fix: prevent F5 WAF interfering with subrequests - #10588
Draft
pdabelf5 wants to merge 2 commits into
Draft
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Propagates an App Protect “module loaded” flag into Ingress and VirtualServer template data so internal (subrequest) locations can emit app_protect_enable off; only when the WAF module is loaded, preventing App Protect from interfering with auth/jwt/apikey/OIDC subrequests.
Changes:
- Wire
MainAppProtectLoadModulethrough config generation into v1/v2 template structs (AppProtectLoadModule). - Update NGINX Plus templates (VirtualServer + OIDC) to disable WAF in internal locations when the module is loaded.
- Add/extend unit tests and snapshot coverage for the new conditional rendering behavior.
Reviewed changes
Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| internal/configs/virtualserver.go | Plumbs MainAppProtectLoadModule into VS config and OIDC helper config before templating. |
| internal/configs/ingress.go | Plumbs MainAppProtectLoadModule into v1 Ingress template config (including mergeable Ingress path). |
| internal/configs/version2/http.go | Adds AppProtectLoadModule fields to v2 template structs used by VS and OIDC template execution. |
| internal/configs/version1/config.go | Adds AppProtectLoadModule field to v1 Ingress template config. |
| internal/configs/version2/nginx-plus.virtualserver.tmpl | Conditionally emits app_protect_enable off; in internal helper and user-defined internal locations. |
| internal/configs/version2/oidc.tmpl | Conditionally emits app_protect_enable off; in internal OIDC subrequest locations. |
| internal/configs/version1/nginx-plus.ingress.tmpl | Conditionally emits app_protect_enable off; in internal Ingress locations. |
| internal/configs/version2/templates_test.go | Adds template-level tests and snapshots validating conditional WAF disabling. |
| internal/configs/version1/template_test.go | Adds template-level test and snapshot validating conditional WAF disabling. |
| internal/configs/ingress_test.go | Updates expected config structs to include the new propagated flag. |
| internal/configs/version2/snapshots/templates_test.snap | Snapshot updates for v2 template rendering with App Protect loaded. |
| internal/configs/version1/snapshots/template_test.snap | Snapshot updates for v1 NGINX Plus Ingress template rendering with App Protect loaded. |
Suppressed comments (1)
internal/configs/version2/http.go:172
- Go flag names in this repo use a single leading dash (e.g.
-enable-app-protect), but this comment refers to--enable-app-protectwhich can mislead readers.
// AppProtectLoadModule mirrors the controller's --enable-app-protect flag so
// oidc.tmpl can emit app_protect_enable off; on its internal sub-request
// locations only when the WAF module is actually loaded.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #10588 +/- ##
==========================================
- Coverage 57.24% 57.22% -0.02%
==========================================
Files 103 103
Lines 22755 22761 +6
==========================================
Hits 13025 13025
- Misses 8936 8940 +4
- Partials 794 796 +2 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Signed-off-by: Paul Abel <128620221+pdabelf5@users.noreply.github.com>
Contributor
Package ReportDetailsgcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx, 1.31.3-1~trixie, amd64gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-module-njs, 1.31.3+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-module-otel, 1.31.3+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 3.11.3~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx, 1.31.3-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-module-njs, 1.31.3+1.0.0-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-module-otel, 1.31.3+0.1.2-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 3.11.3~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 3.11.3~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 3.11.3~trixie, arm64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-attack-signatures, 2026.07.31-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-threat-campaigns, 2026.08.06-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-ip-intelligence, 1.59.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 2.46.7~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-module-plus, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-plugin, 6.30.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 2.46.7~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-appprotectdos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-dos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 2.46.7~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-ip-intelligence, 1.59.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-attack-signatures, 2026.07.31-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-threat-campaigns, 2026.08.06-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-plus-module-appprotectdos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, app-protect-dos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e, nginx-agent, 2.46.7~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx, 1.31.3-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-module-njs, 1.31.3.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-module-otel, 1.31.3.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-agent, 3.11.3, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx, 1.31.3-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-module-njs, 1.31.3.1.0.0-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-module-otel, 1.31.3.0.1.2-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-agent, 3.11.3, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-agent, 3.11.3, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus, 37.0.4-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-njs, 37.0.1.0.0-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-otel, 37.0.0.1.2-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-plus-module-fips-check, 37.0.0.1-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine, nginx-agent, 3.11.3, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-agent, 3.11.3, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus, 37.0.4-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-njs, 37.0.1.0.0-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-otel, 37.0.0.1.2-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-fips-check, 37.0.0.1-r1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-agent, 3.11.3, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-agent, 2.46.7, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect-ip-intelligence, 1.59.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-appprotect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect-attack-signatures, 2026.07.31-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect-threat-campaigns, 2026.08.06-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-agent, 2.46.7, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, nginx-plus-module-appprotect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect-module-plus, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips, app-protect-plugin, 6.30.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx, 1.31.3-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-module-njs, 1.31.3+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-module-otel, 1.31.3+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 3.11.3-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx, 1.31.3-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-module-njs, 1.31.3+1.0.0-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-module-otel, 1.31.3+0.1.2-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 3.11.3-1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 3.11.3-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 3.11.3-1, aarch64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 2.46.7-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-ip-intelligence, 1.59.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-attack-signatures, 2026.07.31-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-threat-campaigns, 2026.08.06-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 2.46.7-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-module-plus, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-plugin, 6.30.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-appprotectdos, 37+4.9.6-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-dos, 37+4.9.6-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 2.46.7-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-plus-module-appprotectdos, 37+4.9.6-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, nginx-agent, 2.46.7-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-ip-intelligence, 1.59.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-attack-signatures, 2026.07.31-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-threat-campaigns, 2026.08.06-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi, app-protect-dos, 37+4.9.6-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-attack-signatures, 2026.07.31-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-threat-campaigns, 2026.08.06-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-ip-intelligence, 1.59.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-agent, 3.11.3~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-attack-signatures, 2026.07.31-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-threat-campaigns, 2026.08.06-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-ip-intelligence, 1.59.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-agent, 3.11.3-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-appprotect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect-attack-signatures, 2026.07.31-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect-threat-campaigns, 2026.08.06-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect-ip-intelligence, 1.59.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-agent, 3.11.3, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-module-plus, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-plugin, 6.30.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-agent, 3.11.3~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-module-plus, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-plugin, 6.30.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-agent, 3.11.3-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus, 37.0.4-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-njs, 37.0.1.0.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-otel, 37.0.0.1.2-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-fips-check, 37.0.0.1-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-plus-module-appprotect, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect-module-plus, 37.0.5.690.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, app-protect-plugin, 6.30.0-r1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-alpine-fips-agent, nginx-agent, 3.11.3, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus, 37.0.4-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-njs, 37.0+1.0.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-otel, 37.0+0.1.2-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-fips-check, 37.0+0.1-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-plus-module-appprotectdos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, nginx-agent, 3.11.3~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect, 37.0+5.690.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-ip-intelligence, 1.59.0-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-attack-signatures, 2026.07.31-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-threat-campaigns, 2026.08.06-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-agent, app-protect-dos, 37+4.9.6-1~trixie, amd64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus, 37.0.4-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-njs, 37.0+1.0.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-otel, 37.0+0.1.2-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-fips-check, 37.0+0.1-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-appprotect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-plus-module-appprotectdos, 37+4.9.6-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, nginx-agent, 3.11.3-1, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect, 37.0+5.690.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-ip-intelligence, 1.59.0-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-attack-signatures, 2026.07.31-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-threat-campaigns, 2026.08.06-1.el10.ngx, x86_64 gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-6cf71098cdb28746531d9e783662636e-ubi-agent, app-protect-dos, 37+4.9.6-1.el10.ngx, x86_64 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request adds support for conditionally disabling the App Protect WAF module (
app_protect_enable off;) in NGINX internal sub-request locations, but only when the App Protect module is actually loaded. This is achieved by passing a newAppProtectLoadModuleflag through the configuration structs and templates, ensuring correct and safe template rendering. The changes are covered by new and updated tests and snapshot files.https://docs.nginx.com/waf/configure/nginx-features/
Note:
AppProtectLoadModulewas used onVirtualServerConfig&IngressNginxConfigstructs, therefore it does not matchMainAppProtectLoadModuleused in the main config generation.