feat: add `allowAnyOrigin` to kong/`manager.ingress` [KM-122]

sumimakito commented 1 month ago

What this PR does / why we need it:

This pull request adds an optional property allowAnyOrigin under manager.ingress in kong Charts.

Which issue this PR fixes

KM-122

Special notes for your reviewer:

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

[x] PR is based off the current tip of the main branch.
[x] Changes are documented under the "Unreleased" header in CHANGELOG.md
[x] New or modified sections of values.yaml are documented in the README.md
[x] Commits follow the Kong commit message guidelines

sumimakito commented 1 month ago

I've converted this PR into a draft as we need to be more considerate on this one. We probably also need to provide correct support for multiple URLs on the Gateway side.

cc @mheap

mheap commented 3 weeks ago

For completeness - setting allowed origins to * is something that Gateway allows, but I do not think we should allow via the chart as it is insecure. Instead, Gateway should support defining multiple hostnames

Kong / charts