BAH-2960 | Set Secure flag on all cookies

BahmniIndiaDistro · Apr 4, 2023 · 28e7dbf · 28e7dbf
1 parent 58d2c1d
commit 28e7dbf
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/templates/ingress.yaml b/templates/ingress.yaml
@@ -11,14 +11,16 @@ metadata:
       add_header Cross-Origin-Embedder-Policy "require-corp";
       add_header Cross-Origin-Opener-Policy "same-origin";
       add_header Cross-Origin-Resource-Policy "same-origin";
-      add_header Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),document-domain=(),encrypted-media=(),gamepad=(),geolocation=(),gyroscope=(),layout-animations=(self),legacy-image-formats=(self),magnetometer=(),midi=(),oversized-images=(self),payment=(),publickey-credentials-get=(),speaker-selection=(),sync-xhr=(self),unoptimized-images=(self),unsized-media=(self),usb=(),screen-wake-lock=(),web-share=(),xr-spatial-tracking=()"
+      add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), layout-animations=self, legacy-image-formats=self, magnetometer=(), midi=(), oversized-images=self, payment=(), publickey-credentials-get=(), speaker-selection=(), sync-xhr=self, unoptimized-images=self, unsized-media=self, usb=(), screen-wake-lock=(), web-share=(), xr-spatial-tracking=()";
       add_header Pragma "no-cache";
       add_header Referrer-Policy "same-origin";
       add_header Strict-Transport-Security "max-age=31536000 ; includeSubDomains";
       add_header X-Content-Type-Options "nosniff";
       add_header X-Frame-Options "SAMEORIGIN";
       add_header X-Permitted-Cross-Domain-Policies "none";
+      add_header Set-Cookie "Path=/; HttpOnly; Secure";
     nginx.ingress.kubernetes.io/proxy-body-size: {{ .Values.metadata.ingress.PROXY_BODY_SIZE }}
+    nginx.ingress.kubernetes.io/secure-backends: "true"
 spec:
   ingressClassName: nginx
   rules: