From bb144b156359460235b93e21c34787e218c4e624 Mon Sep 17 00:00:00 2001 From: emelinda Date: Mon, 5 Oct 2026 23:31:51 +0300 Subject: [PATCH] Add CORS and routes for new backend services in `brusnika-prod` Istio configuration --- .../brusnika-prod/istio-config.yaml | 182 ++++++++++++++++++ 1 file changed, 182 insertions(+) diff --git a/infrastructure/istio-config/brusnika-prod/istio-config.yaml b/infrastructure/istio-config/brusnika-prod/istio-config.yaml index 937c777..38e3d44 100644 --- a/infrastructure/istio-config/brusnika-prod/istio-config.yaml +++ b/infrastructure/istio-config/brusnika-prod/istio-config.yaml @@ -784,6 +784,188 @@ spec: rewrite: /api/ service: workspaces-service.workspaces.svc.cluster.local port: 8000 + bim-backend-v2: + namespace: bim + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /bimv2/api/ + rewrite: /api/ + service: backend-service.bim.svc.cluster.local + port: 8000 + notes-backend: + namespace: notes + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /notes/api/ + rewrite: /api/ + service: backend-service.notes.svc.cluster.local + port: 8000 + mapper-backend: + namespace: mapper + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /mapper/api/ + rewrite: /api/ + service: backend-service.mapper.svc.cluster.local + port: 8000 + eav: + namespace: eav + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /eav/api/ + rewrite: /api/ + service: eav-service.eav.svc.cluster.local + port: 8000 + - path: + prefix: /eav/admin/ + service: eav-service.eav.svc.cluster.local + port: 8000 + comparisons-backend: + namespace: comparisons + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /comparisons/api/ + rewrite: /api/ + service: backend-service.comparisons.svc.cluster.local + port: 80 + django-media: + namespace: django + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /media/ + rewrite: / + service: s3-proxy-service.django.svc.cluster.local + port: 80 + resources: + namespace: resources + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /resources/ + rewrite: / + service: resources-service.resources.svc.cluster.local + port: 8000 + - path: + prefix: /res-admin/ + service: resources-service.resources.svc.cluster.local + port: 8000 + - path: + prefix: /resource-management/ + service: resources-service.resources.svc.cluster.local + port: 8000 + srx-admin: + namespace: django + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /control-interface/ + rewrite: / + service: srx-admin-svc.django.svc.cluster.local + port: 8080 + administration-users: + namespace: django + hosts: + - cde.brusnika.ru + gateways: + - ingress-nginx/global-cde-gw + cors: + allowOrigins: + - exact: https://cde.brusnika.ru + - exact: https://stamp-verification.cde.brusnika.ru + - exact: https://document-link.cde.brusnika.ru + extraAllowMethods: + - HEAD + routes: + - path: + prefix: /administration/users + service: frontend-service.django.svc.cluster.local + port: 80 issues-vs: namespace: issues hosts: