@@ -35,12 +35,18 @@ This is accomplished with the following steps:
3535
3636---
3737
38+ ## Check compatibility between NGINX Ingress Controller and NGINX App Protect WAF versions
39+
40+ {{< include "nic/compatibility-tables/nic-nap.md" >}}
41+
42+ ---
43+
3844## Compile WAF Policy from JSON to Bundle
3945
4046Pull the ` waf-compiler ` image with:
4147
4248``` shell
43- docker pull private-registry.nginx.com/nap/waf-compiler:5.6 .0
49+ docker pull private-registry.nginx.com/nap/waf-compiler:5.8 .0
4450```
4551
4652Download the [ provided WAF Policy JSON] ( https://raw.githubusercontent.com/nginx/kubernetes-ingress/main/tests/data/ap-waf-v5/wafv5.json ) :
@@ -49,13 +55,13 @@ Download the [provided WAF Policy JSON](https://raw.githubusercontent.com/nginx/
4955curl -L https://raw.githubusercontent.com/nginx/kubernetes-ingress/main/tests/data/ap-waf-v5/wafv5.json -o /tmp/wafv5.json
5056```
5157
52- Use your pulled NAP Docker image (` private-registry.nginx.com/nap/waf-compiler:5.6 .0 ` ) to compile the policy bundle:
58+ Use your pulled NAP Docker image (` private-registry.nginx.com/nap/waf-compiler:5.8 .0 ` ) to compile the policy bundle:
5359
5460``` shell
5561# Using your newly created image
5662docker run --rm \
5763 -v /tmp:/tmp \
58- private-registry.nginx.com/nap/waf-compiler:5.6 .0 \
64+ private-registry.nginx.com/nap/waf-compiler:5.8 .0 \
5965 -p /tmp/wafv5.json \
6066 -o /tmp/compiled_policy.tgz
6167```
@@ -157,15 +163,15 @@ kubectl create secret \
157163Install the required CRDs for NGINX Ingress Controller:
158164
159165``` shell
160- kubectl apply -f https://raw.githubusercontent.com/nginx/kubernetes-ingress/v5.0.0 /deploy/crds.yaml
166+ kubectl apply -f https://raw.githubusercontent.com/nginx/kubernetes-ingress/v{{ < nic-version > }} /deploy/crds.yaml
161167```
162168
163169Using Helm, install NGINX Ingress Controller
164170
165171``` shell
166172helm upgrade --install nic nginx-stable/nginx-ingress \
167173 --set controller.image.repository=" private-registry.nginx.com/nginx-ic-nap-v5/nginx-plus-ingress" \
168- --set controller.image.tag=" 5.0.0 -alpine-fips" \
174+ --set controller.image.tag=" {{< nic-version >}} -alpine-fips" \
169175 --set controller.nginxplus=true \
170176 --set controller.appprotect.enable=true \
171177 --set controller.appprotect.v5=true \
0 commit comments