diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/controller-deployment.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/controller-deployment.yaml
index 0549d9fc..374f6bc7 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/controller-deployment.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/controller-deployment.yaml
@@ -11,6 +11,7 @@ metadata:
     {{ end }}
   annotations:
     configmap-sha256: {{ include (print $.Template.BasePath "/cms/controller-cm.yaml") . | sha256sum }}
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   selector:
     matchLabels:
diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
index 53479242..1f2171fe 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/name: jumpstarter-controller
   annotations:
     # https://argo-cd.readthedocs.io/en/stable/user-guide/resource_hooks/#hook-deletion-policies
-    argocd.argoproj.io/hook: PostSync
+    argocd.argoproj.io/hook: Sync
     argocd.argoproj.io/hook-delete-policy: HookSucceeded
   name: jumpstarter-secrets
   namespace: {{ $namespace }}