Automate (somehow) the domain in things like SESSION_COOKIE_DOMAIN: ".billing.kbtdev.org"
An alternative approach may be to use just one domain and to fetch the domain from a source (such as an existing configmap, ingress)
The goal is to get towards fully automated helm deployments for staging servers tied to release branches.