Hi Stuart ,

Thank you for help on this . One thing I forgot to mention . We have Thanos 
also in front of Prometheus , will it impact if enable SSL ? 

Thanks 


> On 6 Aug 2020, at 1:36 AM, Stuart Clark <[email protected]> wrote:
> 
> On 05/08/2020 17:54, [email protected] wrote:
>> Hi All,
>> 
>> In our current setup Prometheus is non-ssl configured , which means I am 
>> accessing Prometheus as http://server-name:9090
>> 
>> During our recent Security scan below details were reported . Please advise 
>> , what step I can take for this .
>> 
>> Message :
>> X-Frame-Options or Content-Security-Policy: frame-ancestors HTTP Headers 
>> missing on port 9090.
>> 
> You can run a reverse proxy (e.g. nginx) in front of Prometheus to add TLS, 
> authentication or any HTTP headers you wish...
> 
> 

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/766EB61C-765B-452B-9DE7-E5C528FA2F36%40gmail.com.

Reply via email to