remove need for internal k8s service hosts in provided cert/key pair

pkg/kustomize/secrets.go

@@ -167,12 +167,8 @@ func EnsureTLSFor(ctx *quaycontext.QuayRegistryContext, quay *v1.QuayRegistry, t
 
 	routeFieldGroup := fieldGroup.(*hostsettings.HostSettingsFieldGroup)
 
-	svc := quay.GetName() + "-quay-app"
 	hosts := []string{
 		routeFieldGroup.ServerHostname,
-		svc,
-		strings.Join([]string{svc, quay.GetNamespace(), "svc"}, "."),
-		strings.Join([]string{svc, quay.GetNamespace(), "svc", "cluster", "local"}, "."),
 	}
 
 	// Only add BUILDMAN_HOSTNAME as host if provided.
@@ -182,7 +178,8 @@ func EnsureTLSFor(ctx *quaycontext.QuayRegistryContext, quay *v1.QuayRegistry, t
 
 	for _, host := range hosts {
 		if valid, _ := shared.ValidateCertPairWithHostname(tlsCert, tlsKey, host, fieldGroupNameFor("route")); !valid {
-			fmt.Printf("Host %s not valid for certificates provided. Generating self-signed certs", host) // change to logger?
+			fmt.Printf("Host %s not valid for certificates provided. Generating self-signed certs", host)
+
 			return cert.GenerateSelfSignedCertKey(routeFieldGroup.ServerHostname, []net.IP{}, hosts)
 		}
 	}