++

infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml

@@ -481,3 +481,33 @@ spec:
                     prefix: /
                   service: frontend-service.document-link.svc.cluster.local
                   port: 80
+          envoyFilters:
+            cors-uralmine:
+              namespace: istio-system
+              workloadSelector:
+                labels:
+                  istio.deckhouse.io/ingress-gateway-class: istio
+              configPatches:
+                - applyTo: HTTP_FILTER
+                  match:
+                    context: GATEWAY
+                    listener:
+                      filterChain:
+                        filter:
+                          name: envoy.filters.network.http_connection_manager
+                          subFilter:
+                            name: envoy.filters.http.router
+                  patch:
+                    operation: INSERT_BEFORE
+                    value:
+                      name: envoy.filters.http.cors
+                      typed_config:
+                        '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
+                        cors:
+                          allow_credentials: true
+                          allow_headers: "Authorization,Content-Type"
+                          allow_methods: "GET,POST,PUT,PATCH,DELETE,OPTIONS"
+                          allow_origin_string_match:
+                            - safe_regex:
+                                regex: https://.*\.uralmine\.com
+                          max_age: "86400"