From f7a0e3c20aa5184b11f7f9b815d37608d2491de9 Mon Sep 17 00:00:00 2001 From: Paul Abel Date: Wed, 12 Aug 2026 12:26:37 +0100 Subject: [PATCH 1/3] feat: add NetworkPolicy Helm values --- content/nic/install/helm/parameters.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index 8d4967710..d9a9fb149 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -199,6 +199,9 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.enableSSLDynamicReload** | Enable lazy loading for SSL Certificates. | true | | **controller.telemetryReporting.enable** | Enable telemetry reporting. | true | | **controller.enableWeightChangesDynamicReload** | Enable weight changes without reloading the NGINX configuration. May require increasing `map_hash_bucket_size`, `map_hash_max_size`, `variable_hash_bucket_size`, and `variable_hash_max_size` in the [ConfigMap]({{< ref "/nic/configuration/global-configuration/configmap-resource.md" >}}) if there are many two-way splits. Requires `controller.nginxplus` | false | +| **controller.networkPolicy.enable** | Create a NetworkPolicy that targets the controller pods. If enabled=true and both ingress and egress are empty, the resulting NetworkPolicy denies all ingress by default. | false | +| **controller.networkPolicy.ingress** | Configure ingress rules. When non-empty, the Ingress policy type is added automatically. | [] | +| **controller.networkPolicy.egress** | Configure egress rules. When non-empty, the Egress policy type is added automatically. | [] | |**nginxAgent.enable** | Enable NGINX Agent 3.x to allow [connecting to NGINX One Console]({{< ref "/nginx-one-console/k8s/add-nic.md" >}}) or to integrate NGINX Agent 2.x for [Security Monitoring]({{< ref "/nic/tutorials/security-monitoring.md" >}}) . | false | |**nginxAgent.logLevel** | Log level for NGINX Agent. | "error" | |**nginxAgent.dataplaneKeySecretName** | Name of the Kubernetes Secret containing the Data Plane key used to authenticate to NGINX One Console. Learn more [here]({{< ref "/nginx-one-console/k8s/add-nic.md" >}}). Required when `nginxAgent.enable` is set to `true`. Requires NGINX Agent 3.x. | "" | From 3c57ae2483d4af72380896d5595571f2ee70a0ca Mon Sep 17 00:00:00 2001 From: Paul Abel <128620221+pdabelf5@users.noreply.github.com> Date: Wed, 12 Aug 2026 12:43:22 +0100 Subject: [PATCH 2/3] Update content/nic/install/helm/parameters.md Co-authored-by: Venktesh Patel --- content/nic/install/helm/parameters.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index d9a9fb149..1860da0c9 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -199,7 +199,7 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.enableSSLDynamicReload** | Enable lazy loading for SSL Certificates. | true | | **controller.telemetryReporting.enable** | Enable telemetry reporting. | true | | **controller.enableWeightChangesDynamicReload** | Enable weight changes without reloading the NGINX configuration. May require increasing `map_hash_bucket_size`, `map_hash_max_size`, `variable_hash_bucket_size`, and `variable_hash_max_size` in the [ConfigMap]({{< ref "/nic/configuration/global-configuration/configmap-resource.md" >}}) if there are many two-way splits. Requires `controller.nginxplus` | false | -| **controller.networkPolicy.enable** | Create a NetworkPolicy that targets the controller pods. If enabled=true and both ingress and egress are empty, the resulting NetworkPolicy denies all ingress by default. | false | +| **controller.networkPolicy.enable** | Create a NetworkPolicy that targets the controller pods. If `enable` is set to `true` and both ingress and egress are empty, the resulting NetworkPolicy denies all ingress by default. | false | | **controller.networkPolicy.ingress** | Configure ingress rules. When non-empty, the Ingress policy type is added automatically. | [] | | **controller.networkPolicy.egress** | Configure egress rules. When non-empty, the Egress policy type is added automatically. | [] | |**nginxAgent.enable** | Enable NGINX Agent 3.x to allow [connecting to NGINX One Console]({{< ref "/nginx-one-console/k8s/add-nic.md" >}}) or to integrate NGINX Agent 2.x for [Security Monitoring]({{< ref "/nic/tutorials/security-monitoring.md" >}}) . | false | From 7faa6c626c989ff52f1d6773ee496440cf5b0fc6 Mon Sep 17 00:00:00 2001 From: Paul Abel <128620221+pdabelf5@users.noreply.github.com> Date: Wed, 12 Aug 2026 12:44:44 +0100 Subject: [PATCH 3/3] Update content/nic/install/helm/parameters.md --- content/nic/install/helm/parameters.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/nic/install/helm/parameters.md b/content/nic/install/helm/parameters.md index 1860da0c9..173bb8f41 100644 --- a/content/nic/install/helm/parameters.md +++ b/content/nic/install/helm/parameters.md @@ -199,7 +199,7 @@ The [values.schema.json](https://github.com/nginx/kubernetes-ingress/blob/main/c | **controller.enableSSLDynamicReload** | Enable lazy loading for SSL Certificates. | true | | **controller.telemetryReporting.enable** | Enable telemetry reporting. | true | | **controller.enableWeightChangesDynamicReload** | Enable weight changes without reloading the NGINX configuration. May require increasing `map_hash_bucket_size`, `map_hash_max_size`, `variable_hash_bucket_size`, and `variable_hash_max_size` in the [ConfigMap]({{< ref "/nic/configuration/global-configuration/configmap-resource.md" >}}) if there are many two-way splits. Requires `controller.nginxplus` | false | -| **controller.networkPolicy.enable** | Create a NetworkPolicy that targets the controller pods. If `enable` is set to `true` and both ingress and egress are empty, the resulting NetworkPolicy denies all ingress by default. | false | +| **controller.networkPolicy.enabled** | Create a NetworkPolicy that targets the controller pods. If `enabled` is set to `true` and both ingress and egress are empty, the resulting NetworkPolicy denies all ingress by default. | false | | **controller.networkPolicy.ingress** | Configure ingress rules. When non-empty, the Ingress policy type is added automatically. | [] | | **controller.networkPolicy.egress** | Configure egress rules. When non-empty, the Egress policy type is added automatically. | [] | |**nginxAgent.enable** | Enable NGINX Agent 3.x to allow [connecting to NGINX One Console]({{< ref "/nginx-one-console/k8s/add-nic.md" >}}) or to integrate NGINX Agent 2.x for [Security Monitoring]({{< ref "/nic/tutorials/security-monitoring.md" >}}) . | false |