ROX-20479: only use active-tls cert (#1591)

stackrox · Jan 17, 2024 · f5cd3ed · f5cd3ed
1 parent d7bc25d
commit f5cd3ed
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/templates/service-template.yml b/templates/service-template.yml
@@ -880,8 +880,6 @@ objects:
                     tls_certificates:
                     - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
                       private_key: {filename: "/secrets/active-tls/tls.key"}
-                    - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
-                      private_key: {filename: "/secrets/active-tls/tls.key"}
               filters:
               - name: envoy.filters.network.http_connection_manager
                 typed_config:
@@ -936,8 +934,6 @@ objects:
                   full_scan_certs_on_sni_mismatch: true
                   common_tls_context:
                     tls_certificates:
-                    - certificate_chain: {filename: "/secrets/tls/tls.crt"}
-                      private_key: {filename: "/secrets/tls/tls.key"}
                     - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
                       private_key: {filename: "/secrets/active-tls/tls.key"}
               filters: