diff --git a/kubernetes/argocd/stacks/common/azure-workload-identity-webhook b/kubernetes/argocd/stacks/common/azure-workload-identity-webhook.yml
similarity index 91%
rename from kubernetes/argocd/stacks/common/azure-workload-identity-webhook
rename to kubernetes/argocd/stacks/common/azure-workload-identity-webhook.yml
index 9bb58b8..104fd3b 100644
--- a/kubernetes/argocd/stacks/common/azure-workload-identity-webhook
+++ b/kubernetes/argocd/stacks/common/azure-workload-identity-webhook.yml
@@ -8,6 +8,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: azure-workload-identity-webhook
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   destination:
     namespace: azure-workload-identity-system