[Bug]: Policy dev-tintin-system/jwt-policy is invalid and was rejected

[jxs1211]

Version

edge

What Kubernetes platforms are you running on?

Kind

Steps to reproduce

1. deploy VS with jwt
2. see error in description of policy

➜  tintin-voip git:(test-k8s) ✗ kdes policy jwt-policy                 
Name:         jwt-policy
Namespace:    dev-tintin-system
Labels:       project=tintin
              version=v1.0.0
Annotations:  <none>
API Version:  k8s.nginx.org/v1
Kind:         Policy
Metadata:
  Creation Timestamp:  2025-08-13T07:35:04Z
  Generation:          1
  Resource Version:    6094225
  UID:                 b2b5b1e3-bdd1-4f53-9dc3-f7c667560a3e
Spec:
  Jwt:
    Realm:   MyProductAPI
    Secret:  jwk-secret
    Token:   $http_token
Status:
  Message:  Policy dev-tintin-system/jwt-policy is invalid and was rejected: spec.jwt: Forbidden: jwt secrets are only supported in NGINX Plus
  Reason:   Rejected
  State:    Invalid
Events:     <none>

[github-actions]

Hi @jxs1211 thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

[pdabelf5]

@jxs1211 Are you running NGINX Plus? The JWT policy is an NGINX Plus feature

[jxs1211]

i just install nic with helm, so i think i'm not.

…

---Original--- From: "Paul ***@***.***> Date: Wed, Aug 13, 2025 21:41 PM To: ***@***.***>; Cc: "Jay ***@***.******@***.***>; Subject: Re: [nginx/kubernetes-ingress] [Bug]: Policydev-tintin-system/jwt-policy is invalid and was rejected (Issue #8129) pdabelf5 left a comment (nginx/kubernetes-ingress#8129) @jxs1211 Are you running NGINX Plus? The JWT policy is an NGINX Plus feature — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: ***@***.***>

[jxs1211]

@jxs1211 Are you running NGINX Plus? The JWT policy is an NGINX Plus feature

Does that mean I need to subscribe or have any license for that feature, could you pls share any more details?

[brianehlert]

Yes.
"The JWT policy configures NGINX Plus to authenticate client requests using JSON Web Tokens."

You can request a trial to consider paid capabilities.
https://www.f5.com/trials/nginx-one

[danielnginx]

@jxs1211 does it solve your issue?

[jxs1211]

@jxs1211 does it solve your issue?

Yes, I moved to the F5 inc. for more details on the ingress with JWT, thanks for your patient and support. Please close the issue.