diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go
index af810570a..8664fe90d 100644
--- a/internal/ingress/controller/template/template.go
+++ b/internal/ingress/controller/template/template.go
@@ -474,6 +474,7 @@ func buildAuthProxySetHeaders(headers map[string]string) []string {
 	for name, value := range headers {
 		res = append(res, fmt.Sprintf("proxy_set_header '%v' '%v';", name, value))
 	}
+	sort.Strings(res)
 	return res
 }