diff --git a/apps/keycloak/base/keycloak-ingress.yaml b/apps/keycloak/base/keycloak-ingress.yaml
index 29d61a6..e54f6d2 100644
--- a/apps/keycloak/base/keycloak-ingress.yaml
+++ b/apps/keycloak/base/keycloak-ingress.yaml
@@ -1,6 +1,8 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-issuer
   name: keycloak
 spec:
   tls: