I have a very simple e2e test that is essentially "Log in and see the protected page content". I have a Ruby on Rails backend, which houses the login page and a React frontend that we redirect to after sign in. I was able to get that all working locally using the

experimentalSessionAndOrigin

features. The problem I am facing is that, when running in a multi-container setup in CI on Gitlab, I am getting 401s on the API requests that the Frontend makes because the session cookie isn't being passed along in those requests. I have a working test suite with this setup in Cucumber so there shouldn't be anything fundamentally wrong. If I run both the Rails application and Frontend project on the same container in Gitlab, everything works as expected. CORS is setup properly for this setup and the cookies are set with SameSite=Lax in CI. Has anyone experienced this issue before that can shed some light?