Policy definition fixes

Author: thivindu

…/default-policies/api-key-auth-v1.0.yaml …olicies/APIKeyAuthentication-v1.0.0.yamlgateway/gateway-controller/default-policies/api-key-auth-v1.0.yaml renamed to gateway/gateway-controller/default-policies/APIKeyAuthentication-v1.0.0.yaml gateway/gateway-controller/default-policies/api-key-auth-v1.0.yaml renamed to gateway/gateway-controller/default-policies/APIKeyAuthentication-v1.0.0.yaml

@@ -11,7 +11,6 @@ parameters:
   properties:
     key:
       type: string
-      required: true
       description: |
         The name of the header or query parameter that contains the API key.
         For headers: case-insensitive matching is used (e.g., "X-API-Key", "Authorization")
@@ -22,7 +21,6 @@ parameters:
 
     in:
       type: string
-      required: true
       description: |
         Specifies where to look for the API key.
         Must be either "header" or "query".
@@ -32,7 +30,6 @@ parameters:
 
     value-prefix:
       type: string
-      required: false
       description: |
         Optional prefix that should be stripped from the API key value before validation.
         Case-insensitive matching and removal. Common use case is "Bearer " for Authorization headers.
@@ -45,6 +42,6 @@ parameters:
     - key
     - in
 
-initParameters:
+systemParameters:
   type: object
   properties: {}

gateway/policies/api-key-auth/v1.0.0/policy-definition.yaml

@@ -11,7 +11,6 @@ parameters:
   properties:
     key:
       type: string
-      required: true
       description: |
         The name of the header or query parameter that contains the API key.
         For headers: case-insensitive matching is used (e.g., "X-API-Key", "Authorization")
@@ -22,7 +21,6 @@ parameters:
 
     in:
       type: string
-      required: true
       description: |
         Specifies where to look for the API key.
         Must be either "header" or "query".
@@ -32,7 +30,6 @@ parameters:
 
     value-prefix:
       type: string
-      required: false
       description: |
         Optional prefix that should be stripped from the API key value before validation.
         Case-insensitive matching and removal. Common use case is "Bearer " for Authorization headers.
@@ -45,6 +42,6 @@ parameters:
     - key
     - in
 
-initParameters:
+systemParameters:
   type: object
   properties: {}

gateway/policies/policy-manifest.yaml

@@ -54,3 +54,8 @@ policies:
   - name: JSONSchemaGuardrail
     version: v0.1.0
     filePath: ./json-schema-guardrail/v0.1.0
+
+  # API Key Authentication Policy
+  - name: APIKeyAuthentication
+    version: v1.0.0
+    filePath: ./api-key-auth/v1.0.0