aws / aws/containers-roadmap

[EKS] [request]: make cors-allowed-origins flag configurable in EKS kube clusters

Open
#777 0 comments 9 reactions 0 assignees View on GitHub
EKS Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
Kubernetes supports a `cors-allowed-origins` flag, seen in code at https://github.com/kubernetes/apiserver/blob/release-1.14/pkg/server/options/server_run_options.go#L144, that allows the configuration of CORS domains. Would like to be able to set this value so that the Kubernetes APIs can be CORS compliant.

**Which service(s) is this request for?**
EKS

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Without CORS compliance in the Kubernetes APIs, any client side dashboards that we build (running exclusively in the user's browser, making API calls with that user's credentials instead of server side requests) will require a proxy to allow for CORS compliance to workaround the problem. Unfortunately, adding a proxy to the mix introduces the potential for replay attacks using data from the proxy.

**Are you currently working around this issue?**
Will be building a proxy for our internal use to force CORS compliance with these API calls.

**Additional context**
N/A

**Attachments**
N/A

Contributor guide

Open the contributing guide

Research direction

Start with the Kubernetes server_run_options.go reference for the cors-allowed-origins flag, then investigate how EKS exposes Kubernetes API server configuration. Done means EKS users can configure allowed CORS origins for Kubernetes APIs without requiring a proxy; the issue does not name repository files or tests to run.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
api, cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.