49 lines
1.6 KiB
YAML
49 lines
1.6 KiB
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: pelican-route
|
|
namespace: pelican
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
namespace: envoy-gateway
|
|
sectionName: pelican
|
|
hostnames:
|
|
- "pelican.jsme.be"
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
filters:
|
|
- type: RequestHeaderModifier
|
|
requestHeaderModifier:
|
|
set:
|
|
- name: X-Forwarded-Host
|
|
value: "pelican.jsme.be"
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
- type: ResponseHeaderModifier
|
|
responseHeaderModifier:
|
|
set:
|
|
- name: Strict-Transport-Security
|
|
value: "max-age=31536000; includeSubDomains"
|
|
- name: X-Content-Type-Options
|
|
value: nosniff
|
|
- name: X-Frame-Options
|
|
value: SAMEORIGIN
|
|
- name: Referrer-Policy
|
|
value: strict-origin-when-cross-origin
|
|
- name: Permissions-Policy
|
|
value: "camera=(), microphone=(), geolocation=(), payment=()"
|
|
- name: Content-Security-Policy
|
|
value: "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' wss:; frame-ancestors 'self'"
|
|
backendRefs:
|
|
- name: pelican
|
|
port: 80
|
|
kind: Service
|
|
group: ""
|
|
weight: 1
|