diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go
index 181f9fb0a..6cec582da 100644
--- a/internal/ingress/controller/template/template.go
+++ b/internal/ingress/controller/template/template.go
@@ -472,6 +472,7 @@ func buildAuthProxySetHeaders(headers map[string]string) []string {
 	for name, value := range headers {
 		res = append(res, fmt.Sprintf("proxy_set_header '%v' '%v';", name, value))
 	}
+	sort.Strings(res)
 	return res
 }