diff --git a/setup b/setup
index 60e9fde..80b29d3 100755
--- a/setup
+++ b/setup
@@ -15,11 +15,11 @@ kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "gitlab"
 kustomized="$(mktemp --suffix .unboundkind.yaml --tmpdir=/tmp/)"
 
 kubectl kustomize --enable-helm ./kind > "${kustomized}"
-kubectl apply -f "${kustomized}" || true
+kubectl apply -f "${kustomized}" --server-side || true
 kubectl wait --for=condition=Ready pods -n cert-manager -l app=cert-manager --timeout 5m
 kubectl wait --for=condition=Ready pods -n cert-manager -l app=cainjector --timeout 5m
 kubectl wait --for=condition=Ready pods -n cert-manager -l app=webhook --timeout 5m
 kubectl wait --for=condition=Ready pods --all -n external-secrets --timeout=5m
-kubectl apply -f "${kustomized}"
+kubectl apply -f "${kustomized}" --server-side
 
 kubectl wait --for=condition=Ready pods --all --timeout=5m