configuration.  This \n" +
@@ -191,7 +191,7 @@ const SAMPLE_BASIC = {
     "link": DOC_URL + "examples-oidc-verify-yaml"
 }                          
 
-const SAMPLE_ISVA_YAML =  "version: \"21.12\"\n" +
+const SAMPLE_ISVA_YAML =  "version: \"22.07\"\n" +
                           "\n" +
                           "#\n" +
                           "# Configure an IAG container with a very basic configuration.  This \n" +
@@ -257,7 +257,7 @@ const SAMPLE_ISVA = {
     "link": DOC_URL + "examples-oidc-verify-access-yaml"
 } 
 
-const SAMPLE_CREDVIEWER_YAML = "version: \"21.12\"\n" +
+const SAMPLE_CREDVIEWER_YAML = "version: \"22.07\"\n" +
                                "\n" +
                                "#\n" +
                                "# Configure an IAG container with a very basic configuration.  This \n" +
@@ -330,7 +330,7 @@ const SAMPLE_CREDVIEWER = {
     "link": DOC_URL + "examples-cred-viewer-yaml"
 }
 
-const SAMPLE_LWP_YAML = "version: \"21.12\"\n" +
+const SAMPLE_LWP_YAML = "version: \"22.07\"\n" +
                         "\n" +
                         "#\n" +
                         "# Configure an IAG container with a very basic configuration.  This \n" +
@@ -397,7 +397,7 @@ const SAMPLE_LWP = {
     "link": DOC_URL + "examples-local-webpages-yaml"
 }
 
-const SAMPLE_RL_YAML = "version: \"21.12\"\n" +
+const SAMPLE_RL_YAML = "version: \"22.07\"\n" +
                       "\n" +
                       "#\n" +
                       "# Configure an IAG container to proxy a single Web application.  This \n" +
@@ -494,7 +494,7 @@ const SAMPLE_RL = {
     "link": DOC_URL + "examples-rate-limiting-yaml" 
 };
 
-const SAMPLE_STDAPP_YAML = "version: \"21.12\"\n" +
+const SAMPLE_STDAPP_YAML = "version: \"22.07\"\n" +
                           "\n" +
                           "#\n" +
                           "# Configure an IAG container to proxy a single Web application.  This \n" +
@@ -563,7 +563,7 @@ const SAMPLE_STDAPP = {
     "link": DOC_URL + "examples-standard-application-yaml"
 };
 
-const SAMPLE_TRACING_YAML = "version: \"21.12\"\n" +
+const SAMPLE_TRACING_YAML = "version: \"22.07\"\n" +
                             "\n" +
                             "#\n" +
                             "# Configure an IAG container to proxy a single Web application, and activate\n" +
@@ -647,7 +647,7 @@ const SAMPLE_TRACING = {
     "link": DOC_URL + "examples-tracing-yaml"
 };
 
-const SAMPLE_UNAUTH_YAML = "version: \"21.12\"\n" +
+const SAMPLE_UNAUTH_YAML = "version: \"22.07\"\n" +
                            "\n" +
                           "#\n" +
                           "# Configure an IAG container to proxy a single Web application.  Due to the\n" + 
@@ -671,7 +671,7 @@ const SAMPLE_UNAUTH = {
     "link": DOC_URL + "examples-unauth-application-yaml"
 };      
 
-const SAMPLE_ISV_2FA_YAML = "version: \"21.12\"\n" +
+const SAMPLE_ISV_2FA_YAML = "version: \"22.07\"\n" +
                              "\n" +
                             "#\n" +
                             "# Configure an IAG container to proxy a single Web application, and define\n" +
@@ -756,7 +756,7 @@ const SAMPLE_ISV_2FA = {
     "link": DOC_URL + "examples-2fa-verify-yaml"
 };
 
-const SAMPLE_VH_YAML = "version: \"21.12\"\n" +
+const SAMPLE_VH_YAML = "version: \"22.07\"\n" +
                        "\n" +
                       "#\n" +
                       "# Configure an IAG container to proxy a single virtual host Web application.  \n" +
@@ -825,7 +825,7 @@ const SAMPLE_VH = {
     "link": DOC_URL + "examples-virtualhost-application-yaml"
 };
 
-const SAMPLE_HTTPTRAN_YAML = "version: \"21.12\"\n" +
+const SAMPLE_HTTPTRAN_YAML = "version: \"22.07\"\n" +
                              "\n" +
                             "#\n" +
                             "# Configure an IAG container to proxy a single Web application.  This \n" +
@@ -925,7 +925,7 @@ const SAMPLE_HTTPTRAN = {
     "link": DOC_URL + "examples-transformation-yaml"
 };
 
-const SAMPLE_OAUTH_ISVA_YAML = "version: \"21.12\"\n" +
+const SAMPLE_OAUTH_ISVA_YAML = "version: \"22.07\"\n" +
                                "\n" +
                               "#\n" +
                               "# Configure an IAG container with a very basic configuration.  This \n" +
@@ -981,7 +981,7 @@ const SAMPLE_OAUTH_ISVA = {
     "link": DOC_URL + "examples-oauth-verify-access-yaml"
 };
 
-const SAMPLE_OAUTH_ISV_YAML = "version: \"21.12\"\n" +
+const SAMPLE_OAUTH_ISV_YAML = "version: \"22.07\"\n" +
                               "\n" +
                               "#\n" +
                               "# Configure an IAG container with a very basic configuration.  This \n" +

openapi/logging.yaml

@@ -163,6 +163,9 @@ logging:
             - file_name: http.log
               component: pdweb.http
               level: 5
+              max_file_size: 12
+              max_rollover_files: 10
+              compress: true
       items:
         type: object
         properties:
@@ -192,6 +195,29 @@ logging:
             minimum: 0
             maximum: 9
             default: 0
+          max_file_size:
+            description: >
+              The maximum size (in MB) that the file can reach before it
+              is rolled over.
+            type: number
+            minimum: 1
+            maximum: unlimited
+            default: 1
+          max_rollover_files:
+            description: >
+              The maximum number of rollover files to be kept on disk.  When
+              the number of rollover log files reaches the specified
+              threshold, the oldest log file is deleted.
+            type: number
+            default: 1
+            minimum: 1
+            maximum: unlimited
+          compress:
+            description: >
+              A boolean which indicates whether rolled over log files should
+              be automatically compressed to conserve disk space.
+            type: boolean
+            default: true
 
     transaction:
       description: >

openapi/openapi.yaml

@@ -1,7 +1,7 @@
 # Copyright contributors to the Application Gateway project
 openapi: '3.0'
 info:
-  version: 21.12
+  version: 22.07
   title: IBM Application Gateway Configuration Specification (OpenAPI)
 components:
   schemas:
@@ -19,6 +19,7 @@ components:
         - 21.06
         - 21.09
         - 21.12
+        - 22.07
     secrets:
       $ref: "secrets.yaml#/secrets"
     server:

openapi/policies.yaml

@@ -35,7 +35,63 @@ policies:
                     paths:
                       - "*"
                     method: GET
-                    rule: "@http_trans_rule.xsl"
+                    rule: "@http_trans_rule.lua"
+          type: array
+          items:
+            type: object
+            properties:
+
+              name:
+                description: >
+                  The name which is associated with this transformation.
+                type: string
+                x-uuid: true
+                x-required: true
+              host:
+                description: >
+                  The host (obtained from the host header in the request) for
+                  which this transformation will take place. If no host header
+                  is specified all hosts will be matched.
+                type: string
+              paths:
+                description: >
+                  The paths for which this transformation will take place. If the wildcard
+                  "*" is specified all paths will be matched. This entry is an array and can
+                  be used to specify multiple paths.
+                type: array
+                items:
+                  type: string
+                  x-uuid: true
+                  x-required: true
+                  x-name: Path
+              method:
+                description: >
+                  The HTTP method for which this transformation will take
+                  place. If the wildcard "*" is specified all methods will be matched.
+                type: string
+              rule:
+                description: >
+                  The HTTP transformation rule.
+                type: string
+
+        postazn:
+          description: >
+            This node defines the transformations which will take place on
+            requests after authorization has been completed. This entry is 
+            an array and can be used to specify multiple transformations.
+
+
+            Example:
+
+            policies:
+              http_transformations:
+                postazn:
+                  - name: resource_1_postazn_rule
+                    host: www.test.com
+                    paths:
+                      - "*"
+                    method: GET
+                    rule: "@http_trans_rule.lua"
           type: array
           items:
             type: object
@@ -92,7 +148,13 @@ policies:
                       - "/resource_1"
                       - "/alt/resource_1"
                     method: GET
-                    rule: "@http_trans_rule.xsl"
+                    rule: "@http_trans_rule.lua"
+                  - name: legacy_xslt_rule
+                    host: www.test.com
+                    paths:
+                      - "/legacy"
+                    method: GET
+                    rule: "@legacy_rule.xsl"
                     attributes:
                       - AZN_CRED_PRINCIPAL_NAME
           type: array
@@ -134,16 +196,18 @@ policies:
                 type: string
               attributes:
                 description: >
-                  The credential attributes which will be included in the XML
-                  input document, used when evaluating the HTTP transformation
-                  rule.  The attributes will be stored in the
-                  HTTPResponse/credential/attributes/attribute path of the
-                  XML document.
+                  If the rule is a legacy XSLT based rule, this entry specifies the credential 
+                  attributes which will be included in the XML input document, used when 
+                  evaluating the HTTP transformation rule.  The attributes will be stored in the
+                  HTTPResponse/credential/attributes/attribute path of the XML document.
+
+                  This is entry is not required and has no effect when using a Lua transformation
+                  rule.
                 type: array
                 items:
                   type: string
                   x-uuid: true
-                  x-required: true
+                  x-required: false
                   x-name: Attribute
 
     cors: