CORS setting does not work?

[joseph-cloudthing]

I've been attempting to implement CORS configuration via arm templates.

I have used this template as a guide, specifically this section.

{
          "apiVersion": "2015-04-01",
          "name": "web",
          "type": "config",
          "dependsOn": [
            "[resourceId('Microsoft.Web/Sites', variables('apiSiteName'))]"
          ],
          "properties": {
            "cors": {
              "allowedOrigins": [
                "[concat('https://', parameters('siteName'), '.azurewebsites.net')]"
              ]
            }
          }
},

I've attached this resource within the resources array of an existing Microsoft.Web/Sites object.

The template deploys successfully. No errors are returned.

The CORS configuration is not updated however, the entry does not appear in the Azure Portal either?

Is this really a valid way of setting CORS configurations?

https://schema.management.azure.com/schemas/2016-08-01/Microsoft.Web.json#/resourceDefinitions/sites_config suggests it is correct.

[mswehli]

Same issue. Tried both as a child resource and having it in the siteConfig section (as per the online documentation), as well as directly in properties. Nothing seems to work (using api version 2016-08-01

[melezhik]

the same issue for me! what is ETA on this?

[melezhik]

https://github.com/MicrosoftDocs/azure-docs/issues/18511

[mutanttech]

Guys, @melezhik were you able to find the solution to this problem. Setting the CORS values using ARM templates still not working for me. This is ridiculous to mix things with ARM and scripts.
Does using Azure CLI is way going forward? Please suggest.

[mutanttech]

It worked for me really straightforward from the ARM Template.
"siteConfig": {
"AlwaysOn": true,
"webSocketsEnabled": true,
"use32BitWorkerProcess": false,
"cors": {
"allowedOrigins": "[parameters('corsAllowedOrigins')]",
"supportCredentials": false
}