NGINX Instance Manager

NGINX One

  • NGINX One Console
  • NGINX Plus
  • NGINX Instance Manager
  • NGINX Ingress Controller
  • NGINX Gateway Fabric
  • NGINX Open Source
  • NGINX Agent

F5 WAF for NGINX

  • F5 WAF for NGINX
  • F5 DoS for NGINX

NGINX as a Service

  • NGINXaaS for Azure
  • NGINXaaS for Google Cloud

Glossary

  • F5 NGINX Glossary
Skip Navigation
    • Technical Specifications
    • NGINX Instance Manager dashboard
    • Overview: NGINX Instance Manager REST API
      • Deploy using Docker Compose
      • Deploy NGINX Plus in a container (data plane)
      • Deploy using Helm
      • Configurable Helm settings
      • Frequently used Helm configurations
      • Use external TLS certificates
      • Overview
      • Install with Ansible
      • Build and deploy images
      • Install NGINX Instance Manager using a script
      • Manually install NGINX Instance Manager
    • Install NGINX Instance Manager using a script (disconnected)
    • Manually install NGINX Instance Manager (disconnected)
        • Set up basic authentication
        • Get started with OIDC
        • Microsoft Entra: Set up OIDC authentication
        • Automate OIDC with Microsoft Entra
        • Keycloak: Set up OIDC authentication
        • Provision users and groups using SCIM
      • Overview: RBAC
      • Create and manage roles
      • Assign roles to users or user groups
      • Manage resource groups
    • Perform a system health check
    • Back up and restore
    • Add a license (connected)
    • Report usage data to F5 (connected)
    • Add a license (disconnected)
    • Report usage data to F5 (disconnected)
    • Change telemetry settings
    • Configure settings with nms.conf
    • Use a third-party forward proxy
    • High availability with keepalived
    • Configure ClickHouse
    • Use Vault for storing secrets
    • Configure SELinux
    • Configure telemetry and web analytics
    • Optimize NGINX proxy gateway for large data planes
    • Secure client access and network traffic
    • Overview: NGINX instance metrics
    • Query the Metrics API
    • View events and metrics
      • Dimensions Catalog
      • Events Catalog
      • Metrics Catalog
    • Stage NGINX configs
    • Publish NGINX configs
    • Publish NGINX configs with version control
        • About NGINX config templates
        • F5 Global Default base template
        • Augment templates
        • Template resource files
        • Manage NGINX configs with templates
        • RBAC for config templates and submissions
        • Round-robin reverse proxy with an augment template
        • JSON Schemas for Dynamic Web Forms
    • Add an NGINX instance
    • Scan and discover NGINX instances
    • Create and manage instance groups
    • Manage SSL certificates
    • Organize instances with tags
    • How WAF policy management works
      • Overview
        • Install the WAF compiler
        • Install the WAF compiler in a disconnected environment
        • Automatically update the WAF compiler
        • Manually update the WAF compiler
        • Overview
        • Automatically update security packages
        • Manually update security packages
        • Update Security Monitoring attack signature database
      • Set up compiler resource pruning
        • Install NGINX Agent
        • Configure NGINX Agent
        • Verify instance onboarding
        • Configure Docker Compose
        • Add WAF configuration
        • Edit WAF configuration
        • Verify WAF configuration
        • Onboard custom security policies
      • Troubleshooting
      • Overview
        • Create a security policy
        • Update a security policy
        • Delete a security policy
        • Add signature sets and exceptions
        • Add cookies, parameters, and URLs
        • Review policy
        • Matching types: Explicit vs. Wildcard
        • Create a security policy bundle
        • Download a security policy bundle
        • List security policy bundles
        • Configure and deploy log profiles
        • Compile log profiles (REST API)
        • Deploy log profiles
        • Review log profiles
        • Download log profile bundles (REST API)
        • Create and deploy profiles (REST API)
        • Update log profiles (REST API)
        • Delete security log profiles (REST API)
        • Publish updates to instances
        • Check publication status
    • Set up F5 WAF for NGINX instances for Security Monitoring
    • Add user access to Security Monitoring dashboards
    • Update the attack signature database
    • Update the geolocation database used in dashboards
    • Troubleshooting
    • Create a support package
    • Create a support package from a Helm installation
    • Where to go for support
    • Release notes
    • Known issues
NGINX Docs
  • F5

    Deliver and secure every app

  • DevCentral

    Connect & learn in our hosted community

  • MyF5

    Your key to everything F5, including support, registration keys, and subscriptions

  • NGINX

    Learn more about NGINX Open Source and read the community blog

  • Community Forum

    Engage with the broader NGINX community for discussions and troubleshooting

  1. Home
  2. F5 NGINX Instance Manager
  3. Deploy (connected)
  4. Kubernetes

Kubernetes

NGINX Plus R33 requires NGINX Instance Manager 2.18 or later
If your NGINX data plane instances are running NGINX Plus R33 or later, you must upgrade to NGINX Instance Manager 2.18 or later to support usage reporting. NGINX Plus R33 instances must report usage data to the F5 licensing endpoint or NGINX Instance Manager. Otherwise, they will stop processing traffic.

For more details about usage reporting and enforcement, see About solution licenses

In this section

Deploy using Helm

Deploy F5 NGINX Instance Manager on Kubernetes using the official Helm chart in standard or lightweight mode.

Configurable Helm settings

Reference for all configurable Helm chart parameters and their default values for the F5 NGINX Instance Manager Kubernetes deployment.

Frequently used Helm configurations

Common Helm chart configuration examples for F5 NGINX Instance Manager, covering ingress, persistence, resource limits, and other frequently needed settings.

Use external TLS certificates

Configure F5 NGINX Instance Manager to use external TLS certificates from a trusted CA instead of the self-signed certificates generated by the Helm chart.

View source
Edit this page
Create a new issue
F5 logo

©2026 F5, Inc. All rights reserved. NGINX is a registered trademark of F5, Inc.

Trademarks Policies Privacy California Privacy Do Not Sell My Personal Information