diff --git a/pkg/controller/template/template_controller.go b/pkg/controller/template/template_controller.go
index a555e2a336..974b814114 100644
--- a/pkg/controller/template/template_controller.go
+++ b/pkg/controller/template/template_controller.go
@@ -161,10 +161,17 @@ func (ctrl *Controller) addSecret(obj interface{}) {
 	ctrl.filterSecret(secret)
 }
 
-func (ctrl *Controller) updateSecret(_, newSecret interface{}) {
-	secret := newSecret.(*corev1.Secret)
-	klog.V(4).Infof("Update Secret %v", secret)
-	ctrl.filterSecret(secret)
+func (ctrl *Controller) updateSecret(old, newObj interface{}) {
+	oldSecret := old.(*corev1.Secret)
+	newSecret := newObj.(*corev1.Secret)
+
+	klog.V(4).Infof("Update Secret %v", newSecret)
+
+	// Only trigger resync if the secret data actually changed
+	// This prevents log spam from informer resyncs and watch reconnections
+	if !reflect.DeepEqual(oldSecret.Data, newSecret.Data) {
+		ctrl.filterSecret(newSecret)
+	}
 }
 
 func (ctrl *Controller) deleteSecret(obj interface{}) {