diff --git a/k8s-ng/core/postgresql/databases/furumi.yaml b/k8s-ng/core/postgresql/databases/furumi.yaml
index 2ca292d..b2dc6a9 100644
--- a/k8s-ng/core/postgresql/databases/furumi.yaml
+++ b/k8s-ng/core/postgresql/databases/furumi.yaml
@@ -50,7 +50,10 @@ spec:
   name: furumi
   owner: furumi
   extensions:
+    # `ensure` is defaulted by the CRD inside list items; spelled out so Argo CD
+    # does not see it as drift.
     - name: pg_trgm
+      ensure: present
   databaseReclaimPolicy: retain
 ---
 # Lets the furumi namespace read only its own credentials Secret.