diff --git a/dataplane-template/externalsecret-tls.yaml b/dataplane-template/externalsecret-tls.yaml
index a4f408c..3d5992b 100644
--- a/dataplane-template/externalsecret-tls.yaml
+++ b/dataplane-template/externalsecret-tls.yaml
@@ -12,6 +12,9 @@ spec:
     name: ${NAME}-tls
     template:
       type: kubernetes.io/tls
+      metadata:
+        labels:
+          konghq.com/secret: "true"
   data:
     - secretKey: tls.crt
       remoteRef: