diff --git a/.werft/util/certs.ts b/.werft/util/certs.ts
index c3b52eb4a406b9..14bc475aec39a6 100644
--- a/.werft/util/certs.ts
+++ b/.werft/util/certs.ts
@@ -96,6 +96,7 @@ function copyCachedSecret(werft: Werft, params: InstallCertificateParams, slice:
     | yq d - 'metadata.uid' \
     | yq d - 'metadata.resourceVersion' \
     | yq d - 'metadata.creationTimestamp' \
+    | yq d - 'metadata.ownerReferences' \
     | sed 's/${params.certName}/${params.certSecretName}/g' \
     | kubectl --kubeconfig ${params.destinationKubeconfig} apply --namespace=${params.destinationNamespace} -f -`