diff --git a/components/ws-manager/pkg/manager/create.go b/components/ws-manager/pkg/manager/create.go
index 6c346f86dbd375..8c9f6c38c98ae5 100644
--- a/components/ws-manager/pkg/manager/create.go
+++ b/components/ws-manager/pkg/manager/create.go
@@ -873,7 +873,8 @@ func isGitpodInternalEnvVar(name string) bool {
 	return strings.HasPrefix(name, "GITPOD_") ||
 		strings.HasPrefix(name, "SUPERVISOR_") ||
 		strings.HasPrefix(name, "BOB_") ||
-		strings.HasPrefix(name, "THEIA_")
+		strings.HasPrefix(name, "THEIA_") ||
+		name == "NODE_EXTRA_CA_CERTS"
 }
 
 func isProtectedEnvVar(name string, sysEnvvars []*api.EnvironmentVariable) bool {