Skip to content

[ENHANCEMENT] add native support for Identity CORS configuration #2015

@daniel-ewing

Description

@daniel-ewing

Describe the use case:

This issue Invalid CORS Request is frequently occurring, especially with AWS ALB.

Describe the enhancement/feature:

Add native support the the 10.x helm charts to configure Identity CORS setting without using these undocumented env vars:

identity:
  env:
    - name: IDENTITY_CORS_ALLOWED_ORIGIN_PATTERNS
      value: *test.com,*another*.com
    - name: IDENTITY_CORS_ALLOWED_METHODS
      value: GET,POST

Which are in the config:

identity:
  cors-allowed-origin-patterns: ""
  cors-allowed-methods: ""

Desired outcome and acceptance tests:

### Tasks
- [ ]  I can reproduce Identity `Invalid CORS Request` error, e.g.: as shown in [SUPPORT-22437](https://jira.camunda.com/browse/SUPPORT-22437).
- [ ] I can configure Identity CORS setting in my values.yaml file without using env vars.
- [ ] After applying the new settings via `helm upgrade`, the Identity `Invalid CORS Request` error is resolved.
- [ ] No other Identity env vars are affected.

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/enhancementNew feature or requestplatform/awsIssues related to AWSpossibly-outdatedFor github issues over a year oldsupportMarks an issue as related to a customer support request (don't edit the lable)

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions