diff --git a/manifests/tpk8s-opinionated.tanzu.japan.com/10.0.0/secretgen/certificate.yaml b/manifests/tpk8s-opinionated.tanzu.japan.com/10.0.0/secretgen/certificate.yaml
index 102dabf..0104aa9 100644
--- a/manifests/tpk8s-opinionated.tanzu.japan.com/10.0.0/secretgen/certificate.yaml
+++ b/manifests/tpk8s-opinionated.tanzu.japan.com/10.0.0/secretgen/certificate.yaml
@@ -6,6 +6,8 @@ kind: Issuer
 metadata:
   name: tp-root-issuer
   namespace: #@ data.values.tp.namespace
+  annotations:
+    kapp.k14s.io/change-group: "secrettemplate"
 spec:
   selfSigned: {}
 ---
@@ -14,6 +16,8 @@ kind: Certificate
 metadata:
   name: tp-cert
   namespace: #@ data.values.tp.namespace
+  annotations:
+    kapp.k14s.io/change-group: "secrettemplate"
 spec:
   isCA: true
   commonName: #@ data.values.tp.ingress.host