Skip to content

Wafmc 13048 doc offline solution ap signatures #1098

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Sep 15, 2025
Merged

Wafmc 13048 doc offline solution ap signatures #1098

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
816d303
WAFMC-13048-offline-solution-for-APSignature
Y-Klughaupt Sep 10, 2025
9a27566
fix: doc offline solution for APSignatures
Y-Klughaupt Sep 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions content/nap-waf/v5/admin-guide/policy-lifecycle-management.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -285,6 +285,22 @@ kubectl apply -f config/policy-manager/samples/appprotect_v1_apsignatures.yaml
Downloading security updates may take several minutes. The version of security updates available at the time of compilation is always used to compile policies. If APSignatures is not created or the specified versions are not downloaded, the versions contained in the compiler docker image will be used.
{{< /call-out >}}

#### Using Security Update for users who can't use the nginx repo - Offline solution

For users who prefer not to download the security update packages directly from the NGINX repository when using the APSignatures CR, there are two supported options:

**1. Manual Package Placement**

- Download the required packages.
- Place them in the `/mnt/nap5_bundles_pv_data/security_updates_data/` directory.
- Ensure the files have `101:101` ownership and permissions.

**2. Custom Compiler Image**

- Build a Docker image that includes the desired packages.
- Use this custom image in place of downloading packages at runtime.


### Creating Policy Resources

Once PLM is deployed, you can create policy resources using Kubernetes manifests. Apply the following Custom Resource examples or create your own based on these templates:
Expand Down