Blog
Kubernetes Ingress: CORS annotations and controller differences
NGINX, Traefik, and Gateway API attach CORS headers differently—know which layer owns your policy.
1 min read
kubernetesingresscors
Controller-specific knobs
NGINX Ingress often uses snippet annotations; validate upgrade notes because security policies may block custom snippets.
Traefik middleware can centralize CORS for many routes—keep allowlists in Git and sync via CI.
TLS and SNI
Wildcard certificates do not imply wildcard CORS; still enumerate trusted browser origins explicitly.
Test preflight through the same hostname users hit, including www vs apex differences.