diff --git a/operator/zitadel/kinds/iam/zitadel/configuration/literals.go b/operator/zitadel/kinds/iam/zitadel/configuration/literals.go
index c2bc720197..a36f357437 100644
--- a/operator/zitadel/kinds/iam/zitadel/configuration/literals.go
+++ b/operator/zitadel/kinds/iam/zitadel/configuration/literals.go
@@ -183,6 +183,8 @@ func literalsSecretVars(k8sClient kubernetes.ClientInt, desired *Configuration)
 				literalsSecretVars["ZITADEL_TWILIO_SID"] = value
 			}
 		}
+		literalsSecretVars["ZITADEL_ASSET_STORAGE_ACCESS_KEY_ID"] = ""
+		literalsSecretVars["ZITADEL_ASSET_STORAGE_SECRET_ACCESS_KEY"] = ""
 		if desired.AssetStorage != nil {
 			as := desired.AssetStorage
 			if as.AccessKeyID != nil || as.ExistingAccessKeyID != nil {
@@ -200,6 +202,8 @@ func literalsSecretVars(k8sClient kubernetes.ClientInt, desired *Configuration)
 				literalsSecretVars["ZITADEL_ASSET_STORAGE_SECRET_ACCESS_KEY"] = value
 			}
 		}
+		literalsSecretVars["HTTP_PROXY"] = ""
+		literalsSecretVars["HTTPS_PROXY"] = ""
 		if desired.Proxy != nil {
 			if desired.Proxy.HTTP != nil || desired.Proxy.ExistingHTTP != nil {
 				value, err := read.GetSecretValue(k8sClient, desired.Proxy.HTTP, desired.Proxy.ExistingHTTP)
diff --git a/operator/zitadel/kinds/iam/zitadel/deployment/container.go b/operator/zitadel/kinds/iam/zitadel/deployment/container.go
index f738526234..ed08c56929 100644
--- a/operator/zitadel/kinds/iam/zitadel/deployment/container.go
+++ b/operator/zitadel/kinds/iam/zitadel/deployment/container.go
@@ -79,6 +79,20 @@ func GetContainer(
 					Key:                  "ZITADEL_ASSET_STORAGE_SECRET_ACCESS_KEY",
 				},
 			}},
+		{Name: "HTTP_PROXY",
+			ValueFrom: &corev1.EnvVarSource{
+				SecretKeyRef: &corev1.SecretKeySelector{
+					LocalObjectReference: corev1.LocalObjectReference{Name: secretVarsName},
+					Key:                  "HTTP_PROXY",
+				},
+			}},
+		{Name: "HTTPS_PROXY",
+			ValueFrom: &corev1.EnvVarSource{
+				SecretKeyRef: &corev1.SecretKeySelector{
+					LocalObjectReference: corev1.LocalObjectReference{Name: secretVarsName},
+					Key:                  "HTTPS_PROXY",
+				},
+			}},
 		{Name: "SENTRY_DSN",
 			ValueFrom: &corev1.EnvVarSource{
 				SecretKeyRef: &corev1.SecretKeySelector{
diff --git a/operator/zitadel/kinds/iam/zitadel/deployment/container_test.go b/operator/zitadel/kinds/iam/zitadel/deployment/container_test.go
index 3265e6175f..90370f2f08 100644
--- a/operator/zitadel/kinds/iam/zitadel/deployment/container_test.go
+++ b/operator/zitadel/kinds/iam/zitadel/deployment/container_test.go
@@ -86,6 +86,20 @@ func TestDeployment_GetContainer(t *testing.T) {
 					Key:                  "ZITADEL_ASSET_STORAGE_SECRET_ACCESS_KEY",
 				},
 			}},
+		{Name: "HTTP_PROXY",
+			ValueFrom: &corev1.EnvVarSource{
+				SecretKeyRef: &corev1.SecretKeySelector{
+					LocalObjectReference: corev1.LocalObjectReference{Name: secretVarsName},
+					Key:                  "HTTP_PROXY",
+				},
+			}},
+		{Name: "HTTPS_PROXY",
+			ValueFrom: &corev1.EnvVarSource{
+				SecretKeyRef: &corev1.SecretKeySelector{
+					LocalObjectReference: corev1.LocalObjectReference{Name: secretVarsName},
+					Key:                  "HTTPS_PROXY",
+				},
+			}},
 		{Name: "SENTRY_DSN",
 			ValueFrom: &corev1.EnvVarSource{
 				SecretKeyRef: &corev1.SecretKeySelector{