diff --git a/kubernetes/helm/docspell/templates/restserver/secret.yaml b/kubernetes/helm/docspell/templates/restserver/secret.yaml
index 854cc2fd..fde89134 100644
--- a/kubernetes/helm/docspell/templates/restserver/secret.yaml
+++ b/kubernetes/helm/docspell/templates/restserver/secret.yaml
@@ -16,6 +16,11 @@ stringData:
       {{- fail "When enabling the administration endpoint, a value for authentication has the supplied." -}}
       {{- end -}}
       {{- end -}}
+      {{- range $entry := .Values.docspell.server.openid -}}
+      {{- if and (not $entry.provider.userUrl) (not $entry.provider.signKey) -}}
+      {{- fail (printf "Failure for %s, if no userUrl is set a signKey has to be specified." $entry.provider.providerId) -}}
+      {{- end -}}
+      {{- end -}}
       {{- if eq .Values.docspell.server.backend.signup.mode "invite" -}}
       {{- if not .Values.docspell.server.backend.signup.newInvitePassword -}}
       {{- fail "Invite password has to be set, when using signup mode 'invite'." -}}