From f5cd3ed4eb5f2493f8a902e921a532b224cd3272 Mon Sep 17 00:00:00 2001
From: Ludovic Cleroux <ludydoo@gmail.com>
Date: Wed, 17 Jan 2024 13:44:57 +0100
Subject: [PATCH] ROX-20479: only use active-tls cert (#1591)

---
 templates/service-template.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/templates/service-template.yml b/templates/service-template.yml
index 8afefec639..a27ba248ab 100644
--- a/templates/service-template.yml
+++ b/templates/service-template.yml
@@ -880,8 +880,6 @@ objects:
                     tls_certificates:
                     - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
                       private_key: {filename: "/secrets/active-tls/tls.key"}
-                    - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
-                      private_key: {filename: "/secrets/active-tls/tls.key"}
               filters:
               - name: envoy.filters.network.http_connection_manager
                 typed_config:
@@ -936,8 +934,6 @@ objects:
                   full_scan_certs_on_sni_mismatch: true
                   common_tls_context:
                     tls_certificates:
-                    - certificate_chain: {filename: "/secrets/tls/tls.crt"}
-                      private_key: {filename: "/secrets/tls/tls.key"}
                     - certificate_chain: {filename: "/secrets/active-tls/tls.crt"}
                       private_key: {filename: "/secrets/active-tls/tls.key"}
               filters: