fix: added an extra label on ExternalSecrets

- this label will provide filtration for resource exclusion

charts/py-app/templates/external-secrets.yaml

@@ -6,14 +6,15 @@ metadata:
   name: "{{include "py-app.name" $ }}-{{ $name }}"
   labels:
     {{- include "py-app.labels" $ | nindent 4 }}
+    external-secrets/managed: "true"  # ArgoCD will not manage the Secret that has this label
   annotations:
     argocd.argoproj.io/hook: PreSync,Sync
     argocd.argoproj.io/sync-wave: "-1"
 spec:
-  refreshInterval: {{ default "1h" $val.refreshInterval }}           # rate SecretManager pulls GCPSM
+  refreshInterval: {{ default "1h" $val.refreshInterval }}
   secretStoreRef:
     kind: ClusterSecretStore
-    name: {{ $val.secretStoreName }} # name of the SecretStore (or kind specified)
+    name: {{ $val.secretStoreName }}
   target:
     name: {{ $val.targetName }}
     creationPolicy: {{ default "Owner" $val.targetCreationPolicy }}