Set some headers as recommended by Pentesting

common/playbooks/k8s.yaml

@@ -359,6 +359,12 @@
           --set controller.service.externalIPs={{ '{' + hostvars[groups['ingress'][0]].ansible_default_ipv4.address + '}' }}
           --set controller.config.proxy-body-size=0
           --set controller.allowSnippetAnnotations=false
+          --set controller.addHeaders.X-Content-Type-Options=nosniff
+          --set controller.addHeaders.Referrer-Policy=no-referrer
+          --set controller.addHeaders.Permissions-Policy="geolocation=()"
+          --set controller.addHeaders.="geolocation=()"
+          --set controller.addHeaders.Content-Security-Policy="frame-ancestors 'none'"
+          https://*.d4science.org 'self'"
           --version={{ version }}
       shell: |-
         helm status --namespace kube-system cluster-ingress