Skip to main content

Installation

information

Only available for Kubernetes (k8s)

To install AppSec proceed with the following steps:

  1. Download Helm's chart
wget https://downloads.openappsec.io/helm/open-appsec-k8s-nginx-ingress-latest.tgz
  1. We proceed to install with Helm
helm upgrade --install open-appsec openappsec/open-appsec-k8s-nginx-ingress \
--set appsec.mode=standalone \
--set controller.ingressClass=appsec-nginx \
--set controller.ingressClassResource.name=appsec-nginx \
--set controller.ingressClassResource.controllerValue="k8s.io/appsec-nginx" \
--set appsec.persistence.enabled=false \
--set appsec.userEmail="correo@correo.org" \
--set controller.admissionWebhooks.certManager.enabled=false\
-n appsec --create-namespace

From the previous command we can note the following details:

  1. You use 'helm upgrade --install' because if it does not exist, install it and if it does exist, upgrade it.
  2. Use '--create-namespace' to create the namespace in Kuberentes if it is not already created.
  3. We use '-n appsec' to indicate the namespace where we want to install our application.
  4. Use '--set appsec.mode=standalone' to indicate the mode in which you want to deploy the standalone application, i.e. local mode which does not connect to the web interface.
  5. Use '--set controller.ingressClass=appsec-nginx' to indicate the controller name.
  6. Use '--set controller.ingressClassResource.name=appsec-nginx' to indicate the name of the controller class.
  7. Use '--set appsec.persistence.enabled=false' to indicate that we don't want persistence, if ML is enabled the info will be lost every time the container dies.
  8. Use '--set appsec.userEmail="correo@correo.org"' to indicate the email used to relate it to the web interface.
  9. Use '--set controller.admissionWebhooks.certManager.enabled=false' to indicate if we want to hook it to the certManager to generate the ssl/tls certificates.