diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml
index 00df9905..751680e1 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role.yaml
@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: jumpstarter-manager-role
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
 rules:
 - apiGroups:
   - ""
diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml
index 47bc04db..71d864b0 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/role_binding.yaml
@@ -3,8 +3,9 @@ kind: ClusterRoleBinding
 metadata:
   labels:
     app.kubernetes.io/name: jumpstarter-router
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
   name: jumpstarter-manager-rolebinding
-  
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml
index 59023c30..5359726a 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/rbac/service_account.yaml
@@ -3,5 +3,7 @@ kind: ServiceAccount
 metadata:
   labels:
     app.kubernetes.io/name: jumpstarter-router
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
   name: controller-manager
   namespace: {{ default .Release.Namespace .Values.namespace }}
diff --git a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
index 1f2171fe..309d16fc 100644
--- a/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
+++ b/deploy/helm/jumpstarter/charts/jumpstarter-controller/templates/secrets-job.yaml
@@ -9,6 +9,7 @@ metadata:
     # https://argo-cd.readthedocs.io/en/stable/user-guide/resource_hooks/#hook-deletion-policies
     argocd.argoproj.io/hook: Sync
     argocd.argoproj.io/hook-delete-policy: HookSucceeded
+    argocd.argoproj.io/sync-wave: "-1"
   name: jumpstarter-secrets
   namespace: {{ $namespace }}
 spec: