Skip to content

Commit 78c3d73

Browse files
committed
feat: hide airgapped section
1 parent 92ef472 commit 78c3d73

File tree

2 files changed

+40
-42
lines changed

2 files changed

+40
-42
lines changed

content/waf/install/disconnected-environment.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,6 @@ title: "Disconnected or air-gapped environments"
44
# Weights are assigned in increments of 100: determines sorting order
55
weight: 500
66
# Creates a table of contents and sidebar, useful for large documents
7-
draft: true
87
toc: false
98
# Types have a 1:1 relationship with Hugo archetypes, so you shouldn't need to change this
109
nd-content-type: how-to

content/waf/install/kubernetes-plm.md

Lines changed: 40 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -804,45 +804,6 @@ The key information to review is the following:
804804
- **`status.processing.isCompiled`**: Boolean indicating if compilation completed successfully
805805
- **`status.processing.datetime`**: Timestamp of the last compilation attempt
806806

807-
### Use specific security update versions
808-
809-
Once Policy lifecycle management is deployed, you can define a specific security update version on a per-feature basis.
810-
811-
This is accomplished by adding a `revision:` parameter to the feature.
812-
813-
The following example is for an _APSignatures_ resource, in a file named `signatures.yaml`:
814-
815-
```yaml {hl_lines=[7,9, 11]}
816-
apiVersion: appprotect.f5.com/v1
817-
kind: APSignatures
818-
metadata:
819-
name: signatures
820-
spec:
821-
attack-signatures:
822-
revision: "2025.06.19" # Attack signatures revision to be used
823-
bot-signatures:
824-
revision: "latest" # Bot signatures revision to be used
825-
threat-campaigns:
826-
revision: "2025.06.24" # Threat campaigns revision to be used
827-
```
828-
829-
{{< call-out "warning" >}}
830-
The APSignatures `metadata.name` argument _must_ be `signatures`.
831-
832-
Only one APSignatures instance can exist.
833-
{{< /call-out >}}
834-
835-
Apply the Manifest:
836-
837-
```shell
838-
kubectl apply -f signatures.yaml
839-
```
840-
841-
Downloading security updates may take several minutes, and the version of security updates available at the time of compilation is always used to compile policies.
842-
843-
If _APSignatures_ is not created or the specified versions are not available, it will default to the version stored in the compiler Docker image.
844-
845-
846807
## Testing policy lifecycle management
847808

848809
### Apply a policy
@@ -965,6 +926,44 @@ curl "http://[CLUSTER-IP]:80/?a=<script>"
965926

966927
The request should be blocked, confirming that Policy lifecycle management has successfully compiled and deployed the policy.
967928

929+
## Use specific security update versions
930+
931+
Once Policy lifecycle management is deployed, you can define a specific security update version on a per-feature basis.
932+
933+
This is accomplished by adding a `revision:` parameter to the feature.
934+
935+
The following example is for an _APSignatures_ resource, in a file named `signatures.yaml`:
936+
937+
```yaml {hl_lines=[7,9, 11]}
938+
apiVersion: appprotect.f5.com/v1
939+
kind: APSignatures
940+
metadata:
941+
name: signatures
942+
spec:
943+
attack-signatures:
944+
revision: "2025.06.19" # Attack signatures revision to be used
945+
bot-signatures:
946+
revision: "latest" # Bot signatures revision to be used
947+
threat-campaigns:
948+
revision: "2025.06.24" # Threat campaigns revision to be used
949+
```
950+
951+
{{< call-out "warning" >}}
952+
The APSignatures `metadata.name` argument _must_ be `signatures`.
953+
954+
Only one APSignatures instance can exist.
955+
{{< /call-out >}}
956+
957+
Apply the Manifest:
958+
959+
```shell
960+
kubectl apply -f signatures.yaml
961+
```
962+
963+
Downloading security updates may take several minutes, and the version of security updates available at the time of compilation is always used to compile policies.
964+
965+
If _APSignatures_ is not created or the specified versions are not available, it will default to the version stored in the compiler Docker image.
966+
968967
## Upgrade the Helm chart
969968

970969
Follow these steps to upgrade the Helm chart once installed: they are similar to the initial deployment.
@@ -1030,7 +1029,7 @@ kubectl delete crd --all
10301029
kubectl delete ns <namespace>
10311030
```
10321031

1033-
## Disconnected or air-gapped environments
1032+
<!-- ## Disconnected or air-gapped environments
10341033

10351034
{{< call-out "warning" >}}
10361035

@@ -1073,7 +1072,7 @@ helm install
10731072
...
10741073
```
10751074

1076-
For more information relevant to this type of deployment, see the [Disconnected or air-gapped environments]({{< ref "/waf/install/disconnected-environment.md" >}}) topic.
1075+
For more information relevant to this type of deployment, see the [Disconnected or air-gapped environments]({{< ref "/waf/install/disconnected-environment.md" >}}) topic. -->
10771076

10781077
## Possible issues
10791078

0 commit comments

Comments
 (0)