From 1645277cc28288b581b866a2b4f7afacb2f792c0 Mon Sep 17 00:00:00 2001 From: Olivia Song Date: Mon, 15 May 2023 10:37:28 -0700 Subject: [PATCH] check sslpolicy on both sdkLS and resLS (#3196) --- pkg/deploy/elbv2/listener_manager.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/deploy/elbv2/listener_manager.go b/pkg/deploy/elbv2/listener_manager.go index d756c6316..86967c94f 100644 --- a/pkg/deploy/elbv2/listener_manager.go +++ b/pkg/deploy/elbv2/listener_manager.go @@ -158,8 +158,8 @@ func (m *defaultListenerManager) updateSDKListenerWithSettings(ctx context.Conte func (m *defaultListenerManager) updateSDKListenerWithExtraCertificates(ctx context.Context, resLS *elbv2model.Listener, sdkLS ListenerWithTags, isNewSDKListener bool) error { // if TLS is not supported, we shouldn't update - if sdkLS.Listener.SslPolicy == nil { - m.logger.V(1).Info("SDK Listener doesn't have SSL Policy set, we skip updating extra certs for non-TLS listener.") + if resLS.Spec.SSLPolicy == nil && sdkLS.Listener.SslPolicy == nil { + m.logger.V(1).Info("Res and Sdk Listener don't have SSL Policy set, we skip updating extra certs for non-TLS listener.") return nil }