diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5a768fd7..4c2e4bd7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,10 +16,10 @@ We use *breaking* word for marking changes that are not backward compatible (rel
 ### Breaking Changes
 
 ### Changed
-- [226](https://github.com/thanos-io/kube-thanos/pull/226) Only schedule thanos components on linux nodes.
+- [#226](https://github.com/thanos-io/kube-thanos/pull/226) Only schedule thanos components on linux nodes.
 
 ### Added
-
+- [#228](https://github.com/thanos-io/kube-thanos/pull/228) Allow configuring `--web.prefix-header` of query.
 ### Fixed
 
 ## [v0.19.0](https://github.com/thanos-io/kube-thanos/tree/v0.19.0) (2020-04-19)
diff --git a/jsonnet/kube-thanos/kube-thanos-query.libsonnet b/jsonnet/kube-thanos/kube-thanos-query.libsonnet
index 3cde38cf..48f660e3 100644
--- a/jsonnet/kube-thanos/kube-thanos-query.libsonnet
+++ b/jsonnet/kube-thanos/kube-thanos-query.libsonnet
@@ -11,6 +11,7 @@ local defaults = {
   replicaLabels: error 'must provide replicaLabels',
   stores: ['dnssrv+_grpc._tcp.thanos-store.%s.svc.cluster.local' % defaults.namespace],
   externalPrefix: '',
+  prefixHeader: '',
   autoDownsampling: true,
   resources: {},
   queryTimeout: '',
@@ -114,6 +115,11 @@ function(params) {
             '--web.external-prefix=' + tq.config.externalPrefix,
           ] else []
         ) +
+        (
+          if tq.config.prefixHeader != '' then [
+            '--web.prefix-header=' + tq.config.prefixHeader,
+          ] else []
+        ) +
         (
           if tq.config.queryTimeout != '' then [
             '--query.timeout=' + tq.config.queryTimeout,