diff --git a/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml b/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml
index 770f33c2..78206b4b 100644
--- a/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml
+++ b/deployments/kubernetes/chart/reloader/templates/clusterrole.yaml
@@ -16,8 +16,12 @@ rules:
   - apiGroups:
       - ""
     resources:
+{{- if eq .Values.reloader.watchSecrets true }}
       - secrets
+{{- end }}
+{{- if eq .Values.reloader.watchConfigMaps true }}
       - configmaps
+{{- end }}
     verbs:
       - list
       - get
diff --git a/deployments/kubernetes/chart/reloader/templates/deployment.yaml b/deployments/kubernetes/chart/reloader/templates/deployment.yaml
index 3249cae4..f75e61fc 100644
--- a/deployments/kubernetes/chart/reloader/templates/deployment.yaml
+++ b/deployments/kubernetes/chart/reloader/templates/deployment.yaml
@@ -93,6 +93,12 @@ spec:
           - "--auto-annotation"
           - "{{ .Values.reloader.custom_annotations.auto }}"
           {{- end }}
+          {{- if eq .Values.reloader.watchSecrets true }}
+          - "--resources-to-watch=secrets"
+          {{- end }}
+          {{- if eq .Values.reloader.watchConfigMaps true }}
+          - "--resources-to-watch=configMaps"
+          {{- end }}
       {{- end }}
       serviceAccountName: {{ template "reloader-serviceAccountName" . }}
     {{- if eq .Values.reloader.readOnlyRootFileSystem true }}
diff --git a/deployments/kubernetes/chart/reloader/templates/role.yaml b/deployments/kubernetes/chart/reloader/templates/role.yaml
index dd5dac54..e421c3dc 100644
--- a/deployments/kubernetes/chart/reloader/templates/role.yaml
+++ b/deployments/kubernetes/chart/reloader/templates/role.yaml
@@ -16,8 +16,12 @@ rules:
   - apiGroups:
       - ""
     resources:
+      {{- if .Values.reloader.watchSecrets }}
       - secrets
+      {{- end }}
+      {{- if .Values.reloader.watchConfigMaps }}
       - configmaps
+      {{- end }}
     verbs:
       - list
       - get
diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml
index fcfc2b62..e593b5ad 100644
--- a/deployments/kubernetes/chart/reloader/values.yaml
+++ b/deployments/kubernetes/chart/reloader/values.yaml
@@ -4,6 +4,8 @@ kubernetes:
   host: https://kubernetes.default
 
 reloader:
+  watchSecrets: true
+  watchConfigMaps: true
   watchGlobally: true
   # Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
   readOnlyRootFileSystem: false
diff --git a/deployments/kubernetes/manifests/deployment.yaml b/deployments/kubernetes/manifests/deployment.yaml
index 1bb00246..ff1bd387 100644
--- a/deployments/kubernetes/manifests/deployment.yaml
+++ b/deployments/kubernetes/manifests/deployment.yaml
@@ -37,5 +37,8 @@ spec:
         image: "stakater/reloader:v0.0.31"
         imagePullPolicy: IfNotPresent
         name: reloader
+        args:
+          - "--resources-to-watch=secrets"
+          - "--resources-to-watch=configMaps"
       serviceAccountName: reloader
 
diff --git a/deployments/kubernetes/reloader.yaml b/deployments/kubernetes/reloader.yaml
index af1c757b..8f6527c1 100644
--- a/deployments/kubernetes/reloader.yaml
+++ b/deployments/kubernetes/reloader.yaml
@@ -41,6 +41,9 @@ spec:
         image: "stakater/reloader:v0.0.31"
         imagePullPolicy: IfNotPresent
         name: reloader
+        args:
+          - "--resources-to-watch=secrets"
+          - "--resources-to-watch=configMaps"
       serviceAccountName: reloader
 
 ---
diff --git a/deployments/kubernetes/templates/chart/values.yaml.tmpl b/deployments/kubernetes/templates/chart/values.yaml.tmpl
index 6575647d..6b43edb6 100644
--- a/deployments/kubernetes/templates/chart/values.yaml.tmpl
+++ b/deployments/kubernetes/templates/chart/values.yaml.tmpl
@@ -4,6 +4,8 @@ kubernetes:
   host: https://kubernetes.default
 
 reloader:
+  watchSecrets: true
+  watchConfigMaps: true
   watchGlobally: true
   # Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
   readOnlyRootFileSystem: false