fix(helm): remove config overrides for CSRF

[reidab]

SUMMARY

Fixes #22715

This PR removes the WTF_ CSRF-related overrides from the configuration file generated by the Helm chart, allowing the defaults from config.py to be used.

superset/superset/config.py

Lines 249 to 257 in 2ccdb72

	# Flask-WTF flag for CSRF
	WTF_CSRF_ENABLED = True
	# Add endpoints that need to be exempt from CSRF protection
	WTF_CSRF_EXEMPT_LIST = [
	"superset.views.core.log",
	"superset.views.core.explore_json",
	"superset.charts.data.api.data",
	]

As noted in #22715, there may be better ways to handle the CSRF exclusion for these three routes outside of the config file to prevent this same mistake from being made in other context. This is just the simplest solution that solves the issue with the Helm chart clearing the list.

TESTING INSTRUCTIONS

1. Deploy a copy of Superset using the Helm chart
2. Navigate around the UI
3. Confirm that calls to /superset/log are returning 200 instead of 302 redirects to /login

ADDITIONAL INFORMATION

• Has associated issue: Helm chart overrides default WTF_CSRF_EXEMPT_LIST with blank array #22715
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[craig-rueda]

You need to re-generate the helm README as the version bump requires this

[reidab]

You need to re-generate the helm README as the version bump requires this

@craig-rueda just re-generated the README and updated the branch.