Update RC 2023.12.14

Qualytics · Dec 14, 2023 · 9f0813a · 9f0813a
1 parent 118e26e
commit 9f0813a
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 8 deletions.
diff --git a/charts/qualytics/Chart.yaml b/charts/qualytics/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: qualytics
 description: A Helm chart for deploying Qualytics on Kubernetes
 type: application
-version: 2023.12.12
-appVersion: "2023.12.12"
+version: 2023.12.14
+appVersion: "2023.12.14"
 dependencies:
 - name: spark-operator
   version: "1.x"

diff --git a/charts/qualytics/templates/ingress.yaml b/charts/qualytics/templates/ingress.yaml
@@ -45,7 +45,8 @@ metadata:
       add_header X-Frame-Options "sameorigin";
       add_header X-Content-Type-Options nosniff;
       add_header Referrer-Policy 'same-origin';      
-      add_header Content-Security-Policy "default-src https: 'unsafe-eval' 'unsafe-inline'";
+      add_header Content-Security-Policy "default-src https: blob: data: 'unsafe-eval' 'unsafe-inline'";
+      add_header Content-Security-Policy "worker-src https: blob:";
       add_header Permissions-Policy 'autoplay=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), keyboard-map=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self)';
       more_set_headers "X-Xss-Protection: 1; mode=block";
 
@@ -98,8 +99,9 @@ metadata:
     nginx.ingress.kubernetes.io/configuration-snippet: |
       add_header X-Frame-Options "sameorigin";
       add_header X-Content-Type-Options nosniff;
-      add_header Referrer-Policy 'same-origin';
-      add_header Content-Security-Policy "default-src https: 'unsafe-eval' 'unsafe-inline'";
+      add_header Referrer-Policy 'same-origin';      
+      add_header Content-Security-Policy "default-src https: blob: data: 'unsafe-eval' 'unsafe-inline'";
+      add_header Content-Security-Policy "worker-src https: blob:";
       add_header Permissions-Policy 'autoplay=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), keyboard-map=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self)';
       more_set_headers "X-Xss-Protection: 1; mode=block";
 

diff --git a/charts/qualytics/values.yaml b/charts/qualytics/values.yaml
@@ -95,13 +95,13 @@ selectors:
 # App image tags
 firewallImage:
   image:
-    firewallImageTag: "20231212-fb44c73"
+    firewallImageTag: "20231214-0e75d70"
 hubImage:
   image:
-    hubImageTag: "20231211-be8d797"
+    hubImageTag: "20231214-d497fca"
 frontendImage:
   image:
-    frontendImageTag: "20231211-6ebcb2d"
+    frontendImageTag: "20231214-a9da363"
 
 # The following secrets are required
 secrets: