feat: add custom headers support for ingress configuration (#393)

Author: STASiAN

helm/templates/configmap.yaml

@@ -0,0 +1,9 @@
+{{- if .Values.ingress.headers -}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ingress-nginx-custom-headers
+  labels:
+    {{- include "helm-chart.labels" . | nindent 4 }}
+data: {{ .Values.ingress.headers | nindent 2 }}
+{{- end }}

helm/values.yaml

@@ -25,8 +25,9 @@ ingress:
   className: cilium
   annotations:
     kubernetes.io/tls-acme: "true"
-    nginx.ingress.kubernetes.io/configuration-snippet: |
-      more_set_headers "Content-Security-Policy: default-src 'self'; child-src 'self'; connect-src 'self' https://api-iam.intercom.io https://api.bako.global https://api.bako.global/socket.io https://api-js.mixpanel.com https://api.web3modal.org https://app.sentio.xyz https://hermes.pyth.network https://indexer.hyperindex.xyz https://mainnet.fuel.network https://nexus-websocket-a.intercom.io https://region1.google-analytics.com https://relay.walletconnect.org https://spark-candles.v12.trade https://testnet.fuel.network https://unleash.v12.trade https://www.google-analytics.com wss://api.bako.global/socket.io wss://indexer.hyperindex.xyz wss://nexus-websocket-a.intercom.io wss://relay.walletconnect.com wss://relay.walletconnect.org; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://e.widgetbot.io https://intercom.io https://s.tradingview.com https://verify.walletconnect.com https://widget.intercom.io https://widgetbot.io blob:; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://js.intercomcdn.com https://s3.tradingview.com https://widget.intercom.io https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; upgrade-insecure-requests; worker-src 'self'; block-all-mixed-content;";
+    nginx.ingress.kubernetes.io/custom-headers: spark-frontend/ingress-nginx-custom-headers
+  headers: |
+    Content-Security-Policy: default-src 'self'; child-src 'self'; connect-src 'self' https://api-iam.intercom.io https://api.bako.global https://api.bako.global/socket.io https://api-js.mixpanel.com https://api.web3modal.org https://app.sentio.xyz https://hermes.pyth.network https://indexer.hyperindex.xyz https://mainnet.fuel.network https://nexus-websocket-a.intercom.io https://region1.google-analytics.com https://relay.walletconnect.org https://spark-candles.v12.trade https://testnet.fuel.network https://unleash.v12.trade https://www.google-analytics.com wss://api.bako.global/socket.io wss://indexer.hyperindex.xyz wss://nexus-websocket-a.intercom.io wss://relay.walletconnect.com wss://relay.walletconnect.org; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://e.widgetbot.io https://intercom.io https://s.tradingview.com https://verify.walletconnect.com https://widget.intercom.io https://widgetbot.io blob:; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://js.intercomcdn.com https://s3.tradingview.com https://widget.intercom.io https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; upgrade-insecure-requests; worker-src 'self'; block-all-mixed-content;
 
 resources:
   requests: