{"push_id":2013243949,"size":1,"distinct_size":1,"ref":"refs/heads/bz1430035","head":"95173eff7e4ace19d46dcf3a576b5af7f52a35ef","before":"f50ff95771308d2e9f6649a9593c31b8ea380e53","commits":[{"sha":"95173eff7e4ace19d46dcf3a576b5af7f52a35ef","author":{"name":"Phil Cameron","email":"67096281dbd271983fe045b970a5b8003bcadc27@redhat.com"},"message":"Router support for Strict-Transport-Security (hsts)\n\nStrict-Transport-Security (hsts) policy (RFC 6797) is a way that the\nhost can tell clients to always use https requests to the host. It is\ncontrolled by adding the haproxy.router.openshift.io/hsts_header annotation\nto the route. When the Strict-Transport-Security response is received\nby a client, it observes the policy until:\n1) It is updated by another response from the host, or\n2) the max-age decrements to 0\n\nThe max-age is only updated when the client receives a response\nthat contains the Strict-Transport-Security header. Otherwise\nthat the client just decrements max-age to 0.  When hsts policy is\nno longer desired for a host set max-age=0 in the annotation rather\nthan deleting the annotation. When a client makes another request\nthe response will cause the policy to be discarded.\n\nIn the route add the annotation:\nmetadata:\n  annotations:\n    haproxy.router.openshift.io/hsts_header: max-age=31536000;includeSubDomains\n\nWhere max-age=<seconds> is required and\nincludeSubDomains and\npreload\nare optional.\n\nWhen the annotation is present for a route https responses will\ninclude the Strict-Transport-Security header with the annotation's\nvalue. The annotation value must contain max-age=<seconds> and it\nmay contain either or both of: includeSubDomains and preload.\n\nmax-age sets the length of time the client should force requests\nto the host to be https.  max-age=31536000 is one year.\n\nincludeSubDomains requests all subdomains of the host should\nobserve the max-age of the host.\n\npreload tells the client to include this host in its host preload list.\n\nBug: 1430035\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1430035\n\nTrello:\nhttps://trello.com/c/H1FhCI1I/452-3-sccfsi-support-hsts-policy","distinct":true,"url":"https://api.github.com/repos/pecameron/origin/commits/95173eff7e4ace19d46dcf3a576b5af7f52a35ef"}]}
{"actor":{"display_login":"pecameron"}}