diff --git a/charts/py-app/templates/external-secrets.yaml b/charts/py-app/templates/external-secrets.yaml
index 9602b2b..e47658f 100644
--- a/charts/py-app/templates/external-secrets.yaml
+++ b/charts/py-app/templates/external-secrets.yaml
@@ -6,7 +6,6 @@ metadata:
   name: "{{include "py-app.name" $ }}-{{ $name }}"
   labels:
     {{- include "py-app.labels" $ | nindent 4 }}
-    external-secrets/managed: "true"  # ArgoCD will not manage the Secret that has this label
   annotations:
     argocd.argoproj.io/hook: PreSync,Sync
     argocd.argoproj.io/sync-wave: "-1"
@@ -17,6 +16,10 @@ spec:
     name: {{ $val.secretStoreName }}
   target:
     name: {{ $val.targetName }}
+    template:
+      metadata:
+        labels: 
+          external-secrets/managed: "true"  # ArgoCD will not manage the Secret that has this label
     creationPolicy: {{ default "Owner" $val.targetCreationPolicy }}
     deletionPolicy: {{ default "Retain" $val.targetDeletionPolicy }}
   dataFrom: {{ toYaml $val.dataFrom | nindent 4 }}