Skip to content

Commit 4fe327f

Browse files
authored
fix: Add volume mounts for NIC Security Monitoring due to missing permissions (#1141)
* fix: Add volume mounts for NIC Security Monitoring due to missing permissions * remove bold text
1 parent 2e7a0b2 commit 4fe327f

File tree

1 file changed

+16
-5
lines changed

1 file changed

+16
-5
lines changed

content/nic/tutorials/security-monitoring.md

Lines changed: 16 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -82,13 +82,24 @@ If you use custom container images, NGINX Agent must be installed along with NGI
8282

8383
{{< call-out "note" >}} The `features` list must not contain `nginx-config-async` or `nginx-ssl-config` as these features can cause conflicts with NGINX Ingress Controller.{{< /call-out >}}
8484

85-
3. Make sure that the ConfigMap is mounted to the NGINX Ingress Controller pod at `/etc/nginx-agent/nginx-agent.conf` by adding the following to the NGINX Ingress Controller deployment manifest:
85+
3. Make sure that the ConfigMap is mounted to the NGINX Ingress Controller pod at `/etc/nginx-agent/nginx-agent.conf` and the dynamic agent config is mounted at `/var/lib/nginx-agent` by adding the following volumes and volumeMounts to the NGINX Ingress Controller deployment manifest:
8686

8787
```yaml
88-
volumeMounts:
89-
- name: agent-conf
90-
mountPath: /etc/nginx-agent/nginx-agent.conf
91-
subPath: nginx-agent.conf
88+
volumes:
89+
- name: agent-conf
90+
configMap:
91+
name: agent-conf
92+
- name: agent-dynamic
93+
emptyDir: {}
94+
```
95+
96+
```yaml
97+
volumeMounts:
98+
- name: agent-conf
99+
mountPath: /etc/nginx-agent/nginx-agent.conf
100+
subPath: nginx-agent.conf
101+
- name: agent-dynamic
102+
mountPath: /var/lib/nginx-agent
92103
```
93104

94105
4. Follow the [Installation with Manifests]({{< ref "/nic/installation/installing-nic/installation-with-manifests.md" >}}) instructions to deploy NGINX Ingress Controller with custom resources enabled.

0 commit comments

Comments
 (0)