Currently serverless operator assumes that "router-certs-default" secret is deployed in "openshift-ingress" as:

• openshift-knative-operator/pkg/serving/kourier.go

          if ks.GetSpec().GetConfig()[networkCMName][InternalEncryptionKey] != "" {
                  envVars = append(envVars,
                          corev1.EnvVar{Name: "CERTS_SECRET_NAMESPACE", Value: "openshift-ingress"},
                          corev1.EnvVar{Name: "CERTS_SECRET_NAME", Value: "router-certs-default"})
          }
  

But the secret name is configurable as:

apiVersion: operator.openshift.io/v1
kind: IngressController
metadata:
  name: default
  namespace: openshift-ingress-operator
spec:
  replicas: 2
  defaultCertificate:
    name: {{ cluster_name }}

So,

• we need to allow users to change the secret name.
  OR
• get the secret name via IngressController CR by reading it.