diff --git a/site/airship-seaworthy/secrets/certificates/ingress.yaml b/site/airship-seaworthy/secrets/certificates/ingress.yaml
index 3bd7a2eab..ce475d4e2 100644
--- a/site/airship-seaworthy/secrets/certificates/ingress.yaml
+++ b/site/airship-seaworthy/secrets/certificates/ingress.yaml
@@ -1,12 +1,15 @@
 ---
-# self-signed certifacte generated based on
-# https://libvirt.org/remote.html#Remote_certificates
+# Example manifest for ingress cert.
+# Shall be replaced with proper/valid set.
+# Self-signed certs are not supported.
 metadata:
   layeringDefinition:
     abstract: false
     layer: site
   name: ingress-crt
   schema: metadata/Document/v1
+  labels:
+    name: ingress-crt-site
   storagePolicy: cleartext
 schema: deckhand/Certificate/v1
 data: |
@@ -48,6 +51,8 @@ metadata:
     layer: site
   name: ingress-ca
   schema: metadata/Document/v1
+  labels:
+    name: ingress-ca-site
   storagePolicy: cleartext
 schema: deckhand/CertificateAuthority/v1
 data: |
@@ -83,6 +88,8 @@ metadata:
     layer: site
   name: ingress-key
   schema: metadata/Document/v1
+  labels:
+    name: ingress-key-site
   storagePolicy: cleartext
 schema: deckhand/CertificateKey/v1
 data: |