diff --git a/pkg/controller/certificates/csr.go b/pkg/controller/certificates/csr.go
index 9bcdf2e4680..c12c1dfa651 100644
--- a/pkg/controller/certificates/csr.go
+++ b/pkg/controller/certificates/csr.go
@@ -63,6 +63,7 @@ func getDefaultCsrSignerName() string {
 	defaultCsrSignerNameOnce.Do(func() {
 		if os.Getenv(CSRSignerName) != "" {
 			defaultCsrSignerName = os.Getenv(CSRSignerName)
+			return
 		}
 		defaultCsrSignerName = certificatesV1.KubeletServingSignerName
 	})