Release Notes
For Use with Red Hat 3scale API Management 2.6
Abstract
Preface
This document is intended for use with Red Hat 3scale API Management and related patch releases.
Chapter 1. Red Hat 3scale API Management 2.6.1 - Patch release
This document is intended for use with Red Hat 3scale API Management 2.6.1 On-premises.
1.1. Resolved issues
- The upgrade process of 3scale with Oracle Database, from version 2.5 to 2.6, now runs successfully due to updates in the image files (This content is not included.JIRA #4793).
Chapter 2. Red Hat 3scale API Management 2.6
This document is intended for use with Red Hat 3scale API Management 2.6 On-premises.
2.1. Supported configurations
- Check the latest information about 3scale 2.6 supported configurations at the Red Hat 3scale API Management Supported Configurations website.
- The operator image should only be installed using the supported Operator Lifecycle Manager (OLM) installation procedure. It is not intended to be installed manually.
2.2. New features
2.2.1. Major features
- Introducing 3scale 2.6 certification on OpenShift 4.1 (Content from issues.jboss.org is not included.JIRA #2657).
- 3scale operator with installation is based on OLM (Content from issues.jboss.org is not included.JIRA #2384).
- Redis High Availability and Disaster Recovery (HA/DR) are now supported (Content from issues.jboss.org is not included.JIRA #2584).
- Automated API lifecycle supports Toolbox and Jenkins pipelines (Content from issues.jboss.org is not included.JIRA #2201), with limitations regarding the edition of exported YAML files (Content from issues.jboss.org is not included.JIRA #2350).
APIcast policies:
- Retry policy: APIcast retries the request before reporting an error (Content from issues.jboss.org is not included.JIRA #2261).
- Upstream connection policy: Now you can modify the default values of some NGINX directives depending on your API backend (Content from issues.jboss.org is not included.JIRA #2450).
- Audit logs trail: You can forward existing audit logs to the standard container and pod logs (Content from issues.jboss.org is not included.JIRA #2593)
- OpenID Connect integration features are extended to facilitate work of third-party identity providers with Zync for client synchronization (Content from issues.jboss.org is not included.JIRA #1131).
-
3scale containerized images are now hosted at the authenticated registry located in
registry.redhat.io(Content from issues.jboss.org is not included.JIRA #2292). - 3scale provides PostgreSQL support for system (Content from issues.jboss.org is not included.JIRA #2839).
2.2.2. Minor features
- We have improved filtering of APIcast services by using URL paths and regular expressions (Content from issues.jboss.org is not included.JIRA #2446).
- Now you can include additional information for metrics when setting up Prometheus alerts at the API Level (Content from issues.jboss.org is not included.JIRA #2532).
- Changes in the OpenID and OAuth token validation flow to improve access control (Content from issues.jboss.org is not included.JIRA #2262).
- Optimized features are now available so you can configure APIcast for better performance (Content from issues.jboss.org is not included.JIRA #2337).
- With 3scale toolbox, now you can choose if new methods and metrics are enabled or disabled, both for new and existing plans (Content from issues.jboss.org is not included.JIRA #2448).
- Matches operator was added to Edge Limiting policy to use this policy as a mapping rule that can limit rates on the second time scale (Content from issues.jboss.org is not included.JIRA #2590).
- Added a new variable environment called APICAST_PATH_ROUTING_ONLY. When the variable is set to true, APIcast uses path-based routing and does not fallback to the default host-based routing (Content from issues.jboss.org is not included.JIRA #1150).
- Now you can manage access to different HTTP methods using Red Hat Single Sign On (RH-SSO) role check policy (Content from issues.jboss.org is not included.JIRA #2236).
- You can enable OpenID Connect (OIDC) via user interface when you select Istio as an integration option (Content from issues.jboss.org is not included.JIRA #2435).
- We have included additional information to differentiate between metrics with a limit of 0 (disabled) and exceeded limit errors (Content from issues.jboss.org is not included.JIRA #2756).
- Introducing Patternfly 4 integration (Content from issues.jboss.org is not included.JIRA #2296).
- With 3scale toolbox, you can run commands to create, list, show, update and delete application plans (Content from issues.jboss.org is not included.JIRA #2798).
- CLI Toolbox now include operations to enabled and to disable current application plans (Content from issues.jboss.org is not included.JIRA #2437).
2.3. Resolved issues
- Dashboard stream and email notifications are filtered according to the admin member permissions (Content from issues.jboss.org is not included.JIRA #629).
- Fixed the bootstrap reference in the Main layout template which causes an issue with OpenAPI Specification (Content from issues.jboss.org is not included.JIRA #1067).
- Service settings are correctly copied and updated (Content from issues.jboss.org is not included.JIRA #1537).
- Solved configuration issues in the UI for the IP check policy (Content from issues.jboss.org is not included.JIRA #1692).
- APIcast correctly parses uppercase letters in the back-end url (Content from issues.jboss.org is not included.JIRA #2540).
- Caching policy works as expected when combined with the batching policy (Content from issues.jboss.org is not included.JIRA #2705).
-
IP Check policy can be applied on multiple
x-forwarded-forheaders (Content from issues.jboss.org is not included.JIRA #2775). With 3scale toolbox, now you can:
- Copy a service from 3scale Hosted (SaaS) to 3scale On-premises when APIcast is self-managed (Content from issues.jboss.org is not included.JIRA #2268).
- Use an API after importing it with 3scale toolbox (Content from issues.jboss.org is not included.JIRA #2545).
- Import OpenAPI Specifications with extensions (Content from issues.jboss.org is not included.JIRA #2550).
- You can see feedback in the Integration settings page when policies are not available (Content from issues.jboss.org is not included.JIRA #2312).
- Integration Settings works properly when APIcast is not available (Content from issues.jboss.org is not included.JIRA #2327).
- Fixed Oracle schema for deleted objects (Content from issues.jboss.org is not included.JIRA #2298).
- Improvements in automatic suspension and deletion of tenants (Content from issues.jboss.org is not included.JIRA #2132).
-
Updated name (
Developer Account - Applications) for member permissions (Content from issues.jboss.org is not included.JIRA #2610). - Zync correctly deletes accounts (Content from issues.jboss.org is not included.JIRA #1346).
- Now the application page displays long metric names while keeping the layout, by adjusting line breaks (Content from issues.jboss.org is not included.JIRA #1382).
- AJAX request for Service Discovery fetches credentials policy (Content from issues.jboss.org is not included.JIRA #2254).
- Installation via operator works successfully with S3 storage (Content from issues.jboss.org is not included.JIRA #2774).
-
Application update events do not trigger zync when
first*traffic_atfields are changed (Content from issues.jboss.org is not included.JIRA #2072).
2.4. Documentation
- Automating API lifecycle with 3scale toolbox
APIcast policies:
- Documentation about the migration procedure to Redis Enterprise is not available in 3scale 2.6. The migration procedure is expected to be ready in a future patch release (Content from issues.jboss.org is not included.JIRA #2229).
2.5. Technology Preview features
- High Availability (HA) and Evaluation (Eval) OpenShift templates (Content from issues.jboss.org is not included.JIRA #1168).
- 3scale operator for capabilities: It allows using custom resources to define 3scale tenants, APIs, plans, limits, metrics and other definitions to set them into a 3scale installation (Content from issues.jboss.org is not included.JIRA #1798).
2.6. Known issues
- Pipeline examples from end-to-end solution for API lifecycle with 3scale toolbox are supported only on OCP 3.11 (Content from issues.jboss.org is not included.JIRA #2583).
When you change the OpenID Connect Authorization Flow in 3scale, Zync does not update the Red Hat Single Sign-On (RH-SSO) clients of 3scale applications (Content from issues.jboss.org is not included.JIRA #3025). To work around this issue, you have these alternatives:
- For existing applications, update 3scale application such as a change in the description: This will trigger an update that will modify the RH-SSO client for the application.
- Create a new application: This will create a new RH-SSO client with the correct authorization flows.
When importing or exporting application plan features and limits, modifying the exported YAML file is not supported (Content from issues.jboss.org is not included.JIRA #2350).
- The sample pipelines and applications are provided as examples only. Any modifications that you make to the pipelines are not directly supported by Red Hat. The underlying APIs, CLIs, and interfaces leveraged by the sample pipelines are fully supported by Red Hat.
- When using 3scale toolbox from an OpenShift image, you cannot add custom certificates (Content from issues.jboss.org is not included.JIRA #3102).
Makefileavailable to support customers migrating 3scale 2.5 to Redis Enterprise, and any other single-logical database Redis deployment.-
The script patches the secret and DeploymentConfigs, as well as migrates all
system-rediskeys to the targetsingle-dbRedis instance. However, it does not cover pods depending onbackend-redis(Content from issues.jboss.org is not included.JIRA #2197), and it requires adjustments to fit 3scale High Availability (HA) deployments (Content from issues.jboss.org is not included.JIRA #2407).
-
The script patches the secret and DeploymentConfigs, as well as migrates all
-
Operator does not accept REDIS_STORAGE_SENTINEL_HOSTS and REDIS_QUEUES_SENTINEL_HOSTS in the
backend-redissecret when configuring 3scale HA using Redis Sentinels (Content from issues.jboss.org is not included.JIRA #3258).
2.7. Changes in 3scale 2.6
2.7.1. Removed features
As OpenShift 4.x has removed wildcard routes, this feature is not available in 3scale 2.6. Instead, routes are created automatically with Zync. For more details about route creation, see the following documentation:
- In 3scale 2.6, Oracle database with OpenShift 4.1 is not supported.
- As announced in 3scale 2.5, compatibility with Microsoft Internet Explorer 11 (IE11) is not supported from 2.6.
2.7.2. Deprecated and removed features
- Adyen payment gateway. In 3scale 2.6 it is removed but still supported for the existing configurations. For current installations where the accounts have their billing configured to use Adyen, it will keep visible and working. Users using another payment gateway will not be able to choose or see Adyen.
2.7.3. Future changes
- The installation process is changing from template-based to operator-based. In this release we are introducing support for installing 3scale using the 3scale operator. In future releases we are planning on introducing support for upgrade-based operator and also for capabilities regarding service provisioning.