fix: up kube-workflow

SocialGouv · Apr 4, 2022 · 5fd40ae · 5fd40ae
2 parents 36c7656 + 4d0da5a
commit 5fd40ae
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 14 deletions.
diff --git a/.kube-workflow/common/kustomization.yaml b/.kube-workflow/common/kustomization.yaml
diff --git a/.kube-workflow/common/values.yaml b/.kube-workflow/common/values.yaml
@@ -1,3 +1,10 @@
 app:
   enabled: true
   containerPort: 3000
+  ingress:
+    annotations:
+      nginx.ingress.kubernetes.io/configuration-snippet: |
+        more_set_headers "Content-Security-Policy: default-src 'self'; connect-src 'self' https://*.gouv.fr; font-src 'self' https://fonts.gstatic.com/; media-src 'self' https://*.gouv.fr; img-src 'self' https://*.gouv.fr https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org; prefetch-src 'self' https://*.gouv.fr; script-src 'self' https://*.gouv.fr 'unsafe-inline'; frame-src 'self' https://*.gouv.fr; style-src 'self' 'unsafe-inline'";
+        more_set_headers "X-Frame-Options: deny";
+        more_set_headers "X-XSS-Protection: 1; mode=block";
+        more_set_headers "X-Content-Type-Options: nosniff";