Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-5615

Enable HSTS automatically on routes

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Won't Do
    • Icon: Undefined Undefined
    • None
    • openshift-4.16
    • Network - IngressDNS
    • None
    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request

      Configure routes automatically to enable HSTS annotation when enforcement is enabled. 
      2. What is the nature and description of the request?

      Earlier there was an RFE https://issues.redhat.com/browse/NE-310 to enable HSTS automatically but it was decided to instead implement enforcement via global options. This in turn leads to route no longer working when enforcement is enabled but annotation is not set. Instead of this logic customer is looking for a way to automatically annotate route with HSTS.

      There is another RFEs to enable HSTS for specific routes we manage like https://issues.redhat.com/browse/OCPSTRAT-1183 that would benefit from a global option (making sure it's not reconciled by the operator). 
      3. Why does the customer need this? (List the business requirements here)

      Customers can provide an annotation on a route to enable HSTS.  For customers with many routes or regulatory compliance issues, the manual per-route annotation is problematic.  There is no global env setting to make it the default for all routes.  

      4. List any affected packages or components.

              mcurry@redhat.com Marc Curry
              rhn-support-afaulhab Anne Faulhaber
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:
                None
                None