diff --git a/deploy/craned/deployment.yaml b/deploy/craned/deployment.yaml
index 2061e320f..e36ef0db7 100644
--- a/deploy/craned/deployment.yaml
+++ b/deploy/craned/deployment.yaml
@@ -215,7 +215,6 @@ data:
         add_header Cache-Control "must-revalidate";
         add_header Cache-Control "max-age=300";
         add_header ETag "1.90.0-rc.0";
-        add_header Access-Control-Allow-Origin *;
         listen 9090;
         listen [::]:9090;
         location / {
@@ -228,6 +227,7 @@ data:
             proxy_pass http://$upstream_grafana:8082;
             rewrite /grafana/(.*) /$1 break;
             include conf.d/common_params;
+            add_header Access-Control-Allow-Origin *;
         }
         # merge /api/v1/cluster /api/v1/namespaces
         location /api {