diff --git a/servers/legion/k8s/gitea-runner/external-secrets.yaml b/servers/legion/k8s/gitea-runner/external-secrets.yaml
index 0f82d70..397e11c 100644
--- a/servers/legion/k8s/gitea-runner/external-secrets.yaml
+++ b/servers/legion/k8s/gitea-runner/external-secrets.yaml
@@ -6,6 +6,8 @@ kind: ExternalSecret
 metadata:
   name: gitea-runner-secret
   namespace: ci
+  annotations:
+    force-sync: "2026-04-23"
 spec:
   refreshInterval: 1h
   secretStoreRef: