diff --git a/pkg/cliplugins/workload/plugin/sync.go b/pkg/cliplugins/workload/plugin/sync.go
index a852ad7ee11..939c9329885 100644
--- a/pkg/cliplugins/workload/plugin/sync.go
+++ b/pkg/cliplugins/workload/plugin/sync.go
@@ -57,7 +57,7 @@ var embeddedResources embed.FS
 const (
 	SyncerSecretConfigKey   = "kubeconfig"
 	SyncerIDPrefix          = "kcp-syncer-"
-	MaxSyncTargetNameLength = validation.DNS1123SubdomainMaxLength - 9 + len(SyncerIDPrefix)
+	MaxSyncTargetNameLength = validation.DNS1123SubdomainMaxLength - (9 + len(SyncerIDPrefix))
 )
 
 // Sync prepares a kcp workspace for use with a syncer and outputs the