Is there a way to set the Secure flag to the Load Balancer cookie

[john-hu]

Hi all,

We use the following resource to load balance our Web Socket service:

apiVersion: configuration.konghq.com/v1
kind: KongIngress
metadata:
  name: cookie-balancer
upstream:
  hash_on_cookie: "sessionAffinity"
  hash_on: "cookie"
  hash_fallback: "none"
  hash_on_cookie_path: "/"

It works very well with the sample cookie like this sessionAffinity=b34a9a65-b303-4ac3-aa67-0dd129803748; Path=/; Same-Site=Lax; HttpOnly.

Recently, we would like to add the Secure flag to have the cookie look like: sessionAffinity=b34a9a65-b303-4ac3-aa67-0dd129803748; Path=/; Same-Site=Lax; HttpOnly; Secure.

I checked the doc and KongIngress reference without any lucks.

May we know if there is a way to set the Secure flag to the cookie generated by the KongIngress load balancer?

[StarlightIbuki]

You could write a custom plugin, modifying the response header at the header_filter phase.

[john-hu]

Wow.. This is beyond my knowledge. May we have any example of handling the response header in the docs?

[StarlightIbuki]

https://docs.konghq.com/gateway/latest/plugin-development/custom-logic/
https://docs.konghq.com/gateway/latest/plugin-development/pdk/kong.response/