Add Content-Security-Policy header templating for portal

anders-elastisys · anders-elastisys · commit b91aca2bab9c · 2025-09-10T09:55:18.000+02:00
diff --git a/templates/portal/configmap.yaml b/templates/portal/configmap.yaml
@@ -63,6 +63,9 @@ data:
             }
             location = /index.html {
                 add_header Cache-Control "no-store, no-cache, must-revalidate";
+                {{- with .Values.portal.contentSecurityPolicy }}
+                add_header Content-Security-Policy {{ . }}
+                {{- end }}
             }
         }
     }
diff --git a/values.yaml b/values.yaml
@@ -566,6 +566,7 @@ portal:
   # - name: wait
   #   image: busybox
   #   command: [ 'sh', '-c', "sleep 20" ]
+  contentSecurityPolicy: ""
 
 core:
   image:

Original file line number	Diff line number	Diff line change
`@@ -63,6 +63,9 @@ data:`
`63`	`63`	`}`
`64`	`64`	`location = /index.html {`
`65`	`65`	`add_header Cache-Control "no-store, no-cache, must-revalidate";`
	`66`	`+ {{- with .Values.portal.contentSecurityPolicy }}`
	`67`	`+ add_header Content-Security-Policy {{ . }}`
	`68`	`+ {{- end }}`
`66`	`69`	`}`
`67`	`70`	`}`
`68`	`71`	`}`