You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/waf/install/kubernetes-plm.md
+12-15Lines changed: 12 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,11 +22,9 @@ There are two new features available for Kubernetes through early access:
22
22
23
23
**Automated signature updates**, which can auto-update security signatures.
24
24
25
-
<!-- Policy lifecycle management (PLM) is a system for managing, compiling and deploying security policies in Kubernetes environments. -->
25
+
This extends the WAF compiler capabilities by providing a native Kubernetes operator-based approach for policy orchestration.
26
26
27
-
They extends the WAF compiler capabilities by providing a native Kubernetes operator-based approach for policy orchestration.
28
-
29
-
These feature revolve around a _Policy Controller_ which uses the Kubernetes operator pattern to manage the lifecycle of WAF security artifacts.
27
+
These features revolve around a _Policy Controller_ which uses the Kubernetes operator pattern to manage the lifecycle of WAF security artifacts.
30
28
31
29
It handles policy distribution at scale by removing manual steps and providing a declarative configuration model with Custom Resource Definitions (CRDs) for policies, logging profiles and signatures.
32
30
@@ -239,11 +237,10 @@ To enable them, you must configure the Policy Controller settings in your `value
239
237
namespace: <namespace>
240
238
241
239
appprotect:
242
-
## Note: This option is useful if you use Nginx Ingress Controller for example.
243
-
## Enable/Disable Nginx App Protect Deployment
240
+
## Enable/Disable NGINX App Protect Deployment
244
241
enable: true
245
242
246
-
## The number of replicas of the Nginx App Protect deployment
243
+
## The number of replicas of the NGINX App Protect deployment
247
244
replicas: 1
248
245
249
246
## Configure root filesystem as read-only and add volumes for temporary data
@@ -252,23 +249,23 @@ appprotect:
252
249
## The annotations for deployment
253
250
annotations: {}
254
251
255
-
## InitContainers for the Nginx App Protect pod
252
+
## InitContainers for the NGINX App Protect pod
256
253
initContainers: []
257
254
# - name: init-container
258
255
# image: busybox:latest
259
256
# command: ['sh', '-c', 'echo this is initial setup!']
260
257
261
258
nginx:
262
259
image:
263
-
## The image repository of the Nginx App Protect WAF image you built
260
+
## The image repository of the NGINX App Protect WAF image you built
264
261
## This must reference the Docker image you built following the Docker deployment guide
265
262
## Replace <your-private-registry> with your actual registry and update the image name/tag as needed
0 commit comments