diff --git a/gpdev/ingress.yaml b/gpdev/ingress.yaml
index 80a1acc..1f74689 100644
--- a/gpdev/ingress.yaml
+++ b/gpdev/ingress.yaml
@@ -6,7 +6,12 @@ metadata:
     kubernetes.io/ingress.class: "nginx-ingress"
     nginx.ingress.kubernetes.io/proxy-body-size: "10m"
     nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
-    nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/auth-tls-secret: "gp2504/ca-secret"
+    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+    nginx.ingress.kubernetes.io/auth-tls-verify-depth: "2"
+    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
 spec:
   rules:
     - host: updater.gpdev.qq.com