From a13ea0754ef4db58c70196d5f1edc91a6c858271 Mon Sep 17 00:00:00 2001
From: dovholuknf <46322585+dovholuknf@users.noreply.github.com>
Date: Wed, 5 Jul 2023 19:55:14 -0400
Subject: [PATCH] apply alt server certs to root identity section as well

---
 ziti/cmd/config_templates/controller.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ziti/cmd/config_templates/controller.yml b/ziti/cmd/config_templates/controller.yml
index ad67ac75d..b909a7823 100644
--- a/ziti/cmd/config_templates/controller.yml
+++ b/ziti/cmd/config_templates/controller.yml
@@ -13,7 +13,10 @@ identity:
   cert:                 "{{ .Controller.Identity.Cert }}"
   server_cert:          "{{ .Controller.Identity.ServerCert }}"
   key:                  "{{ .Controller.Identity.Key }}"
-  ca:                   "{{ .Controller.Identity.Ca }}"
+  ca:                   "{{ .Controller.Identity.Ca }}"{{ if .Controller.Web.Identity.HasAltCerts }}
+  alt_server_certs:
+    - server_cert: "{{ .Controller.Web.Identity.AltServerCert }}"
+      server_key: "{{ .Controller.Web.Identity.AltServerKey }}"{{ end }}
 
 # Network Configuration
 #