From 2fa77d717e73fbe866f1e3ad6cbd32947a4265aa Mon Sep 17 00:00:00 2001
From: emelinda <emelin_d_a@mail.ru>
Date: Mon, 5 Oct 2026 23:17:03 +0300
Subject: [PATCH] Add CORS and routes for `transmittal-api`,
 `inspections-backend`, `workflows-api`, and `workspaces-api` in
 `brusnika-prod` Istio configuration

---
 .../brusnika-prod/istio-config.yaml           | 76 +++++++++++++++++++
 1 file changed, 76 insertions(+)

diff --git a/infrastructure/istio-config/brusnika-prod/istio-config.yaml b/infrastructure/istio-config/brusnika-prod/istio-config.yaml
index c5d573d..937c777 100644
--- a/infrastructure/istio-config/brusnika-prod/istio-config.yaml
+++ b/infrastructure/istio-config/brusnika-prod/istio-config.yaml
@@ -708,6 +708,82 @@ spec:
                   rewrite: /
                   service: frontend-service.notes.svc.cluster.local
                   port: 8080
+            transmittal-api-virt-service:
+              namespace: transmittal
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              routes:
+                - path:
+                    prefix: /transmittals/api/
+                  rewrite: /api/
+                  service: transmittal-service.transmittal.svc.cluster.local
+                  port: 80
+            inspections-backend:
+              namespace: inspections
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              routes:
+                - path:
+                    prefix: /inspections/api/
+                  rewrite: /api/
+                  service: backend-service.inspections.svc.cluster.local
+                  port: 8000
+            workflows-api:
+              namespace: workflow
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              routes:
+                - path:
+                    prefix: /workflows/api/
+                  rewrite: /api/
+                  service: workflows-api-service.workflow.svc.cluster.local
+                  port: 8000
+            workspaces-api:
+              namespace: workspaces
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              routes:
+                - path:
+                    prefix: /workspaces/api/
+                  rewrite: /api/
+                  service: workspaces-service.workspaces.svc.cluster.local
+                  port: 8000
             issues-vs:
               namespace: issues
               hosts: