From 0a69275a052695f6a8e76cbd4be7c9be707105d8 Mon Sep 17 00:00:00 2001 From: Venktesh Patel Date: Mon, 10 Aug 2026 19:00:17 +0100 Subject: [PATCH 1/6] feat: plm cli options --- .../command-line-arguments.md | 30 +++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/content/nic/configuration/global-configuration/command-line-arguments.md b/content/nic/configuration/global-configuration/command-line-arguments.md index 86c0d8233..352c811a7 100644 --- a/content/nic/configuration/global-configuration/command-line-arguments.md +++ b/content/nic/configuration/global-configuration/command-line-arguments.md @@ -479,6 +479,36 @@ Enables App Protect IP Intelligence. Defaults to `false`. *Only applies to WAF s Requires [-nginx-plus](#cmdoption-nginx-plus) and [-enable-app-protect](#cmdoption-enable-app-protect). + + +### -plm-storage-url + +SeaweedFS S3 endpoint for NIC to fetch policy and logconf bundle from. Leave empty to disable PLM support. + + + +### -plm-storage-credentials-secret + +Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, namespace/name format. + + + +### -plm-storage-ca-secret + +Optional Secret containing ca.crt for SeaweedFS TLS verification, namespace/name format. + + + +### -plm-storage-client-ssl-secret + +Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS, namespace/name format. + + + +### -plm-storage-insecure-skip-verify + +Disable SeaweedFS TLS verification. For development and testing only. + ### -ready-status From d9eb2187b35f96f60d851ea1d84beec8651d8002 Mon Sep 17 00:00:00 2001 From: Venktesh Shivam Patel Date: Mon, 10 Aug 2026 20:00:59 +0100 Subject: [PATCH 2/6] feat: update helm parameters for PLM --- content/nic/configuration/policy-resource.md | 4 ++-- content/nic/install/helm/parameters.md | 5 +++++ 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index e22437010..4dc1d9287 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -1294,7 +1294,7 @@ waf: |Field | Description | Type | Required | | ---| ---| ---| --- | |``enable`` | Enables F5 WAF for NGINX. | ``bool`` | Yes | -|``apPolicy`` | The [F5 WAF for NGINX policy]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-policies" >}}) of the WAF. Accepts an optional namespace. Mutually exclusive with ``apBundle``. | ``string`` | No | +|``apPolicy`` | The [F5 WAF for NGINX policy]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-policies" >}}) of the WAF. References an APPolicy CR by "[/]". When NIC is started with `-plm-storage-url`, the referenced APPolicy must have been compiled by PLM (status.bundle.state == ready). Mutually exclusive with ``apBundle``. | ``string`` | No | |``apBundle`` | The [F5 WAF for NGINX policy bundle]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-bundles" >}}). Mutually exclusive with ``apPolicy`` and ``apBundleSource``. | ``string`` | No | |``apBundleSource`` | [Remote source]({{< ref "/nic/integrations/app-protect-waf-v5/bundle-sources.md" >}}) for fetching the WAF policy bundle. Mutually exclusive with ``apBundle`` and ``apPolicy``. | [waf.apBundleSource](#wafapbundlesource) | No | |``securityLog.enable`` | **Deprecated:** Enables security log. | ``bool`` | No | @@ -1312,7 +1312,7 @@ waf: |Field | Description | Type | Required | | ---| ---| ---| --- | |``enable`` | Enables security log. | ``bool`` | No | -|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. Accepts an optional namespace. Only works with ``apPolicy``. | ``string`` | No | +|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. `apLogConf` references an APPolicy CR by "[/]". When NIC is started with `-plm-storage-url`, the referenced APLogConf must have been compiled by PLM (status.bundle.state == ready). Only works with ``apPolicy``. | ``string`` | No | |``apLogBundle`` | The [App Protect WAF log bundle]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. Mutually exclusive with ``apLogBundleSource``. | ``string`` | No | |``apLogBundleSource`` | [Remote source]({{< ref "/nic/integrations/app-protect-waf-v5/bundle-sources.md" >}}) for fetching the log profile bundle. Mutually exclusive with ``apLogBundle``. | [waf.apBundleSource](#wafapbundlesource) | No | |``logDest`` | The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index 8d4967710..dc779044c 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -140,6 +140,11 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.pod.extraLabels** | The additional extra labels of the NGINX Ingress Controller pod. | {} | | **controller.appprotect.enable** | Enables the F5 WAF for NGINX module in the NGINX Ingress Controller. | false | | **controller.appprotect.v5** | Enables F5 WAF for NGINX v5. | false | +| **controller.appprotect.plmStorage.url** | SeaweedFS S3 endpoint for NIC to fetch policy and logconf bundle from. Leave empty to disable PLM support. Requires `controller.appprotect.v5` to be `true` | "" | +| **controller.appprotect.plmStorage.credentialsSecret** | Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name` format.. | "" | +| **controller.appprotect.plmStorage.caSecret** | Optional Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name format`. | "" | +| **controller.appprotect.plmStorage.clientSSLSecret** | Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS, `namespace/name` format. | "" | +| **controller.appprotect.plmStorage.insecureSkipVerify** | Disable SeaweedFS TLS verification. For development and testing only. | false | | **controller.appprotect.volumes** | Volumes for F5 WAF for NGINX v5. | [{"name": "app-protect-bd-config", "emptyDir": {}},{"name": "app-protect-config", "emptyDir": {}},{"name": "app-protect-bundles", "emptyDir": {}}] | | **controller.appprotect.enforcer.host** | Host that the F5 WAF for NGINX v5 Enforcer runs on. | "127.0.0.1" | | **controller.appprotect.enforcer.port** | Port that the F5 WAF for NGINX v5 Enforcer runs on. | 50000 | From bdeac368b5a1643fa2f05f64d8d970e64db88f38 Mon Sep 17 00:00:00 2001 From: Venktesh Patel Date: Tue, 11 Aug 2026 10:45:59 +0100 Subject: [PATCH 3/6] Apply suggestions from code review Co-authored-by: yar --- .../command-line-arguments.md | 16 +++++++++++----- content/nic/configuration/policy-resource.md | 4 ++-- content/nic/install/helm/parameters.md | 6 +++--- 3 files changed, 16 insertions(+), 10 deletions(-) diff --git a/content/nic/configuration/global-configuration/command-line-arguments.md b/content/nic/configuration/global-configuration/command-line-arguments.md index 352c811a7..240434bc1 100644 --- a/content/nic/configuration/global-configuration/command-line-arguments.md +++ b/content/nic/configuration/global-configuration/command-line-arguments.md @@ -483,31 +483,37 @@ Requires [-nginx-plus](#cmdoption-nginx-plus) and [-enable-app-protect](#cmdopti ### -plm-storage-url -SeaweedFS S3 endpoint for NIC to fetch policy and logconf bundle from. Leave empty to disable PLM support. +SeaweedFS S3 endpoint for NGINX Ingress Controller to fetch policy and logconf bundle from. Leave empty to disable PLM support. ### -plm-storage-credentials-secret -Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, namespace/name format. +Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret. + +Format: `/` ### -plm-storage-ca-secret -Optional Secret containing ca.crt for SeaweedFS TLS verification, namespace/name format. +Optional Secret containing ca.crt for SeaweedFS TLS verification. + +Format: `/` ### -plm-storage-client-ssl-secret -Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS, namespace/name format. +Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS. + +Format: `/` ### -plm-storage-insecure-skip-verify -Disable SeaweedFS TLS verification. For development and testing only. +Disables SeaweedFS TLS verification. For development and testing only. diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index 4dc1d9287..9c8de25e5 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -1294,7 +1294,7 @@ waf: |Field | Description | Type | Required | | ---| ---| ---| --- | |``enable`` | Enables F5 WAF for NGINX. | ``bool`` | Yes | -|``apPolicy`` | The [F5 WAF for NGINX policy]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-policies" >}}) of the WAF. References an APPolicy CR by "[/]". When NIC is started with `-plm-storage-url`, the referenced APPolicy must have been compiled by PLM (status.bundle.state == ready). Mutually exclusive with ``apBundle``. | ``string`` | No | +|``apPolicy`` | The [F5 WAF for NGINX policy]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-policies" >}}) of the WAF. References an APPolicy CR by `[/]`. When the Ingress Controller is started with `-plm-storage-url`, the referenced APPolicy must have been compiled by PLM (status.bundle.state == ready). Mutually exclusive with `apBundle`. | `string` | No | |``apBundle`` | The [F5 WAF for NGINX policy bundle]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-bundles" >}}). Mutually exclusive with ``apPolicy`` and ``apBundleSource``. | ``string`` | No | |``apBundleSource`` | [Remote source]({{< ref "/nic/integrations/app-protect-waf-v5/bundle-sources.md" >}}) for fetching the WAF policy bundle. Mutually exclusive with ``apBundle`` and ``apPolicy``. | [waf.apBundleSource](#wafapbundlesource) | No | |``securityLog.enable`` | **Deprecated:** Enables security log. | ``bool`` | No | @@ -1312,7 +1312,7 @@ waf: |Field | Description | Type | Required | | ---| ---| ---| --- | |``enable`` | Enables security log. | ``bool`` | No | -|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. `apLogConf` references an APPolicy CR by "[/]". When NIC is started with `-plm-storage-url`, the referenced APLogConf must have been compiled by PLM (status.bundle.state == ready). Only works with ``apPolicy``. | ``string`` | No | +|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. `apLogConf` references an APPolicy CR by "[/]". When the Ingress Controller is started with `-plm-storage-url`, the referenced APLogConf must have been compiled by PLM (status.bundle.state == ready). Only works with `apPolicy`. | ``string`` | No | |``apLogBundle`` | The [App Protect WAF log bundle]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. Mutually exclusive with ``apLogBundleSource``. | ``string`` | No | |``apLogBundleSource`` | [Remote source]({{< ref "/nic/integrations/app-protect-waf-v5/bundle-sources.md" >}}) for fetching the log profile bundle. Mutually exclusive with ``apLogBundle``. | [waf.apBundleSource](#wafapbundlesource) | No | |``logDest`` | The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index dc779044c..f45f5a58b 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -140,11 +140,11 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.pod.extraLabels** | The additional extra labels of the NGINX Ingress Controller pod. | {} | | **controller.appprotect.enable** | Enables the F5 WAF for NGINX module in the NGINX Ingress Controller. | false | | **controller.appprotect.v5** | Enables F5 WAF for NGINX v5. | false | -| **controller.appprotect.plmStorage.url** | SeaweedFS S3 endpoint for NIC to fetch policy and logconf bundle from. Leave empty to disable PLM support. Requires `controller.appprotect.v5` to be `true` | "" | -| **controller.appprotect.plmStorage.credentialsSecret** | Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name` format.. | "" | +| **controller.appprotect.plmStorage.url** | SeaweedFS S3 endpoint for NGINX Ingress Controller to fetch policy and logconf bundle from. Leave empty to disable PLM support. Requires `controller.appprotect.v5` to be `true` | "" | +| **controller.appprotect.plmStorage.credentialsSecret** | Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name` format. | "" | | **controller.appprotect.plmStorage.caSecret** | Optional Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name format`. | "" | | **controller.appprotect.plmStorage.clientSSLSecret** | Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS, `namespace/name` format. | "" | -| **controller.appprotect.plmStorage.insecureSkipVerify** | Disable SeaweedFS TLS verification. For development and testing only. | false | +| **controller.appprotect.plmStorage.insecureSkipVerify** | Disables SeaweedFS TLS verification. For development and testing only. | false | | **controller.appprotect.volumes** | Volumes for F5 WAF for NGINX v5. | [{"name": "app-protect-bd-config", "emptyDir": {}},{"name": "app-protect-config", "emptyDir": {}},{"name": "app-protect-bundles", "emptyDir": {}}] | | **controller.appprotect.enforcer.host** | Host that the F5 WAF for NGINX v5 Enforcer runs on. | "127.0.0.1" | | **controller.appprotect.enforcer.port** | Port that the F5 WAF for NGINX v5 Enforcer runs on. | 50000 | From 710f2b307523472ad0ed40d701f2b81af9659df1 Mon Sep 17 00:00:00 2001 From: yar Date: Wed, 12 Aug 2026 10:13:42 +0100 Subject: [PATCH 4/6] Apply suggestions from code review Co-authored-by: yar --- .../global-configuration/command-line-arguments.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/nic/configuration/global-configuration/command-line-arguments.md b/content/nic/configuration/global-configuration/command-line-arguments.md index 240434bc1..bd4393fde 100644 --- a/content/nic/configuration/global-configuration/command-line-arguments.md +++ b/content/nic/configuration/global-configuration/command-line-arguments.md @@ -489,7 +489,7 @@ SeaweedFS S3 endpoint for NGINX Ingress Controller to fetch policy and logconf b ### -plm-storage-credentials-secret -Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret. +A Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret. Format: `/` @@ -497,7 +497,7 @@ Format: `/` ### -plm-storage-ca-secret -Optional Secret containing ca.crt for SeaweedFS TLS verification. +An optional Secret containing ca.crt for SeaweedFS TLS verification. Format: `/` @@ -505,7 +505,7 @@ Format: `/` ### -plm-storage-client-ssl-secret -Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS. +An optional Secret containing tls.crt and tls.key for SeaweedFS mTLS. Format: `/` From 5ea51f15431022859205010a26aecb9b386c3df2 Mon Sep 17 00:00:00 2001 From: Venktesh Patel Date: Wed, 12 Aug 2026 17:59:19 +0100 Subject: [PATCH 5/6] Apply suggestion from @JTorreG Co-authored-by: Jon Torre <78599298+JTorreG@users.noreply.github.com> --- .../global-configuration/command-line-arguments.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nic/configuration/global-configuration/command-line-arguments.md b/content/nic/configuration/global-configuration/command-line-arguments.md index bd4393fde..b1d3b4988 100644 --- a/content/nic/configuration/global-configuration/command-line-arguments.md +++ b/content/nic/configuration/global-configuration/command-line-arguments.md @@ -505,7 +505,7 @@ Format: `/` ### -plm-storage-client-ssl-secret -An optional Secret containing tls.crt and tls.key for SeaweedFS mTLS. +An optional Secret containing **tls.crt** and **tls.key** for SeaweedFS mTLS. Format: `/` From 2c186724e4743089afc60635643eef8da1694b2a Mon Sep 17 00:00:00 2001 From: Travis Martin Date: Thu, 13 Aug 2026 13:13:49 -0700 Subject: [PATCH 6/6] Tech Writer agents per the F5 Technical Writing Style Guide --- .../global-configuration/command-line-arguments.md | 10 +++++----- content/nic/configuration/policy-resource.md | 2 +- content/nic/install/helm/parameters.md | 10 +++++----- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/content/nic/configuration/global-configuration/command-line-arguments.md b/content/nic/configuration/global-configuration/command-line-arguments.md index b1d3b4988..b277e46f5 100644 --- a/content/nic/configuration/global-configuration/command-line-arguments.md +++ b/content/nic/configuration/global-configuration/command-line-arguments.md @@ -483,13 +483,13 @@ Requires [-nginx-plus](#cmdoption-nginx-plus) and [-enable-app-protect](#cmdopti ### -plm-storage-url -SeaweedFS S3 endpoint for NGINX Ingress Controller to fetch policy and logconf bundle from. Leave empty to disable PLM support. +SeaweedFS S3 endpoint from which NGINX Ingress Controller fetches the policy and logconf bundle. Leave empty to turn off PLM support. ### -plm-storage-credentials-secret -A Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret. +A Secret containing the SeaweedFS admin secret in the `seaweedfs_admin_secret` key. Format: `/` @@ -497,7 +497,7 @@ Format: `/` ### -plm-storage-ca-secret -An optional Secret containing ca.crt for SeaweedFS TLS verification. +An optional Secret containing `ca.crt` for SeaweedFS TLS verification. Format: `/` @@ -505,7 +505,7 @@ Format: `/` ### -plm-storage-client-ssl-secret -An optional Secret containing **tls.crt** and **tls.key** for SeaweedFS mTLS. +An optional Secret containing `tls.crt` and `tls.key` for SeaweedFS mTLS. Format: `/` @@ -513,7 +513,7 @@ Format: `/` ### -plm-storage-insecure-skip-verify -Disables SeaweedFS TLS verification. For development and testing only. +Turns off SeaweedFS TLS verification. For development and testing only. diff --git a/content/nic/configuration/policy-resource.md b/content/nic/configuration/policy-resource.md index 9c8de25e5..0bf0f12ef 100644 --- a/content/nic/configuration/policy-resource.md +++ b/content/nic/configuration/policy-resource.md @@ -1312,7 +1312,7 @@ waf: |Field | Description | Type | Required | | ---| ---| ---| --- | |``enable`` | Enables security log. | ``bool`` | No | -|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. `apLogConf` references an APPolicy CR by "[/]". When the Ingress Controller is started with `-plm-storage-url`, the referenced APLogConf must have been compiled by PLM (status.bundle.state == ready). Only works with `apPolicy`. | ``string`` | No | +|``apLogConf`` | The [App Protect WAF log conf]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-logs" >}}) resource. `apLogConf` references an APPolicy CR by `[/]`. When you start the Ingress Controller with `-plm-storage-url`, PLM must have compiled the referenced APLogConf (`status.bundle.state == ready`). Only works with `apPolicy`. | ``string`` | No | |``apLogBundle`` | The [App Protect WAF log bundle]({{< ref "/nic/integrations/app-protect-waf/configuration.md#waf-bundles" >}}) resource. Only works with ``apBundle``. Mutually exclusive with ``apLogBundleSource``. | ``string`` | No | |``apLogBundleSource`` | [Remote source]({{< ref "/nic/integrations/app-protect-waf-v5/bundle-sources.md" >}}) for fetching the log profile bundle. Mutually exclusive with ``apLogBundle``. | [waf.apBundleSource](#wafapbundlesource) | No | |``logDest`` | The log destination for the security log. Only accepted variables are ``syslog:server=; localhost; :``, ``stderr``, ````. | ``string`` | No | diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index f45f5a58b..ad98412ea 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -140,11 +140,11 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.pod.extraLabels** | The additional extra labels of the NGINX Ingress Controller pod. | {} | | **controller.appprotect.enable** | Enables the F5 WAF for NGINX module in the NGINX Ingress Controller. | false | | **controller.appprotect.v5** | Enables F5 WAF for NGINX v5. | false | -| **controller.appprotect.plmStorage.url** | SeaweedFS S3 endpoint for NGINX Ingress Controller to fetch policy and logconf bundle from. Leave empty to disable PLM support. Requires `controller.appprotect.v5` to be `true` | "" | -| **controller.appprotect.plmStorage.credentialsSecret** | Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name` format. | "" | -| **controller.appprotect.plmStorage.caSecret** | Optional Secret containing the SeaweedFS admin secret under seaweedfs_admin_secret, `namespace/name format`. | "" | -| **controller.appprotect.plmStorage.clientSSLSecret** | Optional Secret containing tls.crt and tls.key for SeaweedFS mTLS, `namespace/name` format. | "" | -| **controller.appprotect.plmStorage.insecureSkipVerify** | Disables SeaweedFS TLS verification. For development and testing only. | false | +| **controller.appprotect.plmStorage.url** | SeaweedFS S3 endpoint from which NGINX Ingress Controller fetches the policy and logconf bundle. Leave empty to turn off PLM support. Requires `controller.appprotect.v5` to be `true`. | "" | +| **controller.appprotect.plmStorage.credentialsSecret** | Secret containing the SeaweedFS admin secret in the `seaweedfs_admin_secret` key. Format: `/`. | "" | +| **controller.appprotect.plmStorage.caSecret** | Optional Secret containing the SeaweedFS admin secret under `seaweedfs_admin_secret`. Format: `/`. | "" | +| **controller.appprotect.plmStorage.clientSSLSecret** | Optional Secret containing `tls.crt` and `tls.key` for SeaweedFS mTLS. Format: `/`. | "" | +| **controller.appprotect.plmStorage.insecureSkipVerify** | Turns off SeaweedFS TLS verification. For development and testing only. | false | | **controller.appprotect.volumes** | Volumes for F5 WAF for NGINX v5. | [{"name": "app-protect-bd-config", "emptyDir": {}},{"name": "app-protect-config", "emptyDir": {}},{"name": "app-protect-bundles", "emptyDir": {}}] | | **controller.appprotect.enforcer.host** | Host that the F5 WAF for NGINX v5 Enforcer runs on. | "127.0.0.1" | | **controller.appprotect.enforcer.port** | Port that the F5 WAF for NGINX v5 Enforcer runs on. | 50000 |