HSTS Support in VirtualServer CRD

[mkingst]

HSTS is not supported with the VirtualServer CRD

The following is a workaround, based on this guide, however this can lead to problems with inheritance and snippets are not the best approach from a validation perspective:

data:
  server-snippets: |
    proxy_hide_header Strict-Transport-Security;
    set $hsts_header_val "";
    if ($scheme = 'https') {
      set $hsts_header_val "max-age=31536000";
    }
    add_header Strict-Transport-Security "$hsts_header_val" always;
    if ($scheme  = 'http') {
      return 302 https://$host$request_uri;
    }

The request is to add HSTS to VirtualServer via policy.

[github-actions]

Hi @mkingst thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!