NGINX Plus Ingress controller with App Protect v5

Projects NGINX Commercial Products
, ,
1

Please use this template for troubleshooting questions.

My issue: I am using Nginx ingress controller with app protect v5 but now when i apply waf policy to my vs then its gives error ly.go:239",“msg”:“Test config”}
{“level”:“info”,“ts”:“2025-11-11T06:51:06.032Z”,“caller”:“config_set_apply/config_set_apply.go:247”,“msg”:“Config set filename: ‘/opt/app_protect/config/config_set.json’,Wait for enforcer: false, Apply: true, Is Dry Run: true, Policy map location: ‘/opt/app_protect/bd_config/policy_path.map’, Is Enforcer On Remote Machine: true, Allow policy mapping changes: true, BundleMapDir: ‘/etc/app_protect/bundles’, BundleMapFileName: ‘bundle_map.json’, Enforcer timeout: 0 seconds”}
{“level”:“info”,“ts”:“2025-11-11T06:51:06.032Z”,“caller”:“model/job.go:50”,“msg”:“{“jobId”:“c9fe36563604113519528af2ead15338”,“jobCreateDatetime”:“2025-11-11T06:51:06.031494031Z”,“jobStatus”:“failed”,“datetime”:“2025-11-11T06:51:06.0329725Z”,“component”:“config_set_apply”}”}
time=“11-11-2025 06:51:06” level=info msg=“config_set_apply finished: {“completed_successfully”:false,“event”:“configuration_load_failure”,“error_message”:“Error extracting /etc/app_protect/bundles/my_waf_policy_bundle.tgz: File Not Found”,“error_line_number”:30,“config_set_id”:“1762843865-724-163”,“softwareVersion”:“5.9.0”,“componentVersions”:{“wafEngineVersion”:“11.559.0”,“wafNginxVersion”:“5.527.0”}}”

How I encountered the problem:

Solutions I’ve tried: check the volume mount of bundle policy that all are coorect

Version of NIC and/or NGINX: 5.2.1 and latest version of app protect

Deployment environment: kubernates one pod of nginx ingress controller inside it i include two more container for app protect one is waf-enformor and other is waf-config-mgr

2

Hi @Ashu_Chahal!

Since you are using a commercial offering I’d suggest reaching out to our support. They’ll be able to help you out :slight_smile:

Thanks!

1 Like
3

Hi @Ashu_Chahal ,

How did you mount the policy file into the image? We have a guide that uses PersistentClaimVolume to achieve that: Install NGINX Ingress Controller and F5 WAF for NGINX with Docker and Helm | NGINX Documentation

2 Likes
4

Hello javorszky , I use hostpath for policy mount and verify that policy exists on that host on same path but in nginx ingress controller is errors not found.

5

Hello javorszky i install nginx plus ingress controller image in a pod and I same pod one container for waf-enformer and waf-config-mgr is there is another thing required to run nginx plus ingress controller with waf v5 (app protect)

6

Hello javorszky

7

Hello @javorszky please also help in this

8

Hi,

Apologies for the absence. That sounds a bit more complicated. If you could get in touch with commercial support, you’ll be able to upload configuration files that you’re using. That way we can diagnose and reproduce the issues and find the exact reason this is failing for you.

1 Like