Prometheus.spec.scrapeConfigNamespaceSelector.matchExpressions.values.spec.web.httpConfig.headers
List of headers that can be added to HTTP responses.
| Field / Type | Description |
|---|---|
contentSecurityPolicy | Set the Content-Security-Policy header to HTTP responses. Unset if blank. |
strictTransportSecurity | Set the Strict-Transport-Security header to HTTP responses. Unset if blank. Please make sure that you use this with care as this header might force browsers to load Prometheus and the other applications hosted on the same domain and subdomains over HTTPS. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security |
xContentTypeOptions | Set the X-Content-Type-Options header to HTTP responses. Unset if blank. Accepted value is nosniff. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
xFrameOptions | Set the X-Frame-Options header to HTTP responses. Unset if blank. Accepted values are deny and sameorigin. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
|
xXSSProtection | Set the X-XSS-Protection header to all responses. Unset if blank. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection |