Enable "nosniff" for each endpoint, update helm values comment (NVIDI…

…A#168)
nicklausbrown · Jun 7, 2023 · 8438790 · 8438790
1 parent 1fd386d
commit 8438790
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/deployment/values.yaml b/deployment/values.yaml
@@ -19,7 +19,8 @@ image:
   # for the image tag, e.g:
   tag: 3.1.8-3.1.5-ubuntu20.04
 
-# Comment the following line to stop profiling metrics from DCGM
+# Change the following reference to "/etc/dcgm-exporter/default-counters.csv"
+# to stop profiling metrics from DCGM
 arguments: ["-f", "/etc/dcgm-exporter/dcp-metrics-included.csv"]
 # NOTE: in general, add any command line arguments to arguments above
 # and they will be passed through.

diff --git a/pkg/dcgmexporter/server.go b/pkg/dcgmexporter/server.go
@@ -40,6 +40,8 @@ func NewMetricsServer(c *Config, metrics chan string) (*MetricsServer, func(), e
 	}
 
 	router.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("X-Content-Type-Options", "nosniff")
+		w.WriteHeader(http.StatusOK)
 		w.Write([]byte(`<html>
 			<head><title>GPU Exporter</title></head>
 			<body>
@@ -99,6 +101,7 @@ func (s *MetricsServer) Metrics(w http.ResponseWriter, r *http.Request) {
 
 func (s *MetricsServer) Health(w http.ResponseWriter, r *http.Request) {
 	if s.getMetrics() == "" {
+		w.Header().Set("X-Content-Type-Options", "nosniff")
 		w.WriteHeader(http.StatusServiceUnavailable)
 		w.Write([]byte("KO"))
 	} else {