diff --git a/platform/tekton-pipelines/ingress.yaml b/platform/tekton-pipelines/ingress.yaml
index 93abc135..ee5b246d 100644
--- a/platform/tekton-pipelines/ingress.yaml
+++ b/platform/tekton-pipelines/ingress.yaml
@@ -5,6 +5,9 @@ metadata:
   namespace: tekton-pipelines
   labels:
     cert-manager.io/cluster-issuer: "selfsigned-cluster-issuer"
+  annotations:
+    nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://$host/oauth2/start?rd=$escaped_request_uri"
 spec:
   rules:
   - host: tekton.khuedoan.com