1280261 - Search admin CDN needs to send CORS headers.

Status: RESOLVED FIXED

(Cloud Services :: Operations: AMO, task)

Description

[Stuart Colville [:muffinresearch]]

We're currently pointing admin search [1] at the amo CDN hosts. 

SRI is blocking the loading of the assets because the amo CDN hosts are not sending CORS headers.

We need CORS enabled for https://addons-dev-cdn.allizom.org/search-*.css and js etc so that SRI will work as we did for the discovery specific CDN host. 

[1] https://addons-admin.dev.mozaws.net/search

Comment 1

[Jason Thomas [:jason]]

We should use new CDN endpoints for admin search deployment.

dev: addons-admin-dev-cdn.allizom.org
stage: addons-admin-cdn.allizom.org
prod: addons-admin.cdn.mozilla.net

I've created dev so far and added the static asset upload as part of deployment. I think we need update the addons-frontend configuration to reflect this, I've created PR https://github.com/mozilla/addons-frontend/pull/668.

Comment 2

[Jason Thomas [:jason]]

Configured on -dev.

curl -D- -H "Origin: addons-admin.dev.mozaws.net" https://addons-admin-dev-cdn.allizom.org/search-8864e713051dffd45b09.js -so/dev/null
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 417973
Connection: keep-alive
Date: Wed, 29 Jun 2016 22:46:11 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
x-amz-version-id: qZInoaN9JhIg9VGl_W.9XeFAEqXGzQC1
Last-Modified: Wed, 29 Jun 2016 21:12:15 GMT
ETag: "3de93dc2064068ef514ab937d7700597"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding,Origin
X-Cache: Miss from cloudfront
Via: 1.1 04c778554b7ba297accf26c1e5b400dd.cloudfront.net (CloudFront)
X-Amz-Cf-Id: _jx4rK5gpmbDl7kp2iiLOLoDWThacqvWxMhNVs_ocdmAxFhXUBzmLw==