You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/waf/install/kubernetes-plm.md
+40-41Lines changed: 40 additions & 41 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -804,45 +804,6 @@ The key information to review is the following:
804
804
- **`status.processing.isCompiled`**: Boolean indicating if compilation completed successfully
805
805
- **`status.processing.datetime`**: Timestamp of the last compilation attempt
806
806
807
-
### Use specific security update versions
808
-
809
-
Once Policy lifecycle management is deployed, you can define a specific security update version on a per-feature basis.
810
-
811
-
This is accomplished by adding a `revision:` parameter to the feature.
812
-
813
-
The following example is for an _APSignatures_ resource, in a file named `signatures.yaml`:
814
-
815
-
```yaml {hl_lines=[7,9, 11]}
816
-
apiVersion: appprotect.f5.com/v1
817
-
kind: APSignatures
818
-
metadata:
819
-
name: signatures
820
-
spec:
821
-
attack-signatures:
822
-
revision: "2025.06.19" # Attack signatures revision to be used
823
-
bot-signatures:
824
-
revision: "latest" # Bot signatures revision to be used
825
-
threat-campaigns:
826
-
revision: "2025.06.24" # Threat campaigns revision to be used
827
-
```
828
-
829
-
{{< call-out "warning" >}}
830
-
The APSignatures `metadata.name` argument _must_ be `signatures`.
831
-
832
-
Only one APSignatures instance can exist.
833
-
{{< /call-out >}}
834
-
835
-
Apply the Manifest:
836
-
837
-
```shell
838
-
kubectl apply -f signatures.yaml
839
-
```
840
-
841
-
Downloading security updates may take several minutes, and the version of security updates available at the time of compilation is always used to compile policies.
842
-
843
-
If _APSignatures_ is not created or the specified versions are not available, it will default to the version stored in the compiler Docker image.
The request should be blocked, confirming that Policy lifecycle management has successfully compiled and deployed the policy.
967
928
929
+
## Use specific security update versions
930
+
931
+
Once Policy lifecycle management is deployed, you can define a specific security update version on a per-feature basis.
932
+
933
+
This is accomplished by adding a `revision:` parameter to the feature.
934
+
935
+
The following example is for an _APSignatures_ resource, in a file named `signatures.yaml`:
936
+
937
+
```yaml {hl_lines=[7,9, 11]}
938
+
apiVersion: appprotect.f5.com/v1
939
+
kind: APSignatures
940
+
metadata:
941
+
name: signatures
942
+
spec:
943
+
attack-signatures:
944
+
revision: "2025.06.19" # Attack signatures revision to be used
945
+
bot-signatures:
946
+
revision: "latest" # Bot signatures revision to be used
947
+
threat-campaigns:
948
+
revision: "2025.06.24" # Threat campaigns revision to be used
949
+
```
950
+
951
+
{{< call-out "warning" >}}
952
+
The APSignatures `metadata.name` argument _must_ be `signatures`.
953
+
954
+
Only one APSignatures instance can exist.
955
+
{{< /call-out >}}
956
+
957
+
Apply the Manifest:
958
+
959
+
```shell
960
+
kubectl apply -f signatures.yaml
961
+
```
962
+
963
+
Downloading security updates may take several minutes, and the version of security updates available at the time of compilation is always used to compile policies.
964
+
965
+
If _APSignatures_ is not created or the specified versions are not available, it will default to the version stored in the compiler Docker image.
966
+
968
967
## Upgrade the Helm chart
969
968
970
969
Follow these steps to upgrade the Helm chart once installed: they are similar to the initial deployment.
@@ -1030,7 +1029,7 @@ kubectl delete crd --all
1030
1029
kubectl delete ns <namespace>
1031
1030
```
1032
1031
1033
-
## Disconnected or air-gapped environments
1032
+
<!-- ## Disconnected or air-gapped environments
1034
1033
1035
1034
{{< call-out "warning" >}}
1036
1035
@@ -1073,7 +1072,7 @@ helm install
1073
1072
...
1074
1073
```
1075
1074
1076
-
For more information relevant to this type of deployment, see the [Disconnected or air-gapped environments]({{< ref "/waf/install/disconnected-environment.md" >}}) topic.
1075
+
For more information relevant to this type of deployment, see the [Disconnected or air-gapped environments]({{< ref "/waf/install/disconnected-environment.md" >}}) topic. -->
0 commit comments