diff --git a/internal/controller/cluster_controller.go b/internal/controller/cluster_controller.go
index b263531..dde9ed3 100644
--- a/internal/controller/cluster_controller.go
+++ b/internal/controller/cluster_controller.go
@@ -42,6 +42,7 @@ import (
 	"k8s.io/apimachinery/pkg/runtime"
 	"k8s.io/apimachinery/pkg/types"
 	"k8s.io/client-go/util/workqueue"
+	"k8s.io/utils/ptr"
 	ctrl "sigs.k8s.io/controller-runtime"
 	"sigs.k8s.io/controller-runtime/pkg/client"
 	"sigs.k8s.io/controller-runtime/pkg/controller"
@@ -418,7 +419,7 @@ func (r *ClusterReconciler) reconcileDefaultService(ctx context.Context, zitadel
 			{
 				Name:        deployment.ZitadelName,
 				Port:        deployment.ZitadelPort,
-				AppProtocol: "h2c",
+				AppProtocol: ptr.To("h2c"),
 			},
 		},
 	}