---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: headers-argo
  namespace: kube-system
spec:
  headers:
    stsPreload: true
    forceSTSHeader: true
    contentSecurityPolicy: "default-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src 'self' data:; worker-src *"
...