From 7f59764ca64aa12fb37829a2ab92a9be96b411a7 Mon Sep 17 00:00:00 2001 From: Jon Cahill-Torre Date: Thu, 10 Apr 2025 19:58:10 +0100 Subject: [PATCH 1/5] docs: NIM KI cleanup --- content/nim/releases/known-issues.md | 387 +++++++++++++-------------- 1 file changed, 184 insertions(+), 203 deletions(-) diff --git a/content/nim/releases/known-issues.md b/content/nim/releases/known-issues.md index 20fbafcbd..4debaa468 100644 --- a/content/nim/releases/known-issues.md +++ b/content/nim/releases/known-issues.md @@ -1,32 +1,33 @@ --- docs: DOCS-937 +tags: +- docs title: Known Issues toc: true weight: 200 --- {{}} +This document lists and describes the known issues and possible workarounds in F5 NGINX Instance Manager. We also list the issues resolved in the latest releases. - This document lists and describes the known issues and possible workarounds in F5 NGINX Instance Manager. We also list the issues resolved in the latest releases. - -{{< tip >}}We recommend you upgrade to the latest version of Instance Manager to take advantage of new features, improvements, and bug fixes.{{< /tip >}} +{{< tip >}}We recommend you upgrade to the latest version of Instance Managerto take advantage of new features, improvements, and bug fixes.{{< /tip >}} --- ## 2.19.0 -February 6, 2025 -### {{% icon-resolved %}} Publishing the NAP policy fails with the error "The attack signatures with the given version was not found" {#45845} +February 06, 2025 -{{}} +### {{% icon-resolved %}} Publishing the NAP policy fails with the error “The attack signatures with the given version was not found” {#45845} -| Issue ID | Status | -|----------|--------| -| 45845 | Resolved in Instance Manager 2.19.1 | +{{}} +| Issue ID | Status | +|----------------|--------| +| 45845 | Fixed in Instance Manager 2.19.1 | +{{}} #### Description - -In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy from the UI fails if the latest NGINX App Protect WAF compiler v5.264.0 (for NGINX App Protect WAF v4.13.0 or v5.5.0) is manually installed without adding the NGINX repository certificate and key. +In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy from the UI fails if the latest NGINX App Protect WAF compiler v5.264 (for NGINX App Protect WAF v4.13.0 or v5.5.0) is manually installed without adding the NGINX repository certificate and key. #### Workaround @@ -49,107 +50,95 @@ In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy fr sudo systemctl restart nms-integrations ``` -{{}} --- + ## 2.18.0 -November 8, 2024 + +November 08, 2024 ### {{% icon-resolved %}} Automatic downloading of NAP compiler versions 5.210.0 and 5.264.0 fails on Ubuntu 24.04 {#45846} {{}} - -| Issue ID | Status | -|----------|--------| -| 45846 | Resolved in Instance Manager 2.19.1 | +| Issue ID | Status | +|----------------|--------| +| 45846 | Fixed in Instance Manager 2.19.1 | +{{}} #### Description - On Ubuntu 24.04, NGINX Instance Manager v2.18.0 and v2.19.0 fail to automatically download NGINX App Protect WAF compiler v5.210.0 (for NGINX App Protect WAF v4.12.0) and v5.264.0 (for NGINX App Protect WAF v4.13.0) from the NGINX repository. #### Workaround -Manually install the missing compiler by following the instructions in [Install the WAF compiler]({{< ref "nim/nginx-app-protect/setup-waf-config-management.md#install-the-waf-compiler" >}}). +Manually install the missing compiler by following the instructions in [Install the WAF compiler]({{< relref "nim/nginx-app-protect/setup-waf-config-management.md#install-the-waf-compiler" >}}). -{{}} +--- -### {{% icon-resolved %}} Error messages persist after fix {#45024} +### {{% icon-resolved %}} Syntax errors while saving template configuration {#45573} {{}} +| Issue ID | Status | +|----------------|--------| +| 45573 | Fixed in Instance Manager 2.19.0 | +{{}} -| Issue ID | Status | -|----------|----------------------------------| -| 45024 | Fixed in Instance Manager 2.19.0 | +#### Description +Saving templates as “staged configs” causes syntax errors due to Augment templates being multiple directories down the tree. +--- -#### Description -There is an issue that causes previous error messages to persist in the web interface, even after fixing the error causing the message. +### {{% icon-resolved %}} NGINX configuration error messages overlap outside the error window {#45570} +{{}} +| Issue ID | Status | +|----------------|--------| +| 45570 | Fixed in Instance Manager 2.19.0 | {{}} ---- - #### Description +If there is an NGINX configuration error when pushing a template configuration, the text overlaps outside the error window. -There is an issue that causes previous error messages to persist in the web interface, even after fixing the error. + +--- ### {{% icon-resolved %}} .tgz files are not accepted in templates {#45301} {{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 45301 | Fixed in Instance Manager 2.19.0 | - +| Issue ID | Status | +|----------------|--------| +| 45301 | Fixed in Instance Manager 2.19.0 | {{}} ---- - #### Description `.tgz` files are not accepted in templates while `.tar.gz` files are. -### {{% icon-resolved %}} NGINX configuration error messages overlap outside the error window {#45570} - -{{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 45570 | Fixed in Instance Manager 2.19.0 | - -{{}} - --- -#### Description -If there is an NGINX configuration error when pushing a template configuration, the text overlaps outside the error window. - -### {{% icon-resolved %}} Syntax errors while saving template configuration {#45573} +### {{% icon-resolved %}} Error messages persist after fix {#45024} {{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 45573 | Fixed in Instance Manager 2.19.0 | - +| Issue ID | Status | +|----------------|--------| +| 45024 | Fixed in Instance Manager 2.19.0 | {{}} #### Description -Saving templates as “staged configs” causes syntax errors due to Augment templates being multiple directories down the tree. +There is an issue that causes previous error messages to persist in the web interface, even after fixing the error causing the message. --- + ## 2.17.3 + September 13, 2024 ### {{% icon-resolved %}} The web interface can't display more than 100 certificates {#45565} {{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 45565 | Fixed in Instance Manager 2.19.0 | - +| Issue ID | Status | +|----------------|--------| +| 45565 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -157,17 +146,17 @@ The Certificate Management screen can only show up to 100 certificates. --- + ## 2.17.0 + July 10, 2024 ### {{% icon-resolved %}} Mismatch in date formats in custom date selection on NGINX usage graph {#45512} {{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 45512 | Fixed in Instance Manager 2.18.0 | - +| Issue ID | Status | +|----------------|--------| +| 45512 | Fixed in Instance Manager 2.18.0 | {{}} #### Description @@ -175,30 +164,14 @@ The months in the custom date range were not displayed correctly because NGINX I --- -### {{% icon-resolved %}} Failure to notify user when template configuration publish fails {#44975} +### {{% icon-resolved %}} NGINX Agent 2.36.0 fails to validate certain NGINX configurations in NGINX Instance Manager 2.17.0 {#45153} {{}} - -| Issue ID | Status | -|----------|----------------------------------| -| 44975 | Fixed in Instance Manager 2.18.0 | - +| Issue ID | Status | +|----------------|--------| +| 45153 | Fixed in nginxagent-2.36.0 | {{}} -#### Description -When publishing a configuration template fails, the system only displays "Accepted" without providing the final result, such as "Success" or "Failure." - ---- - -### {{% icon-resolved %}} NGINX Agent 2.36.0 fails to validate certain NGINX configurations in F5 NGINX Instance Manager 2.17.0 {#45153} - -{{}} - -| Issue ID | Status | -|----------|--------| -| 45153 | Fixed in NGINX Agent 2.36.1 | - -{{}} #### Description In NGINX Instance Manager 2.17.0, an "invalid number of arguments" error appears in the web interface when using specific configuration parameters in NGINX Agent 2.36.0. @@ -213,12 +186,11 @@ If you're installing NGINX Agent from package files, follow the steps in the [In ### {{% icon-bug %}} Web Analytics are not enabled after upgrading Instance Manager when keeping existing nms-http.conf {#45131} {{}} - -| Issue ID | Status | -|----------|--------| -| 45131 | Open | - +| Issue ID | Status | +|----------------|--------| +| 45131 | Open | {{}} + #### Description When using NGINX Instance Manager, you configure OIDC by manually editing the /etc/nginx/conf.d/nms-http.conf and /etc/nms/nms.conf files. @@ -237,12 +209,11 @@ add_header Content-Security-Policy "default-src 'none'; block-all-mixed-content; ### {{% icon-bug %}} Failure to retrieve instance configuration when NAP-enabled instance doesn't register properly {#45113} {{}} - -| Issue ID | Status | -|----------|--------| -| 45113 | Open | - +| Issue ID | Status | +|----------------|--------| +| 45113 | Open | {{}} + #### Description If NGINX Agent is configured to monitor NGINX App Protect before App Protect is installed, NGINX Agent will send an empty App Protect metadata structure to NGINX Instance Manager. This causes Instance Manager to fail to register the NGINX instance properly. @@ -252,30 +223,44 @@ Edit the "/etc/nginx-agent/nginx-agent.conf" file and configure "precompiled_pub --- -### {{% icon-resolved %}} Editing template submissions now allows for using most recent template version {#44971} +### {{% icon-resolved %}} Failure to notify user when template configuration publish fails {#44975} {{}} +| Issue ID | Status | +|----------------|--------| +| 44975 | Fixed in Instance Manager 2.18.0 | +{{}} + +#### Description +When publishing a configuration template fails, the system only displays "Accepted" without providing the final result, such as "Success" or "Failure." -| Issue ID | Status | -|----------|----------------------------------| -| 44971 | Fixed in Instance Manager 2.17.0 | +--- + +### {{% icon-resolved %}} Editing template submissions now allows for using most recent template version {#44971} +{{}} +| Issue ID | Status | +|----------------|--------| +| 44971 | Fixed in Instance Manager 2.17.0 | {{}} + #### Description When editing a template submission, you can now choose between using a snapshot of the template from when it was first deployed or the latest version of the template. **Important:** Note that if you use the latest version, changes to the templates might make an augment template incompatible with a base template, causing the publication to the data plane to fail. --- + ## 2.15.0 + December 12, 2023 ### {{% icon-bug %}} Some NGINX Management Suite features not available after adding license {#44698} {{}} -| Issue ID | Status | -|----------|--------| -| 44698 | Open | +| Issue ID | Status | +|----------------|--------| +| 44698 | Open | {{}} #### Description @@ -295,9 +280,9 @@ sudo systemctl restart nms {{}} -| Issue ID | Status | -|----------|--------| -| 44685 | Open | +| Issue ID | Status | +|----------------|--------| +| 44685 | Open | {{}} #### Description @@ -309,16 +294,18 @@ Terminate the license applied previously. Re-apply the license. --- + ## 2.14.0 + October 16, 2023 ### {{% icon-bug %}} Scan results may not include CVE count with App Protect installed {#44554} {{}} -| Issue ID | Status | -|----------|--------| -| 44554 | Open | +| Issue ID | Status | +|----------------|--------| +| 44554 | Open | {{}} #### Description @@ -330,9 +317,9 @@ When using the Scan feature, the CVE column may provide a value of '--' for inst {{}} -| Issue ID | Status | -|----------|--------| -| 44547 | Open | +| Issue ID | Status | +|----------------|--------| +| 44547 | Open | {{}} #### Description @@ -340,7 +327,7 @@ Under certain conditions, instances that are not reporting request totals may no #### Workaround -Configure NGINX Plus or NGINX Stub Status APIs to send correctly the NGINX metrics using NGINX Agent. See the [Metrics]({{< ref "/nim/monitoring/overview-metrics.md" >}}) documentation to learn more. +Configure NGINX Plus or NGINX Stub Status APIs to send correctly the NGINX metrics using NGINX Agent. See the [Metrics]({{< relref "nim/monitoring/overview-metrics.md" >}}) documentation to learn more. --- @@ -348,9 +335,9 @@ Configure NGINX Plus or NGINX Stub Status APIs to send correctly the NGINX metri {{}} -| Issue ID | Status | -|----------|--------| -| 44520 | Open | +| Issue ID | Status | +|----------------|--------| +| 44520 | Open | {{}} #### Description @@ -365,16 +352,18 @@ or --- + ## 2.13.0 + August 28, 2023 ### {{% icon-bug %}} If you publish a configuration with an uncompiled policy, it will fail the first time {#44267} {{}} -| Issue ID | Status | -|----------|--------| -| 44267 | Open | +| Issue ID | Status | +|----------------|--------| +| 44267 | Open | {{}} #### Description @@ -396,9 +385,9 @@ Retry pushing the new configuration. The deployment should work the second time {{}} -| Issue ID | Status | -|----------|--------| -| 43950 | Open | +| Issue ID | Status | +|----------------|--------| +| 43950 | Open | {{}} #### Description @@ -406,16 +395,18 @@ If `precompiled_publication` is set to `true`, NGINX Management Suite may incorr --- + ## 2.11.0 + June 12, 2023 ### {{% icon-bug %}} Updating Attack Signatures or Threat Campaigns on multiple instances simultaneously updates only one instance {#42838} {{}} -| Issue ID | Status | -|----------|--------| -| 42838 | Open | +| Issue ID | Status | +|----------------|--------| +| 42838 | Open | {{}} #### Description @@ -427,16 +418,18 @@ Update the Attack Signatures or Threat Campaigns package one instance at a time. --- + ## 2.10.0 + April 26, 2023 ### {{% icon-bug %}} When publishing a new version of Threat Campaign, the last two versions in the list cannot be selected {#42217} {{}} -| Issue ID | Status | -|----------|--------| -| 42217 | Open | +| Issue ID | Status | +|----------------|--------| +| 42217 | Open | {{}} #### Description @@ -452,9 +445,9 @@ Threat Campaign versions can be published with the API using the route: `api/pla {{}} -| Issue ID | Status | -|----------|--------| -| 42133 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 42133 | Open | {{}} #### Description @@ -470,9 +463,9 @@ When upgrading to 2.10 you may see a warning like the below message for the NGIN {{}} -| Issue ID | Status | -|----------|--------| -| 42119 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 42119 | Open | {{}} #### Description @@ -485,38 +478,17 @@ Republish the configuration for the affected configuration blocks. --- -## 2.8.0 -January 30, 2023 - -### {{% icon-bug %}} System reports "Attack Signature does not exist" when publishing default Attack Signature {#40020} - -{{}} - -| Issue ID | Status | -|----------|--------| -| 40020 | Open | - -{{}} -#### Description -The default Attack Signature might be unavailable for publishing from Instance Manager, even though it is listed on the web interface. Attempting to publish this Attack Signature results in the error message "Error publishing the security content: attack signature does not exist." - -#### Workaround - -[Download another (latest recommended) version of the Attack Signature and publish it]({{< ref "/nim/nginx-app-protect/setup-waf-config-management.md" >}}). Attack Signature 2019.07.16 should be removed from the list when you refresh the web interface. - ---- - ## 2.6.0 -November 17, 2022 +November 17, 2022 ### {{% icon-bug %}} App Protect Policies page fails when deployed via Helm chart {#38782} {{}} -| Issue ID | Status | -|----------|--------| -| 38782 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 38782 | Open | {{}} #### Description @@ -528,9 +500,9 @@ When installing NGINX Instance Manager on Kubernetes via Helm Chart, the App Pro {{}} -| Issue ID | Status | -|----------|--------| -| 38596 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 38596 | Open | {{}} #### Description @@ -550,9 +522,9 @@ This can also be diagnosed with log entries in `/var/log/nginx-agent/agent.log`, {{}} -| Issue ID | Status | -|----------|--------| -| 38488 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 38488 | Open | {{}} #### Description @@ -568,9 +540,9 @@ Unreferenced policy files may be removed manually from /etc/nms. {{}} -| Issue ID | Status | -|----------|--------| -| 38041 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 38041 | Open | {{}} #### Description @@ -582,9 +554,9 @@ The values currently populated for http.version_schema are incorrect. The respon {{}} -| Issue ID | Status | -|----------|--------| -| 36265 | Open | +| Issue ID | Status | +|----------------|--------| +| 36265 | Open | {{}} #### Description @@ -597,16 +569,18 @@ For example, in the NGINX App Protect WAF JSON declarative policy, these referen --- + ## 2.5.0 + October 04, 2022 ### {{% icon-bug %}} Aux data fails to upload if the size is greater than 3145728 characters {#37498} {{}} -| Issue ID | Status | -|----------|--------| -| 37498 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 37498 | Open | {{}} #### Description @@ -620,9 +594,9 @@ Request body has an error: doesn't match the schema: Error at "/auxFiles/files/3 {{}} -| Issue ID | Status | -|----------|--------| -| 37437 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 37437 | Open | {{}} #### Description @@ -641,16 +615,18 @@ systemctl restart nms-dpm --- + ## 2.3.0 + June 30, 2022 ### {{% icon-bug %}} Metrics may report additional data {#34255} {{}} -| Issue ID | Status | -|----------|--------| -| 34255 | Open | +| Issue ID | Status | +|----------------|--------| +| 34255 | Open | {{}} #### Description @@ -668,16 +644,18 @@ filterBy=!= '' --- + ## 2.2.0 + May 25, 2022 ### {{% icon-bug %}} Giving long names (255+ characters) to certificates causes internal error {#34185} {{}} -| Issue ID | Status | -|----------|--------| -| 34185 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 34185 | Open | {{}} #### Description @@ -689,16 +667,18 @@ Use a name that is 255 or fewer characters. --- + ## 2.1.0 + April 05, 2022 ### {{% icon-bug %}} An unexpected number of instances are shown after upgrading nginx-agent to 2.1.0 {#33307} {{}} -| Issue ID | Status | -|----------|--------| -| 33307 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 33307 | Open | {{}} #### Description @@ -714,9 +694,9 @@ You can safely delete the older entries or wait for them to expire. {{}} -| Issue ID | Status | -|----------|--------| -| 33160 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 33160 | Open | {{}} #### Description @@ -738,16 +718,18 @@ sudo systemctl restart nginx-agent --- + ## 2.0.0 + December 21, 2021 ### {{% icon-bug %}} NGINX App Protect WAF blocks NGINX Instance Manager from publishing configurations {#32718} {{}} -| Issue ID | Status | -|----------|--------| -| 32718 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 32718 | Open | {{}} #### Description @@ -755,14 +737,13 @@ NGINX Instance Manager does not currently support managing NGINX App Protect WAF --- - ### {{% icon-bug %}} Web interface doesn’t report error when failing to upload large config files {#31081} {{}} -| Issue ID | Status | -|----------|--------| -| 31081 | Open | +| Issue ID | Status | +|----------------|--------| +| 31081 | Open | {{}} #### Description @@ -778,9 +759,9 @@ Keep config files under 50 MB. {{}} -| Issue ID | Status | -|----------|--------| -| 28758 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 28758 | Open | {{}} #### Description @@ -788,7 +769,7 @@ When installing on CentOS 7, RHEL 7, and Amazon Linux 2, the package manager doe #### Workaround -Install a supported version of NGINX (v1.18 or later) or NGINX Plus (R22 or later). See the [Technical Specifications]({{< ref "/nim/fundamentals/tech-specs" >}}) guide for details. +Install a supported version of NGINX (v1.18 or later) or NGINX Plus (R22 or later). See the [Technical Specifications]({{< relref "nim/fundamentals/tech-specs.md" >}}) guide for details. --- @@ -796,9 +777,9 @@ Install a supported version of NGINX (v1.18 or later) or NGINX Plus (R22 or late {{}} -| Issue ID | Status | -|----------|--------| -| 28683 | Won't be resolved | +| Issue ID | Status | +|----------------|--------| +| 28683 | Open | {{}} #### Description From ebd6a0b0d8c33a3f61e3f5b8290e41faedc19729 Mon Sep 17 00:00:00 2001 From: Jon Cahill-Torre Date: Thu, 10 Apr 2025 20:05:32 +0100 Subject: [PATCH 2/5] fix: spacing --- content/nim/releases/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nim/releases/known-issues.md b/content/nim/releases/known-issues.md index 4debaa468..1ef6699b1 100644 --- a/content/nim/releases/known-issues.md +++ b/content/nim/releases/known-issues.md @@ -10,7 +10,7 @@ weight: 200 {{}} This document lists and describes the known issues and possible workarounds in F5 NGINX Instance Manager. We also list the issues resolved in the latest releases. -{{< tip >}}We recommend you upgrade to the latest version of Instance Managerto take advantage of new features, improvements, and bug fixes.{{< /tip >}} +{{< tip >}}We recommend you upgrade to the latest version of NIGNX Instance Manager to take advantage of new features, improvements, and bug fixes.{{< /tip >}} --- From d32b62d0b4f3cd9f9d1a31e1a1466174ab1b363e Mon Sep 17 00:00:00 2001 From: Jon Cahill-Torre Date: Thu, 10 Apr 2025 20:11:46 +0100 Subject: [PATCH 3/5] fix: spacing --- content/nim/releases/known-issues.md | 39 ++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/content/nim/releases/known-issues.md b/content/nim/releases/known-issues.md index 1ef6699b1..1820524f8 100644 --- a/content/nim/releases/known-issues.md +++ b/content/nim/releases/known-issues.md @@ -27,6 +27,7 @@ February 06, 2025 {{}} #### Description + In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy from the UI fails if the latest NGINX App Protect WAF compiler v5.264 (for NGINX App Protect WAF v4.13.0 or v5.5.0) is manually installed without adding the NGINX repository certificate and key. #### Workaround @@ -67,6 +68,7 @@ November 08, 2024 {{}} #### Description + On Ubuntu 24.04, NGINX Instance Manager v2.18.0 and v2.19.0 fail to automatically download NGINX App Protect WAF compiler v5.210.0 (for NGINX App Protect WAF v4.12.0) and v5.264.0 (for NGINX App Protect WAF v4.13.0) from the NGINX repository. #### Workaround @@ -84,6 +86,7 @@ Manually install the missing compiler by following the instructions in [Install {{}} #### Description + Saving templates as “staged configs” causes syntax errors due to Augment templates being multiple directories down the tree. --- @@ -97,6 +100,7 @@ Saving templates as “staged configs” causes syntax errors due to Augment tem {{}} #### Description + If there is an NGINX configuration error when pushing a template configuration, the text overlaps outside the error window. @@ -111,6 +115,7 @@ If there is an NGINX configuration error when pushing a template configuration, {{}} #### Description + `.tgz` files are not accepted in templates while `.tar.gz` files are. --- @@ -124,6 +129,7 @@ If there is an NGINX configuration error when pushing a template configuration, {{}} #### Description + There is an issue that causes previous error messages to persist in the web interface, even after fixing the error causing the message. --- @@ -142,6 +148,7 @@ September 13, 2024 {{}} #### Description + The Certificate Management screen can only show up to 100 certificates. --- @@ -160,6 +167,7 @@ July 10, 2024 {{}} #### Description + The months in the custom date range were not displayed correctly because NGINX Instance Manager assumed the data format was in the US timezone. --- @@ -173,6 +181,7 @@ The months in the custom date range were not displayed correctly because NGINX I {{}} #### Description + In NGINX Instance Manager 2.17.0, an "invalid number of arguments" error appears in the web interface when using specific configuration parameters in NGINX Agent 2.36.0. #### Workaround @@ -192,6 +201,7 @@ If you're installing NGINX Agent from package files, follow the steps in the [In {{}} #### Description + When using NGINX Instance Manager, you configure OIDC by manually editing the /etc/nginx/conf.d/nms-http.conf and /etc/nms/nms.conf files. During the upgrade to 2.17.0, the user is asked if they would like to keep their own nms-http.conf, or replace it with the new default. As Web Analytics are enabled via the /etc/nginx/conf.d/nms-http.conf file, if a user decides to keep their own config when prompted during upgrade, these will not get enabled. @@ -215,6 +225,7 @@ add_header Content-Security-Policy "default-src 'none'; block-all-mixed-content; {{}} #### Description + If NGINX Agent is configured to monitor NGINX App Protect before App Protect is installed, NGINX Agent will send an empty App Protect metadata structure to NGINX Instance Manager. This causes Instance Manager to fail to register the NGINX instance properly. #### Workaround @@ -232,6 +243,7 @@ Edit the "/etc/nginx-agent/nginx-agent.conf" file and configure "precompiled_pub {{}} #### Description + When publishing a configuration template fails, the system only displays "Accepted" without providing the final result, such as "Success" or "Failure." --- @@ -245,6 +257,7 @@ When publishing a configuration template fails, the system only displays "Accept {{}} #### Description + When editing a template submission, you can now choose between using a snapshot of the template from when it was first deployed or the latest version of the template. **Important:** Note that if you use the latest version, changes to the templates might make an augment template incompatible with a base template, causing the publication to the data plane to fail. --- @@ -264,6 +277,7 @@ December 12, 2023 {{}} #### Description + After adding a license, some NGINX Management Suite features might be disabled, even if they are included in the license. #### Workaround @@ -286,6 +300,7 @@ sudo systemctl restart nms {{}} #### Description + With the introduction of Instance Manager 2.15, we are expanding the features available for some licenses, such as those with only NGINX Plus entitlement. If such a license was applied before upgrading to 2.15, the expanded set of features will not be available as intended. #### Workaround @@ -309,6 +324,7 @@ October 16, 2023 {{}} #### Description + When using the Scan feature, the CVE column may provide a value of '--' for instances running specific versions of NGINX App Protect, including App Protect 4.4 and potentially others. --- @@ -323,6 +339,7 @@ When using the Scan feature, the CVE column may provide a value of '--' for inst {{}} #### Description + Under certain conditions, instances that are not reporting request totals may not show in the Network Utilization panel or drawer when data is sorted by Request count. This typically happens when NGINX is not configured to stream metrics data to NGINX Agent. #### Workaround @@ -341,6 +358,7 @@ Configure NGINX Plus or NGINX Stub Status APIs to send correctly the NGINX metri {{}} #### Description + Users might not have permission to access the built-in policies (NginxDefaultPolicy and NginxStrictPolicy) while using NGINX Management Suite. #### Workaround @@ -367,6 +385,7 @@ August 28, 2023 {{}} #### Description + In Instance Manager 2.13, a new configuration is published before the compile stage of a WAF policy is complete. This happens only when the policy is first referenced. This leads to a deployment failure, and the configuration rolls back. Typically, by the time you try to submit the configuration again, the policy has finished compiling, and the request goes through. The initial failure message looks like this: @@ -391,6 +410,7 @@ Retry pushing the new configuration. The deployment should work the second time {{}} #### Description + If `precompiled_publication` is set to `true`, NGINX Management Suite may incorrectly report the version of Attack Signatures (AS) and Threat Campaigns (TC) that you previously installed on the NAP WAF instance. --- @@ -410,6 +430,7 @@ June 12, 2023 {{}} #### Description + When updating Attack Signatures or Threat Campaign packages on multiple instances simultaneously, only one instance may be successfully updated. An error similar to the following is logged: `security policy bundle object with given ID was not found.` #### Workaround @@ -433,6 +454,7 @@ April 26, 2023 {{}} #### Description + The list of Threat Campaigns will disappear when scrolling down, preventing the selection of the oldest versions. #### Workaround @@ -451,6 +473,7 @@ Threat Campaign versions can be published with the API using the route: `api/pla {{}} #### Description + When upgrading to 2.10 you may see a warning like the below message for the NGINX Management Suite Ingestion service. It can be safely ignored. ```none @@ -469,6 +492,7 @@ When upgrading to 2.10 you may see a warning like the below message for the NGIN {{}} #### Description + After upgrading to Instance Manager 2.10, the API does not return lastDeploymentDetails for existing configuration blocks. This is then reflected as "Invalid Date" in the UI (See #42108). #### Workaround @@ -492,6 +516,7 @@ November 17, 2022 {{}} #### Description + When installing NGINX Instance Manager on Kubernetes via Helm Chart, the App Protect page shows an error banner, and no default policies are displayed. --- @@ -506,6 +531,7 @@ When installing NGINX Instance Manager on Kubernetes via Helm Chart, the App Pro {{}} #### Description + Deploying NGINX config with references to remote cert that resides in allowed directories could fail, with the following error: `BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory`. @@ -528,6 +554,7 @@ This can also be diagnosed with log entries in `/var/log/nginx-agent/agent.log`, {{}} #### Description + When using NGINX Instance Manager with App Protect policies, previously referenced policies in the NGINX configuration may not be removed after they are no longer referenced in the NGINX config. #### Workaround @@ -546,6 +573,7 @@ Unreferenced policy files may be removed manually from /etc/nms. {{}} #### Description + The values currently populated for http.version_schema are incorrect. The response is "4" for HTTP traffic and "6" for HTTPS traffic. --- @@ -560,6 +588,7 @@ The values currently populated for http.version_schema are incorrect. The respon {{}} #### Description + References to external files in a policy are not supported. For example, in the NGINX App Protect WAF JSON declarative policy, these references are not supported: @@ -584,6 +613,7 @@ October 04, 2022 {{}} #### Description + Updating a config with an aux data file exceeding 3145728 characters fails with a validation error similar to the following example: Request body has an error: doesn't match the schema: Error at "/auxFiles/files/3/contents": maximum string length is 3145728 @@ -600,6 +630,7 @@ Request body has an error: doesn't match the schema: Error at "/auxFiles/files/3 {{}} #### Description + Occasionally, when publishing an NGINX config to a NATS server, the system returns a `Deployment Not Found` error, and the `nms.log` file includes the error `http failure with code '131043': `. #### Workaround @@ -630,6 +661,7 @@ June 30, 2022 {{}} #### Description + NGINX Instance Manager reports metrics at a per-minute interval and includes dimensions for describing the metric data's characteristics. An issue has been identified in which metric data is aggregated across all dimensions, not just for existing metrics data. When querying the Metrics API with aggregations like `SUM(metric-name)`, the aggregated data causes the API to over count the metric. This overcounting skews some of the metrics dashboards. @@ -659,6 +691,7 @@ May 25, 2022 {{}} #### Description + When adding certificates, an internal error (error code: 134018) is returned if the name given for the certificate exceeds 255 characters. #### Workaround @@ -682,6 +715,7 @@ April 05, 2022 {{}} #### Description + After upgrading to NGINX Instance Manager 2.1.0, and updating nginx-agent from platform packaging, duplicate instances may appear on the Instance overview page. This issue is caused by a change in how the NGINX Agent generates the `system_uid`. #### Workaround @@ -700,6 +734,7 @@ You can safely delete the older entries or wait for them to expire. {{}} #### Description + When publishing a configuration, you might encounter an error similar to the following example: ``` text @@ -733,6 +768,7 @@ December 21, 2021 {{}} #### Description + NGINX Instance Manager does not currently support managing NGINX App Protect WAF instances. NGINX App Protect WAF may block attempts to publish configurations to NGINX App Protect WAF instances. --- @@ -747,6 +783,7 @@ NGINX Instance Manager does not currently support managing NGINX App Protect WAF {{}} #### Description + In the web interface, when uploading a config file that's larger than 50 MB (max size), the system incorrectly reports the state as `Analyzing` (Status code `403`), although the upload failed. #### Workaround @@ -765,6 +802,7 @@ Keep config files under 50 MB. {{}} #### Description + When installing on CentOS 7, RHEL 7, and Amazon Linux 2, the package manager doesn't prevent installing NGINX Instance Manager with unsupported versions of NGINX or NGINX Plus. As a consequence, it is possible that `nms-instance-manager` is installed without an NGINX gateway. Resulting in a less than optimal experience. #### Workaround @@ -783,6 +821,7 @@ Install a supported version of NGINX (v1.18 or later) or NGINX Plus (R22 or late {{}} #### Description + When starting NGINX Instance Manager, you may see errors similar to the following in `/etc/nginx/conf.d/nms-http.conf:227`: ```text From 0a7f74a813d5e6ea7cba1b815981e6fe4a914a19 Mon Sep 17 00:00:00 2001 From: Jon Cahill-Torre Date: Thu, 10 Apr 2025 20:14:18 +0100 Subject: [PATCH 4/5] fix: missing 0 --- content/nim/releases/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nim/releases/known-issues.md b/content/nim/releases/known-issues.md index 1820524f8..538060de7 100644 --- a/content/nim/releases/known-issues.md +++ b/content/nim/releases/known-issues.md @@ -28,7 +28,7 @@ February 06, 2025 #### Description -In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy from the UI fails if the latest NGINX App Protect WAF compiler v5.264 (for NGINX App Protect WAF v4.13.0 or v5.5.0) is manually installed without adding the NGINX repository certificate and key. +In NGINX Instance Manager v2.19.0, publishing an NGINX App Protect WAF policy from the UI fails if the latest NGINX App Protect WAF compiler v5.264.0 (for NGINX App Protect WAF v4.13.0 or v5.5.0) is manually installed without adding the NGINX repository certificate and key. #### Workaround From b98483c4e87740b5067157e119c458be46cc3131 Mon Sep 17 00:00:00 2001 From: Jon Cahill-Torre Date: Thu, 10 Apr 2025 21:02:05 +0100 Subject: [PATCH 5/5] fix: spacing. won't do tickets --- content/nim/releases/known-issues.md | 56 ++++++++++++++-------------- 1 file changed, 28 insertions(+), 28 deletions(-) diff --git a/content/nim/releases/known-issues.md b/content/nim/releases/known-issues.md index 538060de7..563ce6c11 100644 --- a/content/nim/releases/known-issues.md +++ b/content/nim/releases/known-issues.md @@ -10,7 +10,7 @@ weight: 200 {{}} This document lists and describes the known issues and possible workarounds in F5 NGINX Instance Manager. We also list the issues resolved in the latest releases. -{{< tip >}}We recommend you upgrade to the latest version of NIGNX Instance Manager to take advantage of new features, improvements, and bug fixes.{{< /tip >}} +{{< tip >}}We recommend you upgrade to the latest version of NGINX Instance Manager to take advantage of new features, improvements, and bug fixes.{{< /tip >}} --- @@ -23,7 +23,7 @@ February 06, 2025 {{}} | Issue ID | Status | |----------------|--------| -| 45845 | Fixed in Instance Manager 2.19.1 | +| 45845 | Fixed in Instance Manager 2.19.1 | {{}} #### Description @@ -64,7 +64,7 @@ November 08, 2024 {{}} | Issue ID | Status | |----------------|--------| -| 45846 | Fixed in Instance Manager 2.19.1 | +| 45846 | Fixed in Instance Manager 2.19.1 | {{}} #### Description @@ -82,7 +82,7 @@ Manually install the missing compiler by following the instructions in [Install {{}} | Issue ID | Status | |----------------|--------| -| 45573 | Fixed in Instance Manager 2.19.0 | +| 45573 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -96,7 +96,7 @@ Saving templates as “staged configs” causes syntax errors due to Augment tem {{}} | Issue ID | Status | |----------------|--------| -| 45570 | Fixed in Instance Manager 2.19.0 | +| 45570 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -111,7 +111,7 @@ If there is an NGINX configuration error when pushing a template configuration, {{}} | Issue ID | Status | |----------------|--------| -| 45301 | Fixed in Instance Manager 2.19.0 | +| 45301 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -125,7 +125,7 @@ If there is an NGINX configuration error when pushing a template configuration, {{}} | Issue ID | Status | |----------------|--------| -| 45024 | Fixed in Instance Manager 2.19.0 | +| 45024 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -144,7 +144,7 @@ September 13, 2024 {{}} | Issue ID | Status | |----------------|--------| -| 45565 | Fixed in Instance Manager 2.19.0 | +| 45565 | Fixed in Instance Manager 2.19.0 | {{}} #### Description @@ -163,7 +163,7 @@ July 10, 2024 {{}} | Issue ID | Status | |----------------|--------| -| 45512 | Fixed in Instance Manager 2.18.0 | +| 45512 | Fixed in Instance Manager 2.18.0 | {{}} #### Description @@ -177,7 +177,7 @@ The months in the custom date range were not displayed correctly because NGINX I {{}} | Issue ID | Status | |----------------|--------| -| 45153 | Fixed in nginxagent-2.36.0 | +| 45153 | Fixed in nginxagent-2.36.0 | {{}} #### Description @@ -197,7 +197,7 @@ If you're installing NGINX Agent from package files, follow the steps in the [In {{}} | Issue ID | Status | |----------------|--------| -| 45131 | Open | +| 45131 | Open | {{}} #### Description @@ -221,7 +221,7 @@ add_header Content-Security-Policy "default-src 'none'; block-all-mixed-content; {{}} | Issue ID | Status | |----------------|--------| -| 45113 | Open | +| 45113 | Open | {{}} #### Description @@ -239,7 +239,7 @@ Edit the "/etc/nginx-agent/nginx-agent.conf" file and configure "precompiled_pub {{}} | Issue ID | Status | |----------------|--------| -| 44975 | Fixed in Instance Manager 2.18.0 | +| 44975 | Fixed in Instance Manager 2.18.0 | {{}} #### Description @@ -253,7 +253,7 @@ When publishing a configuration template fails, the system only displays "Accept {{}} | Issue ID | Status | |----------------|--------| -| 44971 | Fixed in Instance Manager 2.17.0 | +| 44971 | Fixed in Instance Manager 2.17.0 | {{}} #### Description @@ -469,7 +469,7 @@ Threat Campaign versions can be published with the API using the route: `api/pla | Issue ID | Status | |----------------|--------| -| 42133 | Open | +| 42133 | Won't be resolved | {{}} #### Description @@ -488,7 +488,7 @@ When upgrading to 2.10 you may see a warning like the below message for the NGIN | Issue ID | Status | |----------------|--------| -| 42119 | Open | +| 42119 | Won't be resolved | {{}} #### Description @@ -512,7 +512,7 @@ November 17, 2022 | Issue ID | Status | |----------------|--------| -| 38782 | Open | +| 38782 | Won't be resolved | {{}} #### Description @@ -527,7 +527,7 @@ When installing NGINX Instance Manager on Kubernetes via Helm Chart, the App Pro | Issue ID | Status | |----------------|--------| -| 38596 | Open | +| 38596 | Won't be resolved | {{}} #### Description @@ -550,7 +550,7 @@ This can also be diagnosed with log entries in `/var/log/nginx-agent/agent.log`, | Issue ID | Status | |----------------|--------| -| 38488 | Open | +| 38488 | Won't be resolved | {{}} #### Description @@ -569,7 +569,7 @@ Unreferenced policy files may be removed manually from /etc/nms. | Issue ID | Status | |----------------|--------| -| 38041 | Open | +| 38041 | Won't be resolved | {{}} #### Description @@ -609,7 +609,7 @@ October 04, 2022 | Issue ID | Status | |----------------|--------| -| 37498 | Open | +| 37498 | Won't be resolved | {{}} #### Description @@ -626,7 +626,7 @@ Request body has an error: doesn't match the schema: Error at "/auxFiles/files/3 | Issue ID | Status | |----------------|--------| -| 37437 | Open | +| 37437 | Won't be resolved | {{}} #### Description @@ -687,7 +687,7 @@ May 25, 2022 | Issue ID | Status | |----------------|--------| -| 34185 | Open | +| 34185 | Won't be resolved | {{}} #### Description @@ -711,7 +711,7 @@ April 05, 2022 | Issue ID | Status | |----------------|--------| -| 33307 | Open | +| 33307 | Won't be resolved | {{}} #### Description @@ -730,7 +730,7 @@ You can safely delete the older entries or wait for them to expire. | Issue ID | Status | |----------------|--------| -| 33160 | Open | +| 33160 | Won't be resolved | {{}} #### Description @@ -764,7 +764,7 @@ December 21, 2021 | Issue ID | Status | |----------------|--------| -| 32718 | Open | +| 32718 | Won't be resolved | {{}} #### Description @@ -798,7 +798,7 @@ Keep config files under 50 MB. | Issue ID | Status | |----------------|--------| -| 28758 | Open | +| 28758 | Won't be resolved | {{}} #### Description @@ -817,7 +817,7 @@ Install a supported version of NGINX (v1.18 or later) or NGINX Plus (R22 or late | Issue ID | Status | |----------------|--------| -| 28683 | Open | +| 28683 | Won't be resolved | {{}} #### Description