diff --git a/flux2/core/base/single-sign-on/single-sign-on-values-configmap.yaml b/flux2/core/base/single-sign-on/single-sign-on-values-configmap.yaml
index 251e5af0e44ce675bee5ce2d45709007af03b645..3238f62f623c02660a006eeaf812a6bf1563d41a 100644
--- a/flux2/core/base/single-sign-on/single-sign-on-values-configmap.yaml
+++ b/flux2/core/base/single-sign-on/single-sign-on-values-configmap.yaml
@@ -48,16 +48,20 @@ data:
             login: "https://sso.${domain}/login"
             consent: "https://sso.${domain}/consent"
           secrets:
-            system: "${hydra_system_secret}"
+            system:
+              - "${hydra_system_secret}"
           dsn: "memory"
       ingress:
         public:
           enabled: true
+          className: ""
           annotations:
             kubernetes.io/tls-acme: "true"
           hosts:
             - host: *SSO_HOST
-              paths: ["/"]
+              paths:
+                - path: /
+                  pathType: ImplementationSpecific
           tls:
             - hosts:
               - *SSO_HOST
diff --git a/flux2/infrastructure/sources/single-sign-on.yaml b/flux2/infrastructure/sources/single-sign-on.yaml
index 6f51cfcbb5617dcbe16989628441da46500cf33f..a418f77a05388da3a8af9825d18b55a1b8e15b65 100644
--- a/flux2/infrastructure/sources/single-sign-on.yaml
+++ b/flux2/infrastructure/sources/single-sign-on.yaml
@@ -14,6 +14,4 @@ spec:
   # For all available options, see:
   # https://toolkit.fluxcd.io/components/source/api/#source.toolkit.fluxcd.io/v1beta1.GitRepositoryRef
   ref:
-    # tag: 0.2.11
-    # FIXME: Temporarily use the branch with new image URLs
-    branch: 93-0.2.11
+    tag: 0.4.1