As per https://github.com/knative/serving/pull/13854#discussion_r1164328392 Currently we decod only one CA in the top of the secret. https://github.com/knative/serving/blob/018c7f81957bbe5d152d6a0b5569c12e2baab0bd/pkg/activator/certificate/cache.go#L96 It should be fine at this moment, but it should decode all CAs in the secret especially if we support BYO CA cert.
Activity