camunda / camunda-platform-helm

Camunda Platform 8 Self-Managed Helm charts
https://docs.camunda.io/docs/self-managed/overview/
Apache License 2.0
69 stars 127 forks source link

[ENHANCEMENT] add native support for Identity CORS configuration #2015

Open daniel-ewing opened 1 week ago

daniel-ewing commented 1 week ago

Describe the use case:

This issue Invalid CORS Request is frequently occurring, especially with AWS ALB.

Describe the enhancement/feature:

Add native support the the 10.x helm charts to configure Identity CORS setting without using these undocumented env vars:

identity:
  env:
    - name: CORS_ALLOWED_ORIGIN_PATTERNS
      value: *test.com,*another*.com
    - name: CORS_ALLOWED_METHODS
      value: GET,POST

Desired outcome and acceptance tests:

### Tasks
- [ ]  I can reproduce Identity `Invalid CORS Request` error, e.g.: as shown in [SUPPORT-22437](https://jira.camunda.com/browse/SUPPORT-22437).
- [ ] I can configure Identity CORS setting in my values.yaml file without using env vars.
- [ ] After applying the new settings via `helm upgrade`, the Identity `Invalid CORS Request` error is resolved.
- [ ] No other Identity env vars are affected.