When Hawkular servers were secured by Keycloack, it was possible to configure allowed origins for CORS requests. Now we no longer have a common solution.

Standalone Metrics has JAX-RS filters and config parameters to configure allowed headers and origins (this was developed for Openshift Metrics IIRC). The hawkular-metrics-component does not have them currently, because it used to be deployed along with Keycloack...

So is there interest in sharing the Metrics solution in commons? For those who wonder what CORS support brings, it allows to develop your own web pages (dashboard or hawkular-charts) on top of Hawkular servers.

Otherwise I will simply add the filters back to the Metrics component.