Proposed title of this feature request

Customer is looking to set the route annotation router.openshift.io/cookie-same-site: Strict for openshift-console, and oauth routes but it does not apply successfully.

Why does the customer need this?

SameSite is a cookie attribute (similar to HTTPOnly, Secure etc.) which aims to mitigate CSRF attacks. It is defined in RFC6265bis. This attribute helps the browser decide whether to send cookies along with cross-site requests. Possible values for this attribute are Lax, Strict, or None.