Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit237bb4c

Browse files
authored
Update codefresh-on-prem.md (#347)
* Update codefresh-on-prem.mdAdded section on CSP headers to Additional Configuration section* Update codefresh-on-prem.mdAdded one-line descriptions of parameters and link to MDN's CSP article.
1 parentc66d069 commit237bb4c

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

‎_docs/administration/codefresh-on-prem.md‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -559,7 +559,21 @@ spec:
559559

560560
Both http and https target port should be set to **80**.
561561

562+
### Configure CSP (Content Security Policy)
563+
Add CSP environment variables to `config.yaml`, and define the values to be returned in the CSP HTTP headers.
564+
```yaml
565+
cfui:
566+
env:
567+
CONTENT_SECURITY_POLICY: "<YOUR SECURITY POLICIES>"
568+
CONTENT_SECURITY_POLICY_REPORT_ONLY: "default-src 'self'; font-src 'self'
569+
https://fonts.gstatic.com; script-src 'self' https://unpkg.com https://js.stripe.com;
570+
style-src 'self' https://fonts.googleapis.com; 'unsafe-eval' 'unsafe-inline'"
571+
CONTENT_SECURITY_POLICY_REPORT_TO: "<LIST OF ENDPOINTS AS JSON OBJECTS>"
572+
```
573+
`CONTENT_SECURITY_POLICY`is the string describing content policies. Use semi-colons to separate between policies.
574+
`CONTENT_SECURITY_POLICY_REPORT_TO`is a comma-separated list of JSON objects. Each object must have a name and an array of endpoints that receive the incoming CSP reports.
562575

576+
For detailed information, see the [Content Security Policy article on MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP).
563577
## Using existing external services for data storage/messaging
564578

565579
Normally the Codefresh installer, is taking care of all needed dependencies internally by deploying the respective services (mongo, redis etc) on its own.

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp