diff --git a/components/ws-manager/pkg/manager/create.go b/components/ws-manager/pkg/manager/create.go
index 7b63c517f5232b..847f990c52b95d 100644
--- a/components/ws-manager/pkg/manager/create.go
+++ b/components/ws-manager/pkg/manager/create.go
@@ -859,7 +859,8 @@ func isGitpodInternalEnvVar(name string) bool {
 	return strings.HasPrefix(name, "GITPOD_") ||
 		strings.HasPrefix(name, "SUPERVISOR_") ||
 		strings.HasPrefix(name, "BOB_") ||
-		strings.HasPrefix(name, "THEIA_")
+		strings.HasPrefix(name, "THEIA_") ||
+		name == "NODE_EXTRA_CA_CERTS"
 }
 
 func isProtectedEnvVar(name string) bool {