Make session cookie SameSite override configurable (#476)

Allow configuring SESSION_COOKIE_SAMESITE so sessions persist during
cross-domain Keystone callbacks (for federated OIDC).

#443

Signed-off-by: Bartosz Bezak <[email protected]>

Author: bbezak

chart/files/api/settings/01-django.yaml

@@ -4,6 +4,9 @@ CSRF_COOKIE_SECURE: {{ .Values.ingress.tls.enabled }}
 {{- with .Values.settings.csrfCookieName }}
 CSRF_COOKIE_NAME: {{ . }}
 {{- end }}
+{{- with .Values.settings.sessionCookieSameSite }}
+SESSION_COOKIE_SAMESITE: {{ . | quote }}
+{{- end }}
 SESSION_COOKIE_SECURE: {{ .Values.ingress.tls.enabled }}
 {{- with .Values.settings.sessionCookieName }}
 SESSION_COOKIE_NAME: {{ . }}

chart/values.yaml

@@ -169,6 +169,8 @@ settings:
   csrfCookieName:
   # The name of the session cookie
   sessionCookieName:
+  # The SameSite policy for the session cookie (e.g. Lax, Strict, None)
+  sessionCookieSameSite:
   # The name of the next URL cookie
   nextUrlCookieName:
   # List of curated sizes