diff --git a/roles/ocp4_workload_cert_manager/templates/webhook_acme_bifrost.yaml.j2 b/roles/ocp4_workload_cert_manager/templates/webhook_acme_bifrost.yaml.j2
index 194d80a..35f1d4d 100644
--- a/roles/ocp4_workload_cert_manager/templates/webhook_acme_bifrost.yaml.j2
+++ b/roles/ocp4_workload_cert_manager/templates/webhook_acme_bifrost.yaml.j2
@@ -150,11 +150,13 @@ spec:
         env:
         - name: GROUP_NAME
           value: "bifrost.demo.redhat.com"
+{% if ocp4_workload_cert_manager_cloud_provider == "ddns" %}
         - name: TSIG_SECRET
           valueFrom:
             secretKeyRef:
               name: cert-manager-tsig-creds
               key: tsig-secret
+{% endif %}
         ports:
         - name: https
           containerPort: 8443