diff --git a/pkg/controllers/ingress/ingress.go b/pkg/controllers/ingress/ingress.go
index ee527fe9..f397d8a6 100644
--- a/pkg/controllers/ingress/ingress.go
+++ b/pkg/controllers/ingress/ingress.go
@@ -546,7 +546,7 @@ func syncBackendSet(ingress *networkingv1.Ingress, lbID string, backendSetName s
 	if sslConfig != nil {
 		if bs.SslConfiguration == nil || !reflect.DeepEqual(bs.SslConfiguration.TrustedCertificateAuthorityIds, sslConfig.TrustedCertificateAuthorityIds) {
 			klog.Infof("SSL config for backend set %s update is %s", *bs.Name, util.PrettyPrint(sslConfig))
-			needsUpdate = true
+			needsUpdate = false
 		}
 	}