Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add HSTS header to healthz endpoint response #825

Open
rishabh-11 opened this issue Jun 6, 2023 · 0 comments
Open

Add HSTS header to healthz endpoint response #825

rishabh-11 opened this issue Jun 6, 2023 · 0 comments
Labels
area/robustness Robustness, reliability, resilience related kind/enhancement Enhancement, improvement, extension lifecycle/stale Nobody worked on this for 6 months (will further age) priority/4 Priority (lower number equals higher priority)

Comments

@rishabh-11
Copy link
Contributor

How to categorize this issue?

/area robustness
/kind enhancement
/priority 4

What would you like to be added:
Add HSTS header to the HTTP response from the health endpoint of mcm. Refer etcd-backup-restore for an example.

Why is this needed:
The HSTS header is absent from the HTTP response from the health endpoint, making it vulnerable to man-in-the-middle attacks.

@rishabh-11 rishabh-11 added the kind/enhancement Enhancement, improvement, extension label Jun 6, 2023
@gardener-robot gardener-robot added area/robustness Robustness, reliability, resilience related priority/4 Priority (lower number equals higher priority) labels Jun 6, 2023
@gardener-robot gardener-robot added the lifecycle/stale Nobody worked on this for 6 months (will further age) label Feb 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/robustness Robustness, reliability, resilience related kind/enhancement Enhancement, improvement, extension lifecycle/stale Nobody worked on this for 6 months (will further age) priority/4 Priority (lower number equals higher priority)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants