Ensure the allow-snippet-annotations: 'true'
already set on Ingress ConfigMap. Then add this to your Ingress:
annotations:
nginx.ingress.kubernetes.io/configuration-snippet: |
more_set_headers "Content-Security-Policy: script-src 'self' * 'unsafe-inline' 'unsafe-eval' data: blob:; img-src 'self' * data: blob:; style-src 'self' * 'unsafe-inline' data:; font-src 'self' * data:; media-src 'self' *; connect-src 'self' *; object-src 'self' *; frame-src 'self' *;";