You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/nap-waf/v5/admin-guide/policy-lifecycle-management.md
+29-8Lines changed: 29 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -156,7 +156,7 @@ http {
156
156
157
157
**For New Installations**: Follow the complete step-by-step process below to install NGINX App Protect WAF with Policy Lifecycle Management enabled.
158
158
159
-
**For Existing Customers**: If you have an existing NGINX App Protect WAF deployment without Policy Lifecycle Management, you need to upgrade your installation to enable PLM functionality. Use `helm upgrade` instead of `helm install` in step 5, and ensure you have the required CRDs and storage configured before upgrading.
159
+
**For Existing Customers**: If you have an existing NGINX App Protect WAF deployment without Policy Lifecycle Management, you need to upgrade your installation to enable PLM functionality. Use `helm upgrade` instead of `helm install` in step 6, and ensure you have the required CRDs and storage configured before upgrading.
160
160
161
161
### Step-by-Step Installation Process
162
162
@@ -214,7 +214,18 @@ http {
214
214
The PV name defaults to `<release-name>-shared-bundles-pv`, but can be customized using the `appprotect.storage.pv.name` setting in your values.yaml file. Make sure to update all corresponding values for the PV and PVC to point to the correct names.
215
215
{{< /call-out >}}
216
216
217
-
4. **Configure Docker Registry Credentials**
217
+
4. **Create Namespace**
218
+
219
+
Create a namespace for the deployment (if you don't already have one):
220
+
```bash
221
+
kubectl create namespace <namespace>
222
+
```
223
+
224
+
{{< call-out "note" >}}
225
+
You can name the namespace whatever you want. If you already have an existing namespace, you can skip this step and use your existing namespace in the subsequent commands.
226
+
{{< /call-out >}}
227
+
228
+
5. **Configure Docker Registry Credentials**
218
229
219
230
Create the Docker registry secret or configure in values.yaml:
220
231
```bash
@@ -224,13 +235,12 @@ http {
224
235
--docker-password=none
225
236
```
226
237
227
-
5. **Deploy the Helm Chart with Policy Controller**
238
+
6. **Deploy the Helm Chart with Policy Controller**
228
239
229
240
**For new installations:**
230
241
```bash
231
242
helm install <release-name> . \
232
243
--namespace <namespace> \
233
-
--create-namespace \
234
244
--set appprotect.policyController.enable=true \
235
245
--set dockerConfigJson=$NGINX_REGISTRY_TOKEN \
236
246
--set appprotect.config.nginxJWT=$JWT \
@@ -249,7 +259,7 @@ http {
249
259
--set appprotect.nginxRepo.nginxKey=$NGINX_KEY
250
260
```
251
261
252
-
6. **Verify Installation**
262
+
7. **Verify Installation**
253
263
254
264
Check that all components are deployed successfully:
255
265
```bash
@@ -532,7 +542,18 @@ To verify that the policy bundles are being deployed and enforced correctly:
532
542
The PV name defaults to `<release-name>-shared-bundles-pv`, but can be customized using the `appprotect.storage.pv.name` setting in your values.yaml file.
533
543
{{< /call-out >}}
534
544
535
-
5. **Configure Docker Registry Credentials**
545
+
5. **Create Namespace**
546
+
547
+
Create a namespace for the deployment (if you don't already have one):
548
+
```bash
549
+
kubectl create namespace <namespace>
550
+
```
551
+
552
+
{{< call-out "note" >}}
553
+
You can name the namespace whatever you want. If you already have an existing namespace, you can skip this step and use your existing namespace in the subsequent commands.
554
+
{{< /call-out >}}
555
+
556
+
6. **Configure Docker Registry Credentials**
536
557
537
558
Create the Docker registry secret or configure in values.yaml:
538
559
```bash
@@ -542,7 +563,7 @@ To verify that the policy bundles are being deployed and enforced correctly:
542
563
--docker-password=none
543
564
```
544
565
545
-
6. **Upgrade the Helm Chart with Policy Controller**
566
+
7. **Upgrade the Helm Chart with Policy Controller**
546
567
547
568
Upgrade the chart with Policy Controller enabled:
548
569
```bash
@@ -555,7 +576,7 @@ To verify that the policy bundles are being deployed and enforced correctly:
555
576
--set appprotect.nginxRepo.nginxKey=$NGINX_KEY
556
577
```
557
578
558
-
7. **Verify Upgrade**
579
+
8. **Verify Upgrade**
559
580
560
581
Check that all components are deployed successfully:
0 commit comments