Open turnerrainer opened 7 months ago
Changed the ingresses, so that some values that were hardcoded, will use values.yaml as a source
Went over the components/modules in scope to check that the CORS
values are set
Commit
https://github.com/buerokratt/NoOps/commit/8ac118040d7ecccfc98b35e3d1ee426f8d1151a8
AS InfoSec I WANT CORS restrictions to be applied SO THAT potential attack surface would be smaller
Acceptance Criteria
Access-Control-Allow-Origin
header to define which origins are allowed to access the resourceAccess-Control-Allow-Methods
header to define the HTTP methods (GET, POST, PUT, etc.) that are allowed for cross-origin requestsScope