diff --git a/templates/nginx-ingress.go b/templates/nginx-ingress.go
index 7c4e0db6..5f2463c0 100644
--- a/templates/nginx-ingress.go
+++ b/templates/nginx-ingress.go
@@ -203,6 +203,9 @@ spec:
             - --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services
             - --udp-services-configmap=$(POD_NAMESPACE)/udp-services
             - --annotations-prefix=nginx.ingress.kubernetes.io
+          {{ range $k, $v := .ExtraArgs }}
+            - --{{ $k }}{{if ne $v "" }}={{ $v }}{{end}}
+          {{ end }}
           securityContext:
             capabilities:
                 drop:
@@ -210,9 +213,6 @@ spec:
                 add:
                 - NET_BIND_SERVICE
             runAsUser: 33
-          {{ range $k, $v := .ExtraArgs }}
-            - --{{ $k }}{{if ne $v "" }}={{ $v }}{{end}}
-          {{ end }}
           env:
             - name: POD_NAME
               valueFrom: