diff --git a/apps/networking/ingress-nginx/admission-webhooks/cr.yaml b/apps/networking/ingress-nginx/admission-webhooks/cr.yaml
index a5919bb58..029e81067 100644
--- a/apps/networking/ingress-nginx/admission-webhooks/cr.yaml
+++ b/apps/networking/ingress-nginx/admission-webhooks/cr.yaml
@@ -4,6 +4,7 @@ kind: ClusterRole
 metadata:
   name: ingress-nginx-admission
   annotations:
+    argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-1"
     argocd.argoproj.io/sync-options: Replace=true
   labels:
diff --git a/apps/networking/ingress-nginx/admission-webhooks/crb.yaml b/apps/networking/ingress-nginx/admission-webhooks/crb.yaml
index 87e9ddb7c..4441b91e1 100644
--- a/apps/networking/ingress-nginx/admission-webhooks/crb.yaml
+++ b/apps/networking/ingress-nginx/admission-webhooks/crb.yaml
@@ -4,6 +4,7 @@ kind: ClusterRoleBinding
 metadata:
   name: ingress-nginx-admission
   annotations:
+    argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-1"
     argocd.argoproj.io/sync-options: Replace=true
   labels:
diff --git a/apps/networking/ingress-nginx/admission-webhooks/rb.yaml b/apps/networking/ingress-nginx/admission-webhooks/rb.yaml
index d82bdae0c..48e1f83c4 100644
--- a/apps/networking/ingress-nginx/admission-webhooks/rb.yaml
+++ b/apps/networking/ingress-nginx/admission-webhooks/rb.yaml
@@ -4,6 +4,7 @@ kind: RoleBinding
 metadata:
   name: ingress-nginx-admission
   annotations:
+    argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-1"
     argocd.argoproj.io/sync-options: Replace=true
   labels:
diff --git a/apps/networking/ingress-nginx/admission-webhooks/role.yaml b/apps/networking/ingress-nginx/admission-webhooks/role.yaml
index a3afade1a..139e7deda 100644
--- a/apps/networking/ingress-nginx/admission-webhooks/role.yaml
+++ b/apps/networking/ingress-nginx/admission-webhooks/role.yaml
@@ -4,6 +4,7 @@ kind: Role
 metadata:
   name: ingress-nginx-admission
   annotations:
+    argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-1"
     argocd.argoproj.io/sync-options: Replace=true
   labels:
diff --git a/apps/networking/ingress-nginx/admission-webhooks/sa.yaml b/apps/networking/ingress-nginx/admission-webhooks/sa.yaml
index de62796c5..3d23653b3 100644
--- a/apps/networking/ingress-nginx/admission-webhooks/sa.yaml
+++ b/apps/networking/ingress-nginx/admission-webhooks/sa.yaml
@@ -4,6 +4,7 @@ kind: ServiceAccount
 metadata:
   name: ingress-nginx-admission
   annotations:
+    argocd.argoproj.io/hook: PreSync
     argocd.argoproj.io/sync-wave: "-1"
     argocd.argoproj.io/sync-options: Replace=true
   labels: