@@ -35,12 +35,16 @@ This is accomplished with the following steps:
3535
3636---
3737
38+ ## Check compatibility between NGINX Ingress Controller and F5 WAF for NGINX versions
39+
40+ {{< include "nic/compatibility-tables/nic-nap.md" >}}
41+
3842## Compile WAF Policy from JSON to Bundle
3943
4044Pull the ` waf-compiler ` image with:
4145
4246``` shell
43- docker pull private-registry.nginx.com/nap/waf-compiler:5.6 .0
47+ docker pull private-registry.nginx.com/nap/waf-compiler:5.8 .0
4448```
4549
4650Download the [ provided WAF Policy JSON] ( https://raw.githubusercontent.com/nginx/kubernetes-ingress/main/tests/data/ap-waf-v5/wafv5.json ) :
@@ -49,13 +53,13 @@ Download the [provided WAF Policy JSON](https://raw.githubusercontent.com/nginx/
4953curl -L https://raw.githubusercontent.com/nginx/kubernetes-ingress/main/tests/data/ap-waf-v5/wafv5.json -o /tmp/wafv5.json
5054```
5155
52- Use your pulled NAP Docker image (` private-registry.nginx.com/nap/waf-compiler:5.6 .0 ` ) to compile the policy bundle:
56+ Use your pulled NAP Docker image (` private-registry.nginx.com/nap/waf-compiler:5.8 .0 ` ) to compile the policy bundle:
5357
5458``` shell
5559# Using your newly created image
5660docker run --rm \
5761 -v /tmp:/tmp \
58- private-registry.nginx.com/nap/waf-compiler:5.6 .0 \
62+ private-registry.nginx.com/nap/waf-compiler:5.8 .0 \
5963 -p /tmp/wafv5.json \
6064 -o /tmp/compiled_policy.tgz
6165```
@@ -157,15 +161,15 @@ kubectl create secret \
157161Install the required CRDs for NGINX Ingress Controller:
158162
159163``` shell
160- kubectl apply -f https://raw.githubusercontent.com/nginx/kubernetes-ingress/v5.0.0 /deploy/crds.yaml
164+ kubectl apply -f https://raw.githubusercontent.com/nginx/kubernetes-ingress/v{{ < nic-version > }} /deploy/crds.yaml
161165```
162166
163167Using Helm, install NGINX Ingress Controller
164168
165169``` shell
166170helm upgrade --install nic nginx-stable/nginx-ingress \
167171 --set controller.image.repository=" private-registry.nginx.com/nginx-ic-nap-v5/nginx-plus-ingress" \
168- --set controller.image.tag=" 5.0.0 -alpine-fips" \
172+ --set controller.image.tag=" {{< nic-version >}} -alpine-fips" \
169173 --set controller.nginxplus=true \
170174 --set controller.appprotect.enable=true \
171175 --set controller.appprotect.v5=true \
0 commit comments