From bee959edeeec95d0fc61cc388a6aca4051a2bfea Mon Sep 17 00:00:00 2001
From: emelinda <emelin_d_a@mail.ru>
Date: Mon, 5 Oct 2026 23:42:24 +0300
Subject: [PATCH] Add CORS and routes for `cde`, `pdm-api-api`, and
 `documentations` services in `brusnika-prod` Istio configuration

---
 .../brusnika-prod/istio-config.yaml           | 69 +++++++++++++++++++
 1 file changed, 69 insertions(+)

diff --git a/infrastructure/istio-config/brusnika-prod/istio-config.yaml b/infrastructure/istio-config/brusnika-prod/istio-config.yaml
index 38e3d44..83aa866 100644
--- a/infrastructure/istio-config/brusnika-prod/istio-config.yaml
+++ b/infrastructure/istio-config/brusnika-prod/istio-config.yaml
@@ -966,6 +966,75 @@ spec:
                     prefix: /administration/users
                   service: frontend-service.django.svc.cluster.local
                   port: 80
+            cde:
+              namespace: orchestrator
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              routes:
+                - path:
+                    prefix: /orchestrator/
+                  rewrite: /api/
+                  service: cde.orchestrator.svc.cluster.local
+                  port: 8080
+            pdm-api-api:
+              namespace: documentations
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+              headers:
+                request:
+                  remove:
+                    - Cookie
+              routes:
+                - path:
+                    prefix: /gateway/api/
+                  rewrite: /api/
+                  service: pdm-api.documentations.svc.cluster.local
+                  port: 8080
+            documentations:
+              namespace: documentations
+              hosts:
+                - cde.brusnika.ru
+              gateways:
+                - ingress-nginx/global-cde-gw
+              cors:
+                allowOrigins:
+                  - exact: https://cde.brusnika.ru
+                  - exact: https://stamp-verification.cde.brusnika.ru
+                  - exact: https://document-link.cde.brusnika.ru
+                extraAllowMethods:
+                  - HEAD
+                extraAllowHeaders:
+                  - Range
+                  - Cache-Control
+              routes:
+                - path:
+                    prefix: /documentations/api/
+                  rewrite: /api/
+                  service: documentations-api.documentations.svc.cluster.local
+                  port: 8080
+                - path:
+                    prefix: /files/api/
+                  rewrite: /api/
+                  service: documentations-filestream.documentations.svc.cluster.local
+                  port: 8080
             issues-vs:
               namespace: issues
               hosts: