ci(deploy): add CORS related options to the deployment

deploy/values.yaml.gotmpl

@@ -18,8 +18,13 @@
   tls:
     withSecret: false
   annotations:
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/cors-allow-origin: '*'
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "Vary: Origin";
+      more_set_headers "Access-Control-Allow-Origin: https://rodolf.k.intra.logilab.fr";
+      more_set_headers "Access-Control-Allow-Credentials: true";
+      more_set_headers "Access-Control-Allow-Methods: GET,POST,OPTIONS";
+      more_set_headers "Access-Control-Allow-Headers: Content-Type, X-Client-Name";
+    nginx.ingress.kubernetes.io/enable-cors: "false"
 
 # backup
 backupBeforeCwUpgrade: {{ .StateValues.backupBeforeCwUpgrade }}
@@ -32,6 +37,10 @@
 dropDbAfterDeletingHelmRelease: {{ .StateValues.dropDbAfterDeletingHelmRelease }}
 
 env:
+  CW_ACCESS_CONTROL_ALLOW_HEADERS: "*"
+  CW_ACCESS_CONTROL_ALLOW_METHODS: GET, POST, OPTIONS
+  CW_ACCESS_CONTROL_ALLOW_ORIGIN: https://rodolf.k.intra.logilab.fr
+  CW_ACCESS_CONTROL_MAX_AGE: "1728000"
   CW_DB_HOST: pg.intra.logilab.fr
   CW_DB_PORT: 5432
   CW_DB_NAME: rodolf