Adds security config for dashboard (#673)

apache · Nov 30, 2023 · 06e00a5 · 06e00a5
1 parent 462df93
commit 06e00a5
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/charts/apisix-dashboard/templates/configmap.yaml b/charts/apisix-dashboard/templates/configmap.yaml
@@ -54,6 +54,10 @@ data:
         access_log:
           file_path: {{ .accessLog.filePath }}
       {{- end }}
+      {{- if .security }}
+      security:
+        {{- toYaml .security | nindent 6 }}
+      {{- end }}
     {{- end }}
     {{- with .Values.config.authentication }}
     authentication:

diff --git a/charts/apisix-dashboard/values.yaml b/charts/apisix-dashboard/values.yaml
@@ -115,6 +115,14 @@ config:
       accessLog:
         # -- Error log path
         filePath: /dev/stdout
+    security: {}
+      # access_control_allow_origin: http://httpbin.org
+      # access_control_allow_credentials: true          # support using custom cors configration
+      # access_control_allow_headers: "Authorization"
+      # access_control-allow_methods: "*"
+      # x_frame_options: "deny"
+      # content_security_policy: "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src xx.xx.xx.xx:3000"  # You can set frame-src to provide content for your grafana panel.
+
     # -- Overrides plugins in the APISIX Dashboard conf
     plugins: []
   authentication: