4.51.00.01 - Edge for Private Cloud release notes

You're viewing Apigee Edge documentation.
Go to the Apigee X documentation. info

On September 28, 2021, we released a new version of Apigee Edge for Private Cloud.

Update procedure

Updating this release will update the components in the following list of RPMs:

edge-analytics-4.51.00-0.0.40048.noarch.rpm
apigee-sso-4.51.00-0.0.21033.noarch.rpm
apigee-tomcat-8.5.64-0.0.916.noarch.rpm
apigee-machinekey-1.1.0-0.0.20007.noarch.rpm
apigee-cassandra-client-2.1.22-0.0.2513.noarch.rpm
apigee-cassandra-2.1.22-0.0.2528.noarch.rpm
apigee-drupal-7.82-0.0.309.noarch.rpm
apigee-drupal-devportal-4.51.00-0.0.411.noarch.rpm
apigee-sap-drupal-devportal-4.51.00-0.0.411.noarch.rpm
apigee-mirror-4.51.00-0.0.1020.noarch.rpm
apigee-mtls-4.51.00-0.0.20226.noarch.rpm
edge-management-ui-4.51.00-0.0.20019.noarch.rpm
edge-ui-4.51.00-0.0.20199.noarch.rpm
edge-management-ui-static-4.51.00-0.0.20034.noarch.rpm
apigee-adminapi-4.51.00-0.0.608.noarch.rpm
apigee-lib-4.51.00-0.0.1018.noarch.rpm
apigee-provision-4.51.00-0.0.616.noarch.rpm
apigee-service-4.51.00-0.0.1429.noarch.rpm
apigee-setup-4.51.00-0.0.1129.noarch.rpm
apigee-configutil-4.51.00-0.0.614.noarch.rpm
apigee-postgresql-10.17-0.0.2520.noarch.rpm
apigee-validate-4.51.00-0.0.625.noarch.rpm
edge-gateway-4.51.00-0.0.60142.noarch.rpm
edge-management-server-4.51.00-0.0.60142.noarch.rpm
edge-message-processor-4.51.00-0.0.60142.noarch.rpm
edge-postgres-server-4.51.00-0.0.60142.noarch.rpm
edge-qpid-server-4.51.00-0.0.60142.noarch.rpm
edge-router-4.51.00-0.0.60142.noarch.rpm

You can check the RPM versions you currently have installed, to see if they need to be updated, by entering:

apigee-all version

To update your installation, perform the following procedure on the Edge nodes:

On all Edge nodes:
1. Clean the Yum repos:
```
sudo yum clean all
```
2. Download the latest Edge 4.51.00 bootstrap_4.51.00.sh file to /tmp/bootstrap_4.51.00.sh:
```
curl https://software.apigee.com/bootstrap_4.51.00.sh -o /tmp/bootstrap_4.51.00.sh
```
3. Install the Edge 4.51.00 apigee-service utility and dependencies:
```
sudo bash /tmp/bootstrap_4.51.00.sh apigeeuser=uName apigeepassword=pWord
```
  where uName:pWord are the username and password you received from Apigee. If you omit pWord, you will be prompted to enter it.
4. Update the apigee-setup utility:
```
sudo /opt/apigee/apigee-service/bin/apigee-service apigee-setup update
```
5. Update the apigee-lib utility:
```
sudo /opt/apigee/apigee-service/bin/apigee-service apigee-lib update
```
6. Use the source command to execute the apigee-service.sh script:
```
source /etc/profile.d/apigee-service.sh
```

Update the apigee-validate utility on the Management Server:

/opt/apigee/apigee-service/bin/apigee-service apigee-validate update

Update the apigee-provision utility on the Management Server:

/opt/apigee/apigee-service/bin/apigee-service apigee-provision update

Update the apigee-adminapi utility:

/opt/apigee/apigee-service/bin/apigee-service apigee-adminapi update

Update apigee-machinekey utility:

/opt/apigee/apigee-service/bin/apigee-service apigee-machinekey update

Update apigee-config util:

/opt/apigee/apigee-service/bin/apigee-service apigee-configutil update

Update all Cassandra nodes:
```
/opt/apigee/apigee-setup/bin/update.sh -c cs -f configFile
```
where configFile specifies the configuration file that you used to install Apigee Edge for Private Cloud. For example, /opt/silent.conf.

Update Postgres nodes (master and standby):

/opt/apigee/apigee-setup/bin/update.sh -c ps -f /opt/silent.conf

On all Edge nodes, execute the update.sh script for the edge process:
```
/opt/apigee/apigee-setup/bin/update.sh -c edge -f configFile
```

Execute the update.sh script for SSO on all nodes:

/opt/apigee/apigee-setup/bin/update.sh -c sso -f configFile

Execute the update.sh for the UI on all nodes:

/opt/apigee/apigee-setup/bin/update.sh -c ui -f configFile

If you are using the New Edge experience, execute the following command:
```
/opt/apigee/apigee-setup/bin/update.sh -c ue -f configFile
```
On all Apigee Developer Services portal nodes, update the devportal process by executing the following command:
```
/opt/apigee/apigee-setup/bin/update.sh -c dp -f configFile
```
If you are using Apigee mTLS, follow the procedure described in Upgrade Apigee mTLS. For more information, see Introduction to Apigee mTLS.

Changes to supported software

There are no changes to supported software in this release.

Deprecations and retirements

There are no new deprecations or retirements in this release.

New features

This release introduces the following new features:

Ability to enable encryption of developer App credential secrets

We have added the ability to enable encryption of developer App credential secrets. See Enabling secret key encryption for more details.

Added support for OASValidation policy in the Edge UI

The OASValidation (OpenAPI Specification Validation) policy enables you to validate an incoming request or response message against an OpenAPI 3.0 Specification (JSON or YAML). This policy is already available through the Edge API. WIth this release, you can now add the policy in the Edge UI.l

New wrapper around the nodetool repair tool

The wrapper does a sanity check on disk space (where Cassandra is mounted) before running the nodetool repair. The wrapper also supports JMX authentication and SSL over JMX related configurations.

Added support in the LDAP policy for dynamic string substitution for the <BaseDN> element.

The LDAP policy's <BaseDN> element specifies the base level of LDAP under which all of your data exists. In this release, we have added a ref attribute to the element, which you can use to specify a flow variable containing the <BaseDN> value, such as apigee.baseDN. ref takes precedence over an explicit BaseDN value. If you specify both ref and value, ref has priority. If ref does not resolve at runtime, value is used.

New diagnostic tool, sosreport

Added Sosreport, a new system level diagnostic and data collection tool.

Bug fixes

This section lists the Private Cloud bugs that were fixed in this release.

Issue ID	Description
193216745	There was a minor bug in the way data center names are sorted in Cassandra setup scripts. This has been fixed.
193216745	Fixed an issue with certain spike arrest policy configurations failing with 5XX errors
197513151	Fixed inconsistent jQuery script path in classic UI
151852439	Enhanced logging for UI was failing due to a misconfiguration of the `.properties` file This has been fixed.
194875545	404 error while navigating to a developer from the developer apps page This has been fixed.
179769806	Companies were not appearing in the Edge UI This has been fixed.
188039112	Self-signed certs trust issues in the Edge UI This has been fixed.
195932618	`console.log()` was causing excessive logging This has been fixed.
1195932115	Apigee SSO was incorrectly returning stack traces in responses. This has been fixed. Note that the stack traces are still logged.
79591934	apigee-validate was failing with obscure message This has been fixed. Error logging for apigee-validate script has been improved.
174732169	syslog messages were incorrectly being dropped This has been fixed.
193239069	Removed legacy keys from Gateway & Machinekey components
197760258	A failure in the permissions API was causing compatibility issues between the Edge UI and Gateway This issue, which occurred when external LDAP authentication was enabled, has been fixed.
194485178	Removed trailing and leading spaces from all the HTTP request and response limit properties
193918953	Removed some unused configurations from Gateway components
112262604	Enhanced script to change Postgres connection details for Mint Management server
197301743	A large SSL handshake message was causing issues in Java 1.8.0_3XX This has been fixed.
188526117	The ip command was not prefixed with the absolute path This has been fixed. Apigee scripts now fully qualify path of the command.
171240470	Management update was failing when Cassandra JMX Authentication or SSL was enabled This has been fixed. A feature was added to provide Cassandra JMX Authentication & SSL configurations when running setup or update on Management server.
193564174	Edge UI Analytics dashboards were not able to fetch data Fixed a bug in which Analytics queries were failing for environments with a period in their name.
167960487	Reserved keywords AND/OR within text of dimensions were causing Analytics reports to fail. This has been fixed.
132402519	Extra whitespace in IP address list of `router.properties` was preventing routers from coming up This has been fixed. The extra whitespace is now removed.
198627666	Users were able to download inc files based on Nginx configuration files This has been fixed. A file not found error is now displayed when a user tries to access a configuration file.
199901238	Issue with upgrading Message Processors from older Edge for Private Cloud versions When upgrading Message Processors from older Edge versions to 4.51, it was possible to encounter an error with runtime requests containing KVM operations. This has been fixed.

Security issues fixed

The following is a list of known security issues that have been fixed in this release. To avoid these issues, install the latest version of Edge Private Cloud.

Issue ID	Description
N/A	Passwords were being logged in Edge for Private Cloud, due to normal logging of configuration file delta changes. You can prevent logging of configuration changes as follows: If an Edge component is already installed, do either of the following steps: Set `LOGGER_PRINT_CONFIG_DELTA=false` as an environment variable. This stops configuration delta logging for all components on that node. To stop configuration delta logging for specific components, add `logger.print.config.delta=false` to the customer-specific configuration file for that component. This stops logging of configuration changes for that component. See How to configue Edge for more information. If you are installing an Edge component, you can prevent logging of configuration changes by adding the following entry to the `silent.conf` file: CONFIG_DELTA_LOG=n This configures the component not to log configuration changes.
CVE-2021-23337	A command injection vulnerability has been fixed in Lodash 2.4.1
N/A	Improved security of passwords and related data stored in the platform.
CVE-2015-9251	Cross-site Scripting (XSS) is fixed when a cross-domain Ajax request is performed without the dataType option in jQuery.
N/A	Added additional protections against SAML assertion replay attacks.

Known issues

See Known issues with Edge for Private Cloud for a complete list of known issues.