No mutual TLS, but client is still present certificate

We are running Traefik as an Ingress Controller in our Kubernetes cluster.
We've got a HTTPS entrypoint, that's configured to handle mTLS if the client presents a certificate.
However, our end users are using smartcards for authentication, which contains a client certificate.
It seems the clients will always present these certificates.
This causes a pop up for users to present their certificate. If they cancel, they continue without issues (as no mTLS connection is required)
I've tried creating a second endpoint under port 8443 with explicit configuration to discard the certificates, in the hopes that this would prevent this, but no difference.
Any idea why this is happening and how to prevent it?

Misconfiguration on our end. Service was inccorect.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.