make more Sessions attributes configurable

templates/configmap-shibboleth.yaml

@@ -67,8 +67,8 @@ data:
 {{- else }}
                       relayState="ss:mem"
 {{- end }}
-                      checkAddress="false"
-                      consistentAddress="true"
+                      checkAddress="{{ .Values.backend.shibboleth.applicationDefaults.sessions.checkAddress | default "true" }}"
+                      consistentAddress="{{ .Values.backend.shibboleth.applicationDefaults.sessions.consistentAddress | default "true" }}"
                       handlerSSL="{{ .Values.backend.shibboleth.applicationDefaults.sessions.handlerSSL | default "true" }}"
                       redirectLimit="{{ .Values.backend.shibboleth.applicationDefaults.sessions.redirectLimit | default "host" }}"
                       cookieProps="{{ tpl .Values.backend.shibboleth.applicationDefaults.sessions.cookieProps . | default "https" }}"

values.yaml

@@ -152,10 +152,12 @@ backend:
 
       # https://wiki.shibboleth.net/confluence/display/SP3/Sessions
       sessions:
+        checkAddress: ""      # default: "true"
+        consistentAddress: "" # default: "true"
         handlerSSL: ""        # default: "true"
         redirectLimit: ""     # default: "host"
         cookieProps: ""       # default: "https"
-        # sameSiteSession : "Lax"
+        sameSiteSession : ""  # default: N/A
 
       # https://wiki.shibboleth.net/confluence/display/SP3/Errors
       errors: