cors.proto
Package: cors.options.gloo.solo.io
Types:
Source File: github.com/solo-io/gloo/projects/gloo/api/v1/options/cors/cors.proto
CorsPolicy
CorsPolicy defines Cross-Origin Resource Sharing for a virtual service.
"allowOrigin": []string
"allowOriginRegex": []string
"allowMethods": []string
"allowHeaders": []string
"exposeHeaders": []string
"maxAge": string
"allowCredentials": bool
"disableForRoute": bool| Field | Type | Description |
|---|---|---|
allowOrigin |
[]string |
Specifies the origins that will be allowed to make CORS requests. An origin is allowed if either allow_origin or allow_origin_regex match. |
allowOriginRegex |
[]string |
Specifies regex patterns that match origins that will be allowed to make CORS requests. An origin is allowed if either allow_origin or allow_origin_regex match. |
allowMethods |
[]string |
Specifies the content for the access-control-allow-methods header. |
allowHeaders |
[]string |
Specifies the content for the access-control-allow-headers header. |
exposeHeaders |
[]string |
Specifies the content for the access-control-expose-headers header. |
maxAge |
string |
Specifies the content for the access-control-max-age header. |
allowCredentials |
bool |
Specifies whether the resource allows credentials. |
disableForRoute |
bool |
Optional, only applies to route-specific CORS Policies, defaults to false. If set, the CORS Policy (specified on the virtual host) will be disabled for this route. |
CorsPolicyMergeSettings
Settings to determine how to merge CORS settings when present on both the VirtualHost and Route.
This option can be useful when different user personas or teams share ownership of a VirtualService.
For example, you might not want CORS settings on each route to override the virtual host settings, but instead merge them with a UNION strategy.
"exposeHeaders": .cors.options.gloo.solo.io.CorsPolicyMergeSettings.MergeStrategy| Field | Type | Description |
|---|---|---|
exposeHeaders |
.cors.options.gloo.solo.io.CorsPolicyMergeSettings.MergeStrategy |
MergeStrategy
| Name | Description |
|---|---|
DEFAULT |
Follow the default Envoy behavior, which is for Route settings to override VirtualHost settings if non-nil. |
UNION |
When a CORS policy is present on both VirtualHost and Route CORS policy, merge the settings. The merge is done by concatenating for list fields and by ORing for boolean fields. |