Add headers to nginx ingress containers

Added X-XSS-Protection header to nginx ingress containers
Enable X-Frame-Options DENY header in nginx

Also Fix chart lint errors

Change-Id: I2b696fffd13518aa9f423f6d8624a279726c60ca
This commit is contained in:
KHIYANI, RAHUL (rk0850) 2020-09-23 17:53:34 -05:00
parent 237915c779
commit 5e993fbb20
4 changed files with 8 additions and 2 deletions

View File

@ -15,7 +15,7 @@ appVersion: v1.0.0
description: OpenStack-Helm Ranger Agent description: OpenStack-Helm Ranger Agent
home: https://opendev.org/x/ranger-agent home: https://opendev.org/x/ranger-agent
name: ranger-agent name: ranger-agent
version: 0.1.0 version: 0.1.1
sources: sources:
- https://opendev.org/openstack/ranger-agent - https://opendev.org/openstack/ranger-agent
- https://opendev.org/openstack/openstack-helm - https://opendev.org/openstack/openstack-helm

View File

@ -141,6 +141,9 @@ network:
cluster: "nginx-cluster" cluster: "nginx-cluster"
annotations: annotations:
nginx.ingress.kubernetes.io/rewrite-target: / nginx.ingress.kubernetes.io/rewrite-target: /
nginx.ingress.kubernetes.io/configuration-snippet: |
more_set_headers "X-Frame-Options: deny";
more_set_headers "X-XSS-Protection: 1; mode=block";
external_policy_local: false external_policy_local: false
node_port: node_port:
enabled: false enabled: false

View File

@ -15,7 +15,7 @@ appVersion: v1.0.0
description: OpenStack-Helm Ranger description: OpenStack-Helm Ranger
home: https://opendev.org/x/ranger home: https://opendev.org/x/ranger
name: ranger name: ranger
version: 0.1.0 version: 0.1.1
icon: https://opendev.org/x/ranger/raw/branch/master/public/images/logo.png icon: https://opendev.org/x/ranger/raw/branch/master/public/images/logo.png
sources: sources:
- https://opendev.org/openstack/ranger - https://opendev.org/openstack/ranger

View File

@ -642,6 +642,9 @@ network:
cluster: "nginx-cluster" cluster: "nginx-cluster"
annotations: annotations:
nginx.ingress.kubernetes.io/rewrite-target: / nginx.ingress.kubernetes.io/rewrite-target: /
nginx.ingress.kubernetes.io/configuration-snippet: |
more_set_headers "X-Frame-Options: deny";
more_set_headers "X-XSS-Protection: 1; mode=block";
external_policy_local: false external_policy_local: false
node_port: node_port:
enabled: false enabled: false