Developed a security-focused enhancement for the emqx/emqx repository by introducing a Helm chart feature that allows operators to selectively enable or disable WebSocket service ports using a new service.wsEnabled toggle. This solution, implemented with Helm, Kubernetes, and YAML, omits ws and wss port blocks from rendered manifests when disabled, thereby reducing the attack surface and improving manifest clarity for security audits. The approach maintained backward compatibility by defaulting to existing behavior and included clear operational documentation for disabling related ingress settings. The work demonstrated careful templating and a strong understanding of deployment hygiene, security posture, and configuration management best practices.