Adding <ignore-scheme/> was the solution for us. Just make sure to add it within the <cors> section of the jolokia-access.xml. We are using the official artemis image and mount it from a configmap to /var/lib/artemis-instance/etc-override/jolokia-access.xml so it gets copied to the install directory on startup.