diff --git a/authentik/providers/proxy/controllers/k8s/ingress.py b/authentik/providers/proxy/controllers/k8s/ingress.py index a8eb967d0..3e1d183e1 100644 --- a/authentik/providers/proxy/controllers/k8s/ingress.py +++ b/authentik/providers/proxy/controllers/k8s/ingress.py @@ -55,7 +55,10 @@ class IngressReconciler(KubernetesObjectReconciler[V1Ingress]): proxy_provider: ProxyProvider external_host_name = urlparse(proxy_provider.external_host) expected_hosts.append(external_host_name.hostname) - if external_host_name.scheme == "https": + if ( + external_host_name.scheme == "https" + and self.controller.outpost.config.kubernetes_ingress_secret_name + ): expected_hosts_tls.append(external_host_name.hostname) expected_hosts.sort() expected_hosts_tls.sort() @@ -115,7 +118,10 @@ class IngressReconciler(KubernetesObjectReconciler[V1Ingress]): ): proxy_provider: ProxyProvider external_host_name = urlparse(proxy_provider.external_host) - if external_host_name.scheme == "https": + if ( + external_host_name.scheme == "https" + and self.controller.outpost.config.kubernetes_ingress_secret_name + ): tls_hosts.append(external_host_name.hostname) if proxy_provider.mode in [ ProxyMode.FORWARD_SINGLE,