diff --git a/.forgejo/workflows/validate.yaml b/.forgejo/workflows/validate.yaml
index 7622efa..9d592c5 100644
--- a/.forgejo/workflows/validate.yaml
+++ b/.forgejo/workflows/validate.yaml
@@ -40,9 +40,18 @@ jobs:
             -n argocd
           kubectl wait --for=condition=available --timeout=60s \
             deployment/sealed-secrets-controller -n kube-system
-          until kubectl get secret argocd-initial-admin-secret -n argocd 2>/dev/null; do
-            echo "Waiting for argocd-initial-admin-secret..."; sleep 3
-          done
+          kubectl -n argocd patch secret argocd-secret -p \
+            '{"stringData": {"admin.password": "$2a$10$rRyBsGSHK6.uc8fntPwVIuV8td2RMkiY1oiCQGiFLLsZjaGEPTnXK", "admin.passwordMtime": "2024-01-01T00:00:00Z"}}'
+          kubectl rollout restart deployment/argocd-server -n argocd
+          kubectl rollout status deployment/argocd-server -n argocd --timeout=60s
+
+      - name: Login to ArgoCD
+        run: |
+          argocd login argocd-server.argocd.svc.cluster.local \
+            --plaintext \
+            --grpc-web \
+            --username admin \
+            --password argocd-ci
 
       - name: Import SealedSecrets key
         env:
@@ -56,14 +65,6 @@ jobs:
         run: |
           kubectl apply -f apps/
 
-      - name: Login to ArgoCD
-        run: |
-          argocd login argocd-server.argocd.svc.cluster.local \
-            --plaintext \
-            --grpc-web \
-            --username admin \
-            --password $(kubectl get secret argocd-initial-admin-secret -n argocd -o jsonpath="{.data.password}" | base64 -d)
-
       - name: Wait for ArgoCD sync
         run: |
           APPS=$(argocd app list -o name)