diff --git a/stable/kiam/Chart.yaml b/stable/kiam/Chart.yaml
index 9839d5245a..fcd357081a 100644
--- a/stable/kiam/Chart.yaml
+++ b/stable/kiam/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: kiam
-version: 2.4.0
+version: 2.4.1
 appVersion: 3.2
 description: Integrate AWS IAM with Kubernetes
 keywords:
diff --git a/stable/kiam/README.md b/stable/kiam/README.md
index b7b5213153..01a4592074 100644
--- a/stable/kiam/README.md
+++ b/stable/kiam/README.md
@@ -98,6 +98,7 @@ Parameter | Description | Default
 `agent.image.tag` | Agent image tag | `v3.2`
 `agent.image.pullPolicy` | Agent image pull policy | `IfNotPresent`
 `agent.dnsPolicy` | Agent pod DNS policy | `ClusterFirstWithHostNet`
+`agent.whiteListRouteRegexp` | Agent pod whitelist metadata API path argument regex  | `{}`
 `agent.extraArgs` | Additional agent container arguments | `{}`
 `agent.extraEnv` | Additional agent container environment variables | `{}`
 `agent.extraHostPathMounts` | Additional agent container hostPath mounts | `[]`
diff --git a/stable/kiam/templates/agent-daemonset.yaml b/stable/kiam/templates/agent-daemonset.yaml
index 5054f253f9..97ab745ab0 100644
--- a/stable/kiam/templates/agent-daemonset.yaml
+++ b/stable/kiam/templates/agent-daemonset.yaml
@@ -94,6 +94,9 @@ spec:
             - --prometheus-listen-addr=0.0.0.0:{{ .Values.agent.prometheus.port }}
             - --prometheus-sync-interval={{ .Values.agent.prometheus.syncInterval }}
             {{- end }}
+            {{- if .Values.agent.whiteListRouteRegexp }}
+            - --whitelist-route-regexp={{ .Values.agent.whiteListRouteRegexp }}
+            {{- end }}
             - --gateway-timeout-creation={{ .Values.agent.gatewayTimeoutCreation }}
           {{- range $key, $value := .Values.agent.extraArgs }}
             {{- if $value }}
diff --git a/stable/kiam/values.yaml b/stable/kiam/values.yaml
index f1f6b21728..ed3568711e 100644
--- a/stable/kiam/values.yaml
+++ b/stable/kiam/values.yaml
@@ -14,6 +14,11 @@ agent:
     tag: v3.2
     pullPolicy: IfNotPresent
 
+  ## agent whitelist of proxy routes matching this reg-ex
+  ##
+  # whiteListRouteRegexp:
+
+
   ## Logging settings
   ##
   log: