Skip to content

Commit b7380b8

Browse files
committed
feat: Add working changes
1 parent 98a9e39 commit b7380b8

File tree

3 files changed

+14
-18
lines changed

3 files changed

+14
-18
lines changed

_banners/waf-early-access.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{{< banner "warning" "Early access feature" >}}
22

3-
This functionality is available in the latest release, but is at the early access stage.
3+
This functionality is available as an early access feature in the latest release.
44

55
{{< /banner >}}

content/waf/configure/compiler.md

Lines changed: 7 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,13 @@ You can use it to get the latest security updates for [Attack signatures]({{< re
1818

1919
The compiler is packaged as a Docker image and can executed using the Docker CLI or as part of a continuous integration/continuous delivery (CI/CD) pipeline.
2020

21-
With a virtual machine/bare-metal installation, read the [Update F5 WAF for NGINX signatures]({{< ref "/waf/install/update-signatures.md" >}}) topic.
21+
{{< call-out "note" "Alternatives to the compiler tool">}}
22+
23+
If you are using a virtual machine/bare-metal installation, read the [Update F5 WAF for NGINX signatures]({{< ref "/waf/install/update-signatures.md" >}}) topic.
24+
25+
If you are using a Helm-based Kubernetes deployment, read the [Policy lifecycle management]({{< ref "/waf/policies/lifecycle-management.md" >}}) topic.
26+
27+
{{< /call-out >}}
2228

2329
One or more bundle files can be referenced in the NGINX configuration file, and you can configure global settings such as the cookie seed and user-defined signatures.
2430

@@ -222,22 +228,6 @@ docker run \
222228
-dump -bundle $(pwd)/compiled_policy.tgz
223229
```
224230

225-
## Add a compiled bundle to Kubernetes
226-
227-
To use compiled bundles with Kubernetes, copy them to _/mnt/nap5_bundles_pv_data_ on a cluster node.
228-
229-
Ensure these files files are accessible to UID 101.
230-
231-
Then, in your NGINX configuration, refer to these files from _/etc/app_protect/bundles_.
232-
233-
The following example applies the bundle `custom_policy.tgz` located in the folder _/mnt/nap5_bundles_pv_data/_
234-
235-
```shell
236-
app_protect_policy_file "/etc/app_protect/bundles/custom_policy.tgz";
237-
```
238-
239-
The NGINX configuration itself can be integrated using a ConfigMap mount.
240-
241231
## Global settings
242232

243233
The global settings allows configuration of the following items:

content/waf/policies/lifecycle-management.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,12 @@ nd-content-type: reference
1616
nd-product: NAP-WAF
1717
---
1818

19+
{{< call-out "warning" "Information architecture note" >}}
20+
21+
There is some content remaining to migrate and rewrite from the equivalent NAP-WAF content.
22+
23+
{{< /call-out >}}
24+
1925
Policy lifecycle management (PLM) is a system for managing, compiling and deploying security policies in Kubernetes environments.
2026

2127
It extends the WAF compiler capabilities by providing a native Kubernetes operater-based approach for policy orchestration.

0 commit comments

Comments
 (0)