diff --git a/infra/crossplane/templates/argocd.yaml b/infra/crossplane/templates/argocd.yaml
index ddf4dd8..95275e6 100644
--- a/infra/crossplane/templates/argocd.yaml
+++ b/infra/crossplane/templates/argocd.yaml
@@ -5,6 +5,23 @@ metadata:
 spec:
   package: xpkg.upbound.io/crossplane-contrib/provider-argocd:v0.10.1
 
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: argocd-secret
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: argocd-secret
+  data:
+    - secretKey: authToken
+      remoteRef:
+        key: kv/argocd/provider-argocd
+        property: token
+
 ---
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
@@ -22,41 +39,6 @@ spec:
         key: kv/argocd/prd
         property: kubeconfig
 
----
-apiVersion: cluster.argocd.crossplane.io/v1alpha1
-kind: Cluster
-metadata:
-  name: prd-cluster
-  labels:
-    purpose: prd
-spec:
-  forProvider:
-    name: prd-cluster
-    config:
-      kubeconfigSecretRef:
-        name: prod-kubeconfig
-        key: kubeconfig
-        namespace: crossplane
-  providerConfigRef:
-    name: argocd-provider
-
----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: argocd-crossplane-secret
-spec:
-  secretStoreRef:
-    name: vault
-    kind: ClusterSecretStore
-  target:
-    name: argocd-crossplane-secret
-  data:
-    - secretKey: authToken
-      remoteRef:
-        key: kv/argocd/provider-argocd
-        property: token
-
 ---
 apiVersion: argocd.crossplane.io/v1alpha1
 kind: ProviderConfig
@@ -70,5 +52,23 @@ spec:
     source: Secret
     secretRef:
       namespace: crossplane
-      name: argocd-crossplane-secret
+      name: argocd-secret
       key: authToken
+
+---
+apiVersion: cluster.argocd.crossplane.io/v1alpha1
+kind: Cluster
+metadata:
+  name: prd-cluster
+  labels:
+    purpose: prd
+spec:
+  forProvider:
+    name: prd-cluster
+    config:
+      kubeconfigSecretRef:
+        name: prod-kubeconfig
+        namespace: crossplane
+        key: kubeconfig
+  providerConfigRef:
+    name: argocd-provider