Issue with Configuring Cache-Control Headers on Kong Ingress

[Sarthak12]

Hello everyone,

I am currently facing an issue with setting specific cache-control configurations on my Kong ingress. Here is the context:

"I understand that response caching refers to the ability to cache web server responses using cache-related headers in the HTTP response objects. These headers specify how to cache the responses for either all requests or a few selected requests. However, I am concerned about the potential retrieval of sensitive information stored in the local cache by other users who have access to the same computer at a future time."

To address this, I am trying to set the following directives in the HTTP response headers on my Kong ingress:

Cache-Control: must-re-validate
Cache-Control: no-cache, no-store
Expires: 0
Pragma: no-cache
Despite my efforts, I am encountering issues with the configuration.
Could anyone provide guidance or share their experience on how to correctly set these cache-control headers on Kong ingress?
Any insights or suggestions would be greatly appreciated.

Thank you in advance for your help!

Best regards,
Sarthak Saxena