[THREESCALE-11620] Financial-grade API (FAPI) policy not showning up in admin portal

[tkan145]

What

https://issues.redhat.com/browse/THREESCALE-11620

[eguzki]

Verification steps

• Build image from this branch

make runtime-image

• Run the image

cat <<EOF >config.json
{
   "services": [
      {
         "proxy": {
             "hosts": ["one"],
             "proxy_rules": [],
             "api_backend": "https://echo-api.3scale.net",
             "policy_chain": []
         }
      }
   ]
}
EOF

docker run -ti --name apicast --rm -v $PWD/config.json:/opt/app/config.json:ro --env THREESCALE_CONFIG_FILE=/opt/app/config.json --env APICAST_LOG_LEVEL=debug --env APICAST_CONFIGURATION_LOADER=lazy --env APICAST_CONFIGURATION_CACHE=0 --env THREESCALE_DEPLOYMENT_ENV=staging --env BACKEND_ENDPOINT_OVERRIDE=http://127.0.0.1:3000 --env APICAST_WORKERS=1 apicast-runtime-image:latest

• In other terminal, fetch policies, ant then filter by name

APICAST_IP=$(docker inspect apicast | yq e -P '.[0].NetworkSettings.Networks.bridge.IPAddress' -)
curl -v -H "Host: one" http://${APICAST_IP}:8090/policies 2>/dev/null |  jq '.policies.fapi'

The policy fapi exists

[
  {
    "description": [
      "This policy adding support for Financial-grade API (API) profiles"
    ],
    "name": "The Financial-grade API (FAPI)",
    "$schema": "http://apicast.io/policy-v1/schema#manifest#",
    "version": "builtin",
    "configuration": {
      "type": "object",
      "properties": {
        "validate_x_fapi_customer_ip_address": {
          "type": "boolean",
          "description": "Validate x-fapi-customer-ip-address header. If the verification fails, the request will be rejected with 403",
          "title": "Validate x-fapi-customer-ip-address header",
          "default": "false"
        },
        "validate_oauth2_certificate_bound_access_token ": {
          "type": "boolean",
          "description": "Validate OAuth 2.0 Mutual TLS Certificate Bound access token. If enable, all tokens are verified and must contain the certificate hash claim (cnf). If the verification fails, the request will be rejected with 401.",
          "title": "Validate OAuth 2.0 Mutual TLS Certificate Bound access token",
          "default": "false"
        }
      }
    },
    "summary": "Support FAPI profiles"
  }
]

[eguzki]

LGTM