To add content security policy using addheaders in values.yaml file

[praveensounder]

Currently we are using Nginx ingress controller 2.1.1 - https://github.com/nginxinc/kubernetes-ingress/tree/v2.1.1

We need to add Content security policy to the config file.

We passed using addheaders but its not getting reflected.

Kindly please let us know How to add content security policy in helm charts values.yaml file

We need to add configuration Inside nginx server {} block like below:

add_header Content-Security-Policy "default-src 'self';";

Link: https://content-security-policy.com/examples/nginx/

[brianehlert]

This is duplicated here: #2827

[brianehlert]

add_header Content-Security-Policy "default-src 'self';";

Headers are manipulated at the server block level using the VirtualServer resource
https://docs.nginx.com/nginx-ingress-controller/configuration/virtualserver-and-virtualserverroute-resources/#header

[praveensounder]

Can we add content security policy in the configmap