xuang7 opened a new pull request, #8562: URL: https://github.com/apache/texera/pull/8562
### What changes were proposed in this PR? Set `RUSTFS_CORS_ALLOWED_ORIGINS=*` on the rustfs service (single-node compose, K8s chart via `extraEnv`, dev compose). The dataset file preview fetches presigned URLs directly from the browser, which is cross-origin. MinIO sent CORS headers by default; RustFS sends none unless this variable is set (the old reflective default was removed as CVE-2026-46685), so the preview shows a loading state and does not render the content. Wildcard mode never allows credentialed requests, and presigned requests carry no cookies, so this restores MinIO's behavior without loosening anything; deployments that want an allow-list can override it with their GUI origin. ### Any related issues, documentation, discussions? Fixes #8557. ### How was this PR tested? Tested on single-node deployment. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude Fable 5 (Claude Code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
