diff --git a/stack_orchestrator/deploy/k8s/deploy_k8s.py b/stack_orchestrator/deploy/k8s/deploy_k8s.py
index 53cbd7d6..5781cd26 100644
--- a/stack_orchestrator/deploy/k8s/deploy_k8s.py
+++ b/stack_orchestrator/deploy/k8s/deploy_k8s.py
@@ -222,14 +222,14 @@ class K8sDeployer(Deployer):
         self._create_volume_data()
         self._create_deployment()
 
-        use_tls = not self.is_kind()
         http_proxy_info = self.cluster_info.spec.get_http_proxy()
-        certificate = self._find_certificate_for_host_name(http_proxy_info[0]["host-name"]) if http_proxy_info and use_tls else None
+        # Note: at present we don't support tls for kind (and enabling tls causes errors)
+        use_tls = http_proxy_info and not self.is_kind()
+        certificate = self._find_certificate_for_host_name(http_proxy_info[0]["host-name"]) if use_tls else None
         if opts.o.debug:
             if certificate:
                 print(f"Using existing certificate: {certificate}")
 
-        # Note: at present we don't support tls for kind (and enabling tls causes errors)
         ingress: client.V1Ingress = self.cluster_info.get_ingress(use_tls=use_tls, certificate=certificate)
         if ingress:
             if opts.o.debug: