diff --git a/kube/deploy/core/secrets/external-secrets/app/hr.yaml b/kube/deploy/core/secrets/external-secrets/app/hr.yaml
index 3d6d33f4..5ade5fe6 100644
--- a/kube/deploy/core/secrets/external-secrets/app/hr.yaml
+++ b/kube/deploy/core/secrets/external-secrets/app/hr.yaml
@@ -20,7 +20,7 @@ spec:
       egress.home.arpa/apiserver: "allow"
       egress.home.arpa/world-https: "allow"
     # scheduling
-    replicaCount: 3
+    replicaCount: 2
     leaderElect: true
     topologySpreadConstraints:
       - maxSkew: 1