From a717de1ad5827a2e0ed6e9160304f64a92d3ae47 Mon Sep 17 00:00:00 2001
From: cuisongliu <cuisongliu@qq.com>
Date: Wed, 25 Mar 2026 13:01:55 +0800
Subject: [PATCH 1/2] fix(account-service): add ingress resource adoption and
 create install script

Signed-off-by: cuisongliu <cuisongliu@qq.com>
---
 controllers/license/deploy/license-controller-entrypoint.sh | 1 +
 frontend/providers/license/deploy/Kubefile                  | 2 ++
 frontend/providers/license/deploy/install.sh                | 4 ++++
 service/account/deploy/account-service-entrypoint.sh        | 1 +
 4 files changed, 8 insertions(+)
 create mode 100644 frontend/providers/license/deploy/install.sh

diff --git a/controllers/license/deploy/license-controller-entrypoint.sh b/controllers/license/deploy/license-controller-entrypoint.sh
index e376246664f1..221557becd6a 100644
--- a/controllers/license/deploy/license-controller-entrypoint.sh
+++ b/controllers/license/deploy/license-controller-entrypoint.sh
@@ -10,6 +10,7 @@ kubectl delete rolebinding license-leader-election-rolebinding -n account-system
 kubectl delete clusterrole license-manager-role --ignore-not-found
 kubectl delete clusterrole license-metrics-reader --ignore-not-found
 kubectl delete clusterrole license-proxy-role --ignore-not-found
+kubectl delete clusterrole license-controller-clusterrole --ignore-not-found
 kubectl delete role license-leader-election-role -n account-system --ignore-not-found
 kubectl delete serviceaccount license-controller-manager -n account-system --ignore-not-found
 helm upgrade  -i license -n license-system --create-namespace ./charts/license-controller  ${HELM_OPTS}
diff --git a/frontend/providers/license/deploy/Kubefile b/frontend/providers/license/deploy/Kubefile
index 4fa24cbd0075..ae8bf4b6e16d 100644
--- a/frontend/providers/license/deploy/Kubefile
+++ b/frontend/providers/license/deploy/Kubefile
@@ -5,6 +5,8 @@ USER 65532:65532
 COPY registry registry
 COPY manifests manifests
 
+COPY install.sh install.sh
+
 ENV certSecretName="wildcard-cert"
 ENV cloudDomain="127.0.0.1.nip.io"
 ENV cloudPort=""
diff --git a/frontend/providers/license/deploy/install.sh b/frontend/providers/license/deploy/install.sh
new file mode 100644
index 000000000000..330297d023fe
--- /dev/null
+++ b/frontend/providers/license/deploy/install.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+kubectl delete clusterrolebinding license-frontend-role-binding --ignore-not-found
+kubectl apply -f manifests
\ No newline at end of file
diff --git a/service/account/deploy/account-service-entrypoint.sh b/service/account/deploy/account-service-entrypoint.sh
index b243451b7e8e..66b76aba0c3a 100644
--- a/service/account/deploy/account-service-entrypoint.sh
+++ b/service/account/deploy/account-service-entrypoint.sh
@@ -33,6 +33,7 @@ if ! helm status "${RELEASE_NAME}" -n "${RELEASE_NAMESPACE}" >/dev/null 2>&1; th
   adopt_namespaced_resource configmap region-info
   adopt_namespaced_resource service account-service
   adopt_namespaced_resource deployment account-service
+  adopt_namespaced_resource ingress account-service
 fi
 
 # Build helm set args from ConfigMap

From 08420da88a150cf551adcdc2f3c577ed0bec8e85 Mon Sep 17 00:00:00 2001
From: cuisongliu <cuisongliu@qq.com>
Date: Wed, 25 Mar 2026 13:09:16 +0800
Subject: [PATCH 2/2] fix(config): add support for allowedAllOrigins in
 configmap and values

Signed-off-by: cuisongliu <cuisongliu@qq.com>
---
 .../deploy/charts/desktop-frontend/templates/configmap.yaml  | 5 +++++
 frontend/desktop/deploy/charts/desktop-frontend/values.yaml  | 1 +
 2 files changed, 6 insertions(+)

diff --git a/frontend/desktop/deploy/charts/desktop-frontend/templates/configmap.yaml b/frontend/desktop/deploy/charts/desktop-frontend/templates/configmap.yaml
index b45f1fc2e222..6b7dc8acdd61 100644
--- a/frontend/desktop/deploy/charts/desktop-frontend/templates/configmap.yaml
+++ b/frontend/desktop/deploy/charts/desktop-frontend/templates/configmap.yaml
@@ -13,11 +13,16 @@ data:
       regionUID: "{{ .Values.desktopConfig.regionUID }}"
       certSecretName: "{{ .Values.desktopConfig.certSecretName }}"
       proxyDomain: "{{ .Values.desktopConfig.cloudDomain }}"
+      allowedAllOrigins: {{ .Values.desktopConfig.allowedAllOrigins | default false }}
       allowedOrigins:
+{{- if .Values.desktopConfig.allowedAllOrigins }}
+        - "*"
+{{- else }}
 {{- $defaultAllowedOrigins := list "costcenter" "license" -}}
 {{- $allowedOrigins := .Values.desktopConfig.allowedOrigins | default $defaultAllowedOrigins -}}
 {{- range $origin := $allowedOrigins }}
         - "https://{{ $origin }}.{{ $.Values.desktopConfig.cloudDomain }}"
+{{- end }}
 {{- end }}
 
     common:
diff --git a/frontend/desktop/deploy/charts/desktop-frontend/values.yaml b/frontend/desktop/deploy/charts/desktop-frontend/values.yaml
index fa8f6dac6f09..45260ed86946 100644
--- a/frontend/desktop/deploy/charts/desktop-frontend/values.yaml
+++ b/frontend/desktop/deploy/charts/desktop-frontend/values.yaml
@@ -58,6 +58,7 @@ desktopConfig:
   billingUrl: "http://account-service.account-system.svc:2333"
   billingToken: ""
 
+  allowedAllOrigins: false
   allowedOrigins:
     - "costcenter"
     - "license"