From b1e4918e88c70fe393fe3ccc3a077b19a6f99b6a Mon Sep 17 00:00:00 2001
From: Christopher Tineo <christophertineo02@gmail.com>
Date: Sat, 18 Apr 2026 19:09:32 -0400
Subject: [PATCH 1/3] Configure CORS Allowed Origins via ConfigMaps

---
 deploy/manifests/balancer/base/deployment.yaml            | 2 ++
 deploy/manifests/balancer/base/kustomization.yaml         | 3 +++
 .../manifests/balancer/overlays/production/configmap.yaml | 6 ++++++
 .../balancer/overlays/production/kustomization.yaml       | 8 ++++++++
 deploy/manifests/balancer/overlays/sandbox/configmap.yaml | 6 ++++++
 .../balancer/overlays/sandbox/kustomization.yaml          | 8 ++++++++
 server/balancer_backend/settings.py                       | 5 ++++-
 7 files changed, 37 insertions(+), 1 deletion(-)
 create mode 100644 deploy/manifests/balancer/overlays/production/configmap.yaml
 create mode 100644 deploy/manifests/balancer/overlays/production/kustomization.yaml
 create mode 100644 deploy/manifests/balancer/overlays/sandbox/configmap.yaml
 create mode 100644 deploy/manifests/balancer/overlays/sandbox/kustomization.yaml

diff --git a/deploy/manifests/balancer/base/deployment.yaml b/deploy/manifests/balancer/base/deployment.yaml
index c50012c2..10bcfc93 100644
--- a/deploy/manifests/balancer/base/deployment.yaml
+++ b/deploy/manifests/balancer/base/deployment.yaml
@@ -21,6 +21,8 @@ spec:
           envFrom:
             - secretRef:
                 name: balancer-config
+            - configMapRef:
+                name: balancer-config
           ports:
             - containerPort: 8000
           readinessProbe:
diff --git a/deploy/manifests/balancer/base/kustomization.yaml b/deploy/manifests/balancer/base/kustomization.yaml
index c7d2dcd1..38e12e47 100644
--- a/deploy/manifests/balancer/base/kustomization.yaml
+++ b/deploy/manifests/balancer/base/kustomization.yaml
@@ -6,3 +6,6 @@ resources:
   - deployment.yaml
   - service.yaml
   - ingress.yaml
+
+configMapGenerator:
+  - name: balancer-config
diff --git a/deploy/manifests/balancer/overlays/production/configmap.yaml b/deploy/manifests/balancer/overlays/production/configmap.yaml
new file mode 100644
index 00000000..47253b20
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/production/configmap.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: balancer-config
+data:
+  CORS_ALLOWED_ORIGINS: "https://balancerproject.org"
diff --git a/deploy/manifests/balancer/overlays/production/kustomization.yaml b/deploy/manifests/balancer/overlays/production/kustomization.yaml
new file mode 100644
index 00000000..c0cf6eb0
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/production/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+patches:
+  - path: configmap.yaml
diff --git a/deploy/manifests/balancer/overlays/sandbox/configmap.yaml b/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
new file mode 100644
index 00000000..ad9528e9
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: balancer-config
+data:
+  CORS_ALLOWED_ORIGINS: "https://sandbox.balancertestsite.com"
diff --git a/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml b/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml
new file mode 100644
index 00000000..c0cf6eb0
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+patches:
+  - path: configmap.yaml
diff --git a/server/balancer_backend/settings.py b/server/balancer_backend/settings.py
index a4ccaaae..c1424fc7 100644
--- a/server/balancer_backend/settings.py
+++ b/server/balancer_backend/settings.py
@@ -67,7 +67,10 @@
 
 ROOT_URLCONF = "balancer_backend.urls"
 
-CORS_ALLOW_ALL_ORIGINS = True
+# CORS configuration
+CORS_ALLOWED_ORIGINS = os.environ.get("CORS_ALLOWED_ORIGINS", "http://localhost:3000").split(",")
+# Ensure no empty strings if input was empty or trailing comma
+CORS_ALLOWED_ORIGINS = [origin.strip() for origin in CORS_ALLOWED_ORIGINS if origin.strip()]
 
 TEMPLATES = [
     {

From 00250efac2166452f383b433008e7dda5ca9c022 Mon Sep 17 00:00:00 2001
From: Christopher Tineo <christophertineo02@gmail.com>
Date: Sat, 18 Apr 2026 19:12:57 -0400
Subject: [PATCH 2/3] Update sandbox domain for CORS

---
 deploy/manifests/balancer/overlays/sandbox/configmap.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy/manifests/balancer/overlays/sandbox/configmap.yaml b/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
index ad9528e9..ff7ec0a0 100644
--- a/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
+++ b/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
@@ -3,4 +3,4 @@ kind: ConfigMap
 metadata:
   name: balancer-config
 data:
-  CORS_ALLOWED_ORIGINS: "https://sandbox.balancertestsite.com"
+  CORS_ALLOWED_ORIGINS: "https://sandbox.balancerproject.org"

From 8262de577ab12215f72c712ea0207c5e01ea9dd1 Mon Sep 17 00:00:00 2001
From: Christopher Tineo <christophertineo02@gmail.com>
Date: Sat, 18 Apr 2026 19:13:28 -0400
Subject: [PATCH 3/3] Refine ConfigMap overlays using env files and correct
 sandbox domain

---
 deploy/manifests/balancer/base/balancer.env                | 0
 deploy/manifests/balancer/base/kustomization.yaml          | 2 ++
 deploy/manifests/balancer/overlays/production/balancer.env | 1 +
 .../manifests/balancer/overlays/production/configmap.yaml  | 6 ------
 .../balancer/overlays/production/kustomization.yaml        | 7 +++++--
 deploy/manifests/balancer/overlays/sandbox/balancer.env    | 1 +
 deploy/manifests/balancer/overlays/sandbox/configmap.yaml  | 6 ------
 .../manifests/balancer/overlays/sandbox/kustomization.yaml | 7 +++++--
 8 files changed, 14 insertions(+), 16 deletions(-)
 create mode 100644 deploy/manifests/balancer/base/balancer.env
 create mode 100644 deploy/manifests/balancer/overlays/production/balancer.env
 delete mode 100644 deploy/manifests/balancer/overlays/production/configmap.yaml
 create mode 100644 deploy/manifests/balancer/overlays/sandbox/balancer.env
 delete mode 100644 deploy/manifests/balancer/overlays/sandbox/configmap.yaml

diff --git a/deploy/manifests/balancer/base/balancer.env b/deploy/manifests/balancer/base/balancer.env
new file mode 100644
index 00000000..e69de29b
diff --git a/deploy/manifests/balancer/base/kustomization.yaml b/deploy/manifests/balancer/base/kustomization.yaml
index 38e12e47..1bc2cc1b 100644
--- a/deploy/manifests/balancer/base/kustomization.yaml
+++ b/deploy/manifests/balancer/base/kustomization.yaml
@@ -9,3 +9,5 @@ resources:
 
 configMapGenerator:
   - name: balancer-config
+    envs:
+      - balancer.env
diff --git a/deploy/manifests/balancer/overlays/production/balancer.env b/deploy/manifests/balancer/overlays/production/balancer.env
new file mode 100644
index 00000000..1fa5802e
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/production/balancer.env
@@ -0,0 +1 @@
+CORS_ALLOWED_ORIGINS=https://balancerproject.org
diff --git a/deploy/manifests/balancer/overlays/production/configmap.yaml b/deploy/manifests/balancer/overlays/production/configmap.yaml
deleted file mode 100644
index 47253b20..00000000
--- a/deploy/manifests/balancer/overlays/production/configmap.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: balancer-config
-data:
-  CORS_ALLOWED_ORIGINS: "https://balancerproject.org"
diff --git a/deploy/manifests/balancer/overlays/production/kustomization.yaml b/deploy/manifests/balancer/overlays/production/kustomization.yaml
index c0cf6eb0..7ecd6659 100644
--- a/deploy/manifests/balancer/overlays/production/kustomization.yaml
+++ b/deploy/manifests/balancer/overlays/production/kustomization.yaml
@@ -4,5 +4,8 @@ kind: Kustomization
 resources:
   - ../../base
 
-patches:
-  - path: configmap.yaml
+configMapGenerator:
+  - name: balancer-config
+    behavior: merge
+    envs:
+      - balancer.env
diff --git a/deploy/manifests/balancer/overlays/sandbox/balancer.env b/deploy/manifests/balancer/overlays/sandbox/balancer.env
new file mode 100644
index 00000000..55d82ecc
--- /dev/null
+++ b/deploy/manifests/balancer/overlays/sandbox/balancer.env
@@ -0,0 +1 @@
+CORS_ALLOWED_ORIGINS=https://sandbox.balancerproject.org
diff --git a/deploy/manifests/balancer/overlays/sandbox/configmap.yaml b/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
deleted file mode 100644
index ff7ec0a0..00000000
--- a/deploy/manifests/balancer/overlays/sandbox/configmap.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: balancer-config
-data:
-  CORS_ALLOWED_ORIGINS: "https://sandbox.balancerproject.org"
diff --git a/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml b/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml
index c0cf6eb0..7ecd6659 100644
--- a/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml
+++ b/deploy/manifests/balancer/overlays/sandbox/kustomization.yaml
@@ -4,5 +4,8 @@ kind: Kustomization
 resources:
   - ../../base
 
-patches:
-  - path: configmap.yaml
+configMapGenerator:
+  - name: balancer-config
+    behavior: merge
+    envs:
+      - balancer.env