diff --git a/stable/opa/Chart.yaml b/stable/opa/Chart.yaml
index 8b4d56bbb7..ac34dcfcbc 100644
--- a/stable/opa/Chart.yaml
+++ b/stable/opa/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 1.5.2
+version: 1.6.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:
diff --git a/stable/opa/templates/deployment.yaml b/stable/opa/templates/deployment.yaml
index ccba212f82..3ed0ce145b 100644
--- a/stable/opa/templates/deployment.yaml
+++ b/stable/opa/templates/deployment.yaml
@@ -11,6 +11,15 @@ spec:
       app: {{ template "opa.fullname" . }}
   template:
     metadata:
+{{- if and .Values.generateAdmissionControllerCerts .Values.opa }}
+      annotations:
+{{- if .Values.generateAdmissionControllerCerts }}
+        checksum/certs: {{ include (print $.Template.BasePath "/webhookconfiguration.yaml") . | sha256sum }}
+{{- end }}
+{{- if .Values.opa }}
+        checksum/config: {{ include (print $.Template.BasePath "/secrets.yaml") . | sha256sum }}
+{{- end }}
+{{- end }}
       labels:
         app: {{ template "opa.fullname" . }}
       name: {{ template "opa.fullname" . }}