From 2595d174aa64c83df0502302ab810d843cd335e0 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Sun, 27 Sep 2026 22:41:17 +0300
Subject: [PATCH] vad: allow cross-origin credentialed requests to
 documentations-api (document-link, stamp-verification)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 infrastructure/istio-config/vad/istio-config.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/infrastructure/istio-config/vad/istio-config.yaml b/infrastructure/istio-config/vad/istio-config.yaml
index c27aa6d..52cb7fa 100644
--- a/infrastructure/istio-config/vad/istio-config.yaml
+++ b/infrastructure/istio-config/vad/istio-config.yaml
@@ -138,6 +138,15 @@ spec:
                 - sarex.vadroad.ru
               gateways:
                 - default/platform-gateway
+              cors:
+                allowOrigins:
+                  - exact: "*"
+                extraAllowMethods:
+                  - HEAD
+                extraAllowHeaders:
+                  - Range
+                  - Cache-control
+                allowCredentials: true
               routes:
                 - path:
                     prefix: /documentations/api/