try out --skip-auth-preflight=true

[cedricve]

Pull Request Description

Motivation

The current setup for handling preflight CORS requests in our Kubernetes ingress controller involves using a server snippet to return a 200 status code for OPTIONS requests. This approach has been functional, but it adds complexity and potential maintenance overhead to our configuration.

Changes Made

1. Chart Version Update: Incremented the chart version from 0.69.0 to 0.70.0 to reflect these changes.
2. Ingress Configuration:
   • Removed the server snippet from hub-api.yaml that was handling OPTIONS requests.
3. OAuth2 Proxy Configuration:
   • Added the --skip-auth-preflight=true flag to the hub-oauth2-proxy.yaml configuration.

Benefits

• Simplified Configuration: By removing the server snippet, the ingress configuration is simplified, making it easier to maintain and understand.
• Improved Performance: Leveraging the --skip-auth-preflight flag in OAuth2 Proxy allows for more efficient handling of preflight requests, potentially improving performance and reducing latency.
• Enhanced Security: Reducing custom server configurations minimizes the risk of misconfigurations or security vulnerabilities.

Overall, these changes aim to streamline our configuration and make our system more robust and maintainable.