diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2
index 7968fa052e9fbf063870ce773b296d665b8033e3..72c52cab735acb0b57f1695569e38eb17d96aa31 100644
--- a/ansible/roles/haproxy/templates/haproxy.cfg.j2
+++ b/ansible/roles/haproxy/templates/haproxy.cfg.j2
@@ -388,7 +388,9 @@ listen kibana
 {% if haproxy_enable_external_vip | bool %}
 
 listen kibana_external
-  bind {{ kolla_external_vip_address }}:{{ kibana_server_port }}
+  bind {{ kolla_external_vip_address }}:{{ kibana_server_port }} {{ tls_bind_info }}
+  http-request del-header X-Forwarded-Proto
+  http-request set-header X-Forwarded-Proto https if { ssl_fc }
   acl auth_acl http_auth(kibanauser)
   http-request auth realm basicauth unless auth_acl
 {% for host in groups['kibana'] %}