Add NGINX ingress to instance manager

[amayacitta]

hey guys,

We have ingress controller running inside K8s, we recently stood up instance manager outside and want to connect ingress controller to it. Looking at the args I have added "-agent=true" and can scan the instance from instance manager, it comes up unmanaged of course. The instructions from instance manager tell me to download the docker image then run it with

--env=NMS_SERVER_GRPCPORT=443
--env=NMS_SERVER_HOST=https://10.154.8.55
--env=NMS_TLS_ENABLE=true\

How do I go about this from within K8s? Can someone point me in the place of docs for it. I'd assume there would be NMS args but I dont see them in the command line args:
https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/command-line-arguments/

nor do I see them in the config map keys:
https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/configmap-resource/#summary-of-configmap-keys

Can you help me out?

[amayacitta]

Think i may of figured it, going to use image: private-registry.nginx.com/nginx-ic-nap/nginx-plus-ingress:4.0.0

Then set these in the deployment spec under env:

    - name: NMS_SERVER_GRPCPORT
      value: "443"
    - name: NMS_SERVER_HOST
      value: "https://10.154.8.55"
    - name: NMS_TLS_ENABLE
      value: "true"

Will then follow the below as it seems to enable agent you also have to enable app protect.
https://docs.nginx.com/nginx-ingress-controller/installation/integrations/app-protect-waf-v5/configuration/

If anyone has done it before, let me know if this sounds about right.

[vepatel]

Hi @amayacitta, at this moment NIC only supports security monitoring with NIM via agent so NAP-WAF is required. hope this helps!
https://docs.nginx.com/nginx-ingress-controller/tutorials/security-monitoring/

[amayacitta]

Hey thanks, I have a contact in F5 who is discussing with the product team to see if we can allow it without NAP-WAF. Just for a central console of all deployments, that is native to F5 and not linked to Prometheus/Grafana etc. Fingers crossed!