diff --git a/argocd/apps/penpot/penpot.yaml b/argocd/apps/penpot/penpot.yaml
index c3bb216..63bd38f 100644
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -43,10 +43,10 @@ spec:
     server: 'https://kubernetes.default.svc'
     namespace: penpot
   syncPolicy:
+    managedNamespaceMetadata:
+      labels: 
+        pod-security.kubernetes.io/enforce: "privileged"
     automated:
-      managedNamespaceMetadata:
-        labels: 
-            - pod-security.kubernetes.io/enforce=privileged
       selfHeal: true
       prune: true
     syncOptions: