Remove Request Headers

Summary

Remove Request Headers allows you to remove given request headers. This can be useful if you want to prevent privacy information from being passed to downstream applications.

How to configure

Core

YAML/JSON setting	Type	Usage
remove_request_headers	string	optional

Enterprise

Set Remove Request Headers in the Console:

Kubernetes

Name	Type	Usage
remove_request_headers	string	optional

See Kubernetes Ingress for more information

Examples

- from: https://verify.corp.example.com
  to: https://verify.pomerium.com
  policy:
    - allow:
        or:
          - email:
              is: user@example.com
  remove_request_headers:
    - X-Email
    - X-Username

# ingress
ingress.pomerium.io/remove_request_headers: |
  - X-Email
  - X-User