diff --git a/controllers/dnspolicy_dnsrecords.go b/controllers/dnspolicy_dnsrecords.go
index 6d38fedfe..6c542505a 100644
--- a/controllers/dnspolicy_dnsrecords.go
+++ b/controllers/dnspolicy_dnsrecords.go
@@ -137,11 +137,12 @@ func (r *DNSPolicyReconciler) desiredDNSRecord(gateway *gatewayapiv1.Gateway, cl
 
 	if dnsPolicy.Spec.HealthCheck != nil {
 		healthCheckSpec = &kuadrantdnsv1alpha1.HealthCheckSpec{
-			Path:             dnsPolicy.Spec.HealthCheck.Path,
-			Port:             dnsPolicy.Spec.HealthCheck.Port,
-			Protocol:         dnsPolicy.Spec.HealthCheck.Protocol,
-			FailureThreshold: dnsPolicy.Spec.HealthCheck.FailureThreshold,
-			Interval:         dnsPolicy.Spec.HealthCheck.Interval,
+			Path:                 dnsPolicy.Spec.HealthCheck.Path,
+			Port:                 dnsPolicy.Spec.HealthCheck.Port,
+			Protocol:             dnsPolicy.Spec.HealthCheck.Protocol,
+			FailureThreshold:     dnsPolicy.Spec.HealthCheck.FailureThreshold,
+			Interval:             dnsPolicy.Spec.HealthCheck.Interval,
+			AdditionalHeadersRef: dnsPolicy.Spec.HealthCheck.AdditionalHeadersRef,
 		}
 	}
 	dnsRecord := &kuadrantdnsv1alpha1.DNSRecord{