diff --git a/charts/countly-web-ui-canary/templates/certificate.yaml b/charts/countly-web-ui-canary/templates/certificate.yaml
index e296052..c917004 100644
--- a/charts/countly-web-ui-canary/templates/certificate.yaml
+++ b/charts/countly-web-ui-canary/templates/certificate.yaml
@@ -13,8 +13,10 @@ metadata:
   labels:
     {{- include "canary.labels" . | nindent 4 }}
   annotations:
+    # Populates the Secret with a self-signed placeholder synchronously when
+    # the Certificate is created, so the master Ingress's TLS reference is
+    # satisfied immediately while the real LE cert is still issuing.
     cert-manager.io/issue-temporary-certificate: "true"
-    argocd.argoproj.io/sync-wave: "0"
 spec:
   secretName: {{ $fullname }}-tls
   dnsNames:
diff --git a/charts/countly-web-ui-canary/templates/ingress-master.yaml b/charts/countly-web-ui-canary/templates/ingress-master.yaml
index 295e952..2ff5ada 100644
--- a/charts/countly-web-ui-canary/templates/ingress-master.yaml
+++ b/charts/countly-web-ui-canary/templates/ingress-master.yaml
@@ -13,7 +13,6 @@ metadata:
     # ssl-redirect default flips to true when a tls: block is set; keep
     # plain HTTP open for the ACME challenge on issuance and renewal.
     nginx.org/ssl-redirect: "false"
-    argocd.argoproj.io/sync-wave: "1"
     {{- include "canary.ingressAnnotations" . | nindent 4 }}
 spec:
   ingressClassName: {{ .Values.ingress.className }}
diff --git a/charts/countly-web-ui-canary/templates/ingress-minion.yaml b/charts/countly-web-ui-canary/templates/ingress-minion.yaml
index b209e12..df61f58 100644
--- a/charts/countly-web-ui-canary/templates/ingress-minion.yaml
+++ b/charts/countly-web-ui-canary/templates/ingress-minion.yaml
@@ -20,7 +20,6 @@ metadata:
     # after the canary is torn down.
     nginx.org/proxy-hide-headers: "Strict-Transport-Security"
     {{- end }}
-    argocd.argoproj.io/sync-wave: "2"
     {{- include "canary.ingressAnnotations" . | nindent 4 }}
 spec:
   ingressClassName: {{ .Values.ingress.className }}