cors-allow-origin - use more than 1 URL

[hAh0L13]

Hello all.

We use HAProxy-ingress 0.7.2 in our cluster (OKD, openshift)

Can I use two or more URLs in ingress annotation ingress.kubernetes.io/cors-allow-origin ?

If I adding two annotations, it use last applied. If I adding list of URLs delimited by comma, controller switch header to any - "*"

Docs didn't cover this case

[jcmoraisjr]

Hi, from this mdn doc:

Access-Control-Allow-Origin specifies either a single origin, which tells browsers to allow that origin to access the resource; or else — for requests without credentials — the "*" wildcard, to tell browsers to allow any origin to access the resource.

So it sounds you can only use one origin or a wildcard * which the current implementation already supports.

[hAh0L13]

Hi. Big thanks for this. Should have been more attentive.Thanks for link

[maxisam]

FYI, nginx is going to support it. They are fixing a bug now

[hAh0L13]

FYI, nginx is going to support it. They are fixing a bug now

I would like a link to the confirmation of this

[maxisam]

@hAh0L13 can't believe I forgot to paste the link kubernetes/ingress-nginx#5496

[jcmoraisjr]

How one would implement this? It's technically pretty simple but it's apparently unsupported?

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMultipleAllowOriginNotAllowed

It seems to me that I cannot add more than one header and this one should have one origin or a wildcard.

[hAh0L13]

It seems to me that I cannot add more than one header and this one should have one origin or a wildcard.

It looks like the solution is in a conditional block where CORS headers are configured on the fly based on a compare origin domain with list of allowed domains.
kubernetes/ingress-nginx#5496 (comment)
ingress-nginx supports configurations snippets that allow this

[jcmoraisjr]

Ah sure, a dynamic response based on the request. It seems promising, will have a look on this.

[jcmoraisjr]

Just to let you know added to v0.13-beta.1, doc here. Ping here is this doesn't work as you expected.