STD: CORS (GEP 1767)

[kflynn]

GEP 1767 describes how a Gateway can implement CORS.

Known implementations:

• Airlock
• Envoy Gateway
• GKE
• kgateway

[DamianSawicki]

We have a conformance PR in progress #3739 and two open issues: #3861 (assigned to me, I should take care of it soon) and #3854 (needs more research/discussion).

[rikatz]

@DamianSawicki I am willing to do another pass on CORS conformance this week, do you think it is worth to wait for your 2 open issues to be sorted out first or can we proceed?

Thanks!

[DamianSawicki]

@DamianSawicki I am willing to do another pass on CORS conformance this week, do you think it is worth to wait for your 2 open issues to be sorted out first or can we proceed?

I'll try to fix #3861 in the GEP asap, and indeed, it's a fundamental misunderstanding, so it would be good to rectify it in the GEP and reflect in conformance tests before merging the conformance PR.

As for #3854, it's debatable and rather minor, so there's probably no need to block the conformance PR. However, if you're interested in the topic, I'd highly appreciate your inputs there.