diff --git a/charts/kubezero-cert-manager/Chart.yaml b/charts/kubezero-cert-manager/Chart.yaml
index 855585ae..c21b7f4a 100644
--- a/charts/kubezero-cert-manager/Chart.yaml
+++ b/charts/kubezero-cert-manager/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-cert-manager
 description: KubeZero Umbrella Chart for cert-manager
 type: application
-version: 0.3.4
+version: 0.3.5
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
 keywords:
diff --git a/charts/kubezero-cert-manager/templates/cluster-ca.yaml b/charts/kubezero-cert-manager/templates/cluster-ca.yaml
index f5f70b0f..bd2f45a9 100644
--- a/charts/kubezero-cert-manager/templates/cluster-ca.yaml
+++ b/charts/kubezero-cert-manager/templates/cluster-ca.yaml
@@ -2,6 +2,7 @@
 {{- if .Values.localCA.selfsigning }}
 
 # KubeZero / Local cluster CA
+# The resources are serialized via waves in Argo
 apiVersion: cert-manager.io/v1alpha2
 kind: Issuer
 metadata:
@@ -9,6 +10,8 @@ metadata:
   namespace: kube-system
   labels:
 {{ include "kubezero-lib.labels" . | indent 4 }}
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
 spec:
   selfSigned: {}
 ---
@@ -19,6 +22,8 @@ metadata:
   namespace: kube-system
   labels:
 {{ include "kubezero-lib.labels" . | indent 4 }}
+  annotations:
+    argocd.argoproj.io/sync-wave: "11"
 spec:
   secretName: kubezero-ca-tls
   commonName: "kubezero-local-ca"
@@ -50,6 +55,8 @@ metadata:
   namespace: kube-system
   labels:
 {{ include "kubezero-lib.labels" . | indent 4 }}
+  annotations:
+    argocd.argoproj.io/sync-wave: "12"
 spec:
   ca:
     secretName: kubezero-ca-tls