diff --git a/helm/argo-stack/overlays/ingress-authz-overlay/templates/ingress-authz.yaml b/helm/argo-stack/overlays/ingress-authz-overlay/templates/ingress-authz.yaml
index a056aef2..66e3cb57 100644
--- a/helm/argo-stack/overlays/ingress-authz-overlay/templates/ingress-authz.yaml
+++ b/helm/argo-stack/overlays/ingress-authz-overlay/templates/ingress-authz.yaml
@@ -40,7 +40,7 @@ metadata:
     nginx.ingress.kubernetes.io/rewrite-target: {{ $route.rewriteTarget | default "/$2" }}
     {{- end }}
 spec:
-  ingressClassName: {{ $config.ingressClassName | default "nginx" }}
+  ingressClassName: {{ $config.ingressClassName | default "nginx" | quote }}
   {{- if $config.tls.enabled }}
   tls:
     - hosts:
diff --git a/helm/argo-stack/templates/events/eventsource-github-from-repo-registrations.yaml b/helm/argo-stack/templates/events/eventsource-github-from-repo-registrations.yaml
index 973b9276..fd47b9f1 100644
--- a/helm/argo-stack/templates/events/eventsource-github-from-repo-registrations.yaml
+++ b/helm/argo-stack/templates/events/eventsource-github-from-repo-registrations.yaml
@@ -78,9 +78,8 @@ metadata:
   namespace: {{ .Values.events.namespace | default "argo-events" }}
   labels:
     source: repo-registration
-  annotations:
-    kubernetes.io/ingress.class: {{ .Values.events.github.webhook.ingress.className | default "nginx" | quote }}
 spec:
+  ingressClassName: {{ .Values.events.github.webhook.ingress.className | default "nginx" | quote }}
   rules:
   {{- range $h := (.Values.events.github.webhook.ingress.hosts | default list) }}
     - host: {{ $h }}