apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: {{$.Release.Name}}-cors
  namespace: {{$.Release.Namespace}}
spec:
  headers:
    accessControlAllowMethods:
      - "GET"
      - "POST"
      - "PUT"
      - "DELETE"
      - "OPTIONS"
    accessControlAllowHeaders:
      - "Content-Type"
      - "Authorization"
    accessControlAllowOriginList:
      - "*"   # или конкретный домен
    accessControlMaxAge: 100
    addVaryHeader: true