Replies: 1 comment 2 replies
-
That's weird. Can you add other headers but not Access-Control-Allow-Private-Network or does it fail when you try to add any header? |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Hello,
My application makes requests to a few private resources, and Chrome expects to send preflight requests carrying the
Access-Control-Request-Private-Networkrequest header and receiving backAccess-Control-Allow-Private-Networkheader in responses to confirm these requests are safe.Unfortunately, the Istio CORS policy field in the VirtualService doesnβt support adding the
Access-Control-Allow-Private-Networkheader, and using the headers property to add it also doesnβt work.I tried using a VirtualService attached to a Gateway, in case that helps.
See https://developer.chrome.com/blog/private-network-access-preflight for more info about PNA preflights.
Is there another way to add the header I need in a request handled by the Istio CORS policy?
Beta Was this translation helpful? Give feedback.
All reactions