feat(k8s/infrastructure/traefik): add HSTS middleware on websecure entrypoint

2026-03-16 00:29:11 +02:00
parent b2842f055a
commit 68baf37627
2 changed files with 14 additions and 0 deletions
--- a/kubernetes/infrastructure/controllers/traefik/middleware-hsts.yaml
+++ b/kubernetes/infrastructure/controllers/traefik/middleware-hsts.yaml
@@ -0,0 +1,12 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: hsts
+  namespace: traefik
+spec:
+  headers:
+    stsSeconds: 31536000
+    stsIncludeSubdomains: true
+    stsPreload: true
+    forceSTSHeader: true
--- a/kubernetes/infrastructure/controllers/traefik/release.yaml
+++ b/kubernetes/infrastructure/controllers/traefik/release.yaml
@@ -28,6 +28,8 @@ spec:
    ingressRoute:
      dashboard:
        enabled: true
+    additionalArguments:
+      - "--entryPoints.websecure.http.middlewares=traefik-hsts@kubernetescrd"
    service:
      type: ClusterIP
    ports: