From ee95a472687549f7b753a15d4e083462286a373c Mon Sep 17 00:00:00 2001
From: Dev Jadeja <krushndevsinh@simformsolutions.com>
Date: Thu, 27 Mar 2025 16:13:11 +0530
Subject: [PATCH] fix: added an extra label on ExternalSecrets

- this label will provide filtration for resource exclusion
---
 charts/py-app/templates/external-secrets.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/charts/py-app/templates/external-secrets.yaml b/charts/py-app/templates/external-secrets.yaml
index 4db2558..9602b2b 100644
--- a/charts/py-app/templates/external-secrets.yaml
+++ b/charts/py-app/templates/external-secrets.yaml
@@ -6,14 +6,15 @@ metadata:
   name: "{{include "py-app.name" $ }}-{{ $name }}"
   labels:
     {{- include "py-app.labels" $ | nindent 4 }}
+    external-secrets/managed: "true"  # ArgoCD will not manage the Secret that has this label
   annotations:
     argocd.argoproj.io/hook: PreSync,Sync
     argocd.argoproj.io/sync-wave: "-1"
 spec:
-  refreshInterval: {{ default "1h" $val.refreshInterval }}           # rate SecretManager pulls GCPSM
+  refreshInterval: {{ default "1h" $val.refreshInterval }}
   secretStoreRef:
     kind: ClusterSecretStore
-    name: {{ $val.secretStoreName }} # name of the SecretStore (or kind specified)
+    name: {{ $val.secretStoreName }}
   target:
     name: {{ $val.targetName }}
     creationPolicy: {{ default "Owner" $val.targetCreationPolicy }}