diff --git a/k8s/cloud/base/proxy_envoy.yaml b/k8s/cloud/base/proxy_envoy.yaml
index bf20891a5f7..df4d101d62f 100644
--- a/k8s/cloud/base/proxy_envoy.yaml
+++ b/k8s/cloud/base/proxy_envoy.yaml
@@ -42,10 +42,7 @@ data:
                     allow_origin_string_match:
                     - prefix: "*"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true
diff --git a/k8s/cloud/dev/proxy_envoy.yaml b/k8s/cloud/dev/proxy_envoy.yaml
index 9364023dc12..ecbec917df9 100644
--- a/k8s/cloud/dev/proxy_envoy.yaml
+++ b/k8s/cloud/dev/proxy_envoy.yaml
@@ -21,7 +21,7 @@ data:
         - filters:
           - name: envoy.http_connection_manager
             typed_config:
-              "@type": >
+              "@type": >-
                 type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
               access_log:
               - name: envoy.file_access_log
@@ -49,10 +49,7 @@ data:
                     allow_origin_string_match:
                     - suffix: "dev.withpixie.dev"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true
diff --git a/k8s/cloud/prod/proxy_envoy.yaml b/k8s/cloud/prod/proxy_envoy.yaml
index 30300dfcb6b..e4d4adc3ca5 100644
--- a/k8s/cloud/prod/proxy_envoy.yaml
+++ b/k8s/cloud/prod/proxy_envoy.yaml
@@ -16,7 +16,7 @@ data:
         - filters:
           - name: envoy.http_connection_manager
             typed_config:
-              "@type": >
+              "@type": >-
                 type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
               access_log:
               - name: envoy.file_access_log
@@ -44,10 +44,7 @@ data:
                     allow_origin_string_match:
                     - suffix: "withpixie.ai"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true
diff --git a/k8s/cloud/public/base/proxy_envoy.yaml b/k8s/cloud/public/base/proxy_envoy.yaml
index 9364023dc12..ecbec917df9 100644
--- a/k8s/cloud/public/base/proxy_envoy.yaml
+++ b/k8s/cloud/public/base/proxy_envoy.yaml
@@ -21,7 +21,7 @@ data:
         - filters:
           - name: envoy.http_connection_manager
             typed_config:
-              "@type": >
+              "@type": >-
                 type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
               access_log:
               - name: envoy.file_access_log
@@ -49,10 +49,7 @@ data:
                     allow_origin_string_match:
                     - suffix: "dev.withpixie.dev"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true
diff --git a/k8s/cloud/staging/proxy_envoy.yaml b/k8s/cloud/staging/proxy_envoy.yaml
index 03b0352f45d..5d06754d871 100644
--- a/k8s/cloud/staging/proxy_envoy.yaml
+++ b/k8s/cloud/staging/proxy_envoy.yaml
@@ -16,7 +16,7 @@ data:
         - filters:
           - name: envoy.http_connection_manager
             typed_config:
-              "@type": >
+              "@type": >-
                 type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
               access_log:
               - name: envoy.file_access_log
@@ -44,10 +44,7 @@ data:
                     allow_origin_string_match:
                     - suffix: "staging.withpixie.dev"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true
diff --git a/k8s/cloud/testing/proxy_envoy.yaml b/k8s/cloud/testing/proxy_envoy.yaml
index 4cae477fdbd..c694490ac9e 100644
--- a/k8s/cloud/testing/proxy_envoy.yaml
+++ b/k8s/cloud/testing/proxy_envoy.yaml
@@ -16,7 +16,7 @@ data:
         - filters:
           - name: envoy.http_connection_manager
             typed_config:
-              "@type": >
+              "@type": >-
                 type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
               access_log:
               - name: envoy.file_access_log
@@ -42,12 +42,9 @@ data:
                       cluster: api_service
                   cors:
                     allow_origin_string_match:
-                            - suffix: "testing.withpixie.dev"
+                    - suffix: "testing.withpixie.dev"
                     allow_methods: GET, PUT, DELETE, POST, OPTIONS
-                    allow_headers: >
-                      keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,
-                      x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,
-                      x-grpc-web,authorization,grpc-timeout,grpc-status,grpc-message
+                    allow_headers: content-type,x-grpc-web,x-user-agent
                     max_age: "1728000"
                     expose_headers: grpc-status,grpc-message,grpc-timeout
                     allow_credentials: true