From 7a0ca658cb3e4070a8e7d591b7f71d8ff295ceb2 Mon Sep 17 00:00:00 2001
From: Marek Czajkowski <marek.czajkowski@ds.pl>
Date: Wed, 30 Jul 2025 15:44:43 +0200
Subject: [PATCH] removed blueprint-search certificate

---
 .github/workflows/azure-deploy-streamx-large.yaml  | 2 --
 .github/workflows/azure-deploy-streamx-medium.yaml | 2 --
 .github/workflows/azure-deploy-streamx-small.yaml  | 2 --
 .github/workflows/azure-deploy-streamx.yaml        | 7 -------
 mesh/deployment.yaml                               | 4 +---
 terraform/README.md                                | 1 -
 terraform/scripts/set-repo-secrets.sh              | 4 ----
 7 files changed, 1 insertion(+), 21 deletions(-)

diff --git a/.github/workflows/azure-deploy-streamx-large.yaml b/.github/workflows/azure-deploy-streamx-large.yaml
index 73052062..06c62ad4 100644
--- a/.github/workflows/azure-deploy-streamx-large.yaml
+++ b/.github/workflows/azure-deploy-streamx-large.yaml
@@ -23,8 +23,6 @@ jobs:
         ${{ secrets.SX_SEC_AUTH_PRIVATE_KEY }}
       BLUEPRINT_WEB_TLS_CERT:
         ${{ secrets.BLUEPRINT_WEB_TLS_CERT }}
-      BLUEPRINT_SEARCH_TLS_CERT:
-        ${{ secrets.BLUEPRINT_SEARCH_TLS_CERT }}
       REST_INGESTION_TLS_CERT:
         ${{ secrets.REST_INGESTION_TLS_CERT }}
       GRAFANA_TLS_CERT:
diff --git a/.github/workflows/azure-deploy-streamx-medium.yaml b/.github/workflows/azure-deploy-streamx-medium.yaml
index d862127c..81f8c6bb 100644
--- a/.github/workflows/azure-deploy-streamx-medium.yaml
+++ b/.github/workflows/azure-deploy-streamx-medium.yaml
@@ -23,8 +23,6 @@ jobs:
         ${{ secrets.SX_SEC_AUTH_PRIVATE_KEY }}
       BLUEPRINT_WEB_TLS_CERT:
         ${{ secrets.BLUEPRINT_WEB_TLS_CERT }}
-      BLUEPRINT_SEARCH_TLS_CERT:
-        ${{ secrets.BLUEPRINT_SEARCH_TLS_CERT }}
       REST_INGESTION_TLS_CERT:
         ${{ secrets.REST_INGESTION_TLS_CERT }}
       GRAFANA_TLS_CERT:
diff --git a/.github/workflows/azure-deploy-streamx-small.yaml b/.github/workflows/azure-deploy-streamx-small.yaml
index 7d819e4c..74b4e1b0 100644
--- a/.github/workflows/azure-deploy-streamx-small.yaml
+++ b/.github/workflows/azure-deploy-streamx-small.yaml
@@ -23,8 +23,6 @@ jobs:
         ${{ secrets.SX_SEC_AUTH_PRIVATE_KEY }}
       BLUEPRINT_WEB_TLS_CERT:
         ${{ secrets.BLUEPRINT_WEB_TLS_CERT }}
-      BLUEPRINT_SEARCH_TLS_CERT:
-        ${{ secrets.BLUEPRINT_SEARCH_TLS_CERT }}
       REST_INGESTION_TLS_CERT:
         ${{ secrets.REST_INGESTION_TLS_CERT }}
       GRAFANA_TLS_CERT:
diff --git a/.github/workflows/azure-deploy-streamx.yaml b/.github/workflows/azure-deploy-streamx.yaml
index dfb7d8d4..8b71953f 100644
--- a/.github/workflows/azure-deploy-streamx.yaml
+++ b/.github/workflows/azure-deploy-streamx.yaml
@@ -16,8 +16,6 @@ on:
         required: false
       BLUEPRINT_WEB_TLS_CERT:
         required: false
-      BLUEPRINT_SEARCH_TLS_CERT:
-        required: false
       REST_INGESTION_TLS_CERT:
         required: false
       GRAFANA_TLS_CERT:
@@ -71,7 +69,6 @@ jobs:
         env:
           SX_SEC_AUTH_PRIVATE_KEY: ${{ secrets.SX_SEC_AUTH_PRIVATE_KEY }}
           BLUEPRINT_WEB_TLS_CERT: ${{ secrets.BLUEPRINT_WEB_TLS_CERT }}
-          BLUEPRINT_SEARCH_TLS_CERT: ${{ secrets.BLUEPRINT_SEARCH_TLS_CERT }}
           REST_INGESTION_TLS_CERT: ${{ secrets.REST_INGESTION_TLS_CERT }}
           GRAFANA_TLS_CERT: ${{ secrets.GRAFANA_TLS_CERT }}
         run: |
@@ -86,10 +83,6 @@ jobs:
             echo "$BLUEPRINT_WEB_TLS_CERT" > gateway/tls/blueprint-web.crt.yaml
           fi
 
-          if [ -n "$BLUEPRINT_SEARCH_TLS_CERT" ]; then
-            echo "$BLUEPRINT_SEARCH_TLS_CERT" > gateway/tls/blueprint-search.crt.yaml
-          fi
-
           if [ -n "$REST_INGESTION_TLS_CERT" ]; then
             echo "$REST_INGESTION_TLS_CERT" > gateway/tls/rest-ingestion.crt.yaml
           fi
diff --git a/mesh/deployment.yaml b/mesh/deployment.yaml
index 38e2ba7b..1e162d6c 100644
--- a/mesh/deployment.yaml
+++ b/mesh/deployment.yaml
@@ -110,9 +110,7 @@ delivery:
       tls:
         - hosts:
             - ${streamx.accelerator.web.host}
-          secretName: blueprint-search.crt
-      annotations:
-        cert-manager.io/cluster-issuer: "letsencrypt-cert-cluster-issuer"
+          secretName: blueprint-web.crt
     probes:
       readiness:
         httpGet:
diff --git a/terraform/README.md b/terraform/README.md
index 222ff545..11799668 100644
--- a/terraform/README.md
+++ b/terraform/README.md
@@ -189,7 +189,6 @@ All commands in this document should be executed from the terraform directory.
          * secrets:
            *  `SX_SEC_AUTH_PRIVATE_KEY`
            *  `BLUEPRINT_WEB_TLS_CERT`
-           *  `BLUEPRINT_SEARCH_TLS_CERT`
            *  `REST_INGESTION_TLS_CERT`
            *  `GRAFANA_TLS_CERT`
            *  `TF_VAR_MONITORING_GRAFANA_ADMIN_PASSWORD`
diff --git a/terraform/scripts/set-repo-secrets.sh b/terraform/scripts/set-repo-secrets.sh
index 6ae4e472..b5167c18 100755
--- a/terraform/scripts/set-repo-secrets.sh
+++ b/terraform/scripts/set-repo-secrets.sh
@@ -19,10 +19,6 @@ if [ -f "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/blueprint-web.crt.yaml" ]; the
     gh secret set BLUEPRINT_WEB_TLS_CERT --body "$(cat "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/blueprint-web.crt.yaml")"
 fi
 
-if [ -f "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/blueprint-search.crt.yaml" ]; then
-    gh secret set BLUEPRINT_SEARCH_TLS_CERT --body "$(cat "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/blueprint-search.crt.yaml")"
-fi
-
 if [ -f "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/rest-ingestion.crt.yaml" ]; then
     gh secret set REST_INGESTION_TLS_CERT --body "$(cat "$SETUP_REPO_SCRIPT_DIR/../../gateway/tls/rest-ingestion.crt.yaml")"
 fi