diff --git a/stable/pomerium/Chart.yaml b/stable/pomerium/Chart.yaml
index ac0bd86e53..67f8fd33b7 100644
--- a/stable/pomerium/Chart.yaml
+++ b/stable/pomerium/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: pomerium
-version: 3.0.0
+version: 3.0.1
 appVersion: 0.3.1
 home: http://www.pomerium.io/
 icon: https://www.pomerium.io/logo.svg
diff --git a/stable/pomerium/README.md b/stable/pomerium/README.md
index 052922e420..ee57e31553 100644
--- a/stable/pomerium/README.md
+++ b/stable/pomerium/README.md
@@ -86,13 +86,12 @@ All services can share the secret if appropriate.
 
 A full listing of Pomerium's configuration variables can be found on the [config reference page](https://www.pomerium.io/docs/config-reference.html).
 
-| Parameter                        | Description                                                                                                                                  | Default            |
-| -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | ------------------ |
-| `config.rootDomain`              | Root Domain specifies the sub-domain handled by pomerium. [See more](https://www.pomerium.io/docs/config-reference.html#proxy-root-domains). | `corp.pomerium.io` |
-| `config.existingLegacyTLSSecret` | Use a Pre-3.0.0 secret for the service TLS data.  Only use if upgrading from <= 2.0.0                                                        | `false`            |
-| `config.generateTLS`             | Generate a dummy Certificate Authority and certs for service communication. Manual CA and certs can be set in values.                        | `true`             |
-| `config.forceGenerateTLS`        | Force recreation of generated TLS certificates.  You will need to restart your deployments after running                                     | `false`            |
-
+| Parameter                           | Description                                                                                                                                                                                                | Default                                                                            |
+| ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------- |
+| `config.rootDomain`                 | Root Domain specifies the sub-domain handled by pomerium. [See more](https://www.pomerium.io/docs/config-reference.html#proxy-root-domains).                                                               | `corp.pomerium.io`                                                                 |
+| `config.existingLegacyTLSSecret`    | Use a Pre-3.0.0 secret for the service TLS data.  Only use if upgrading from <= 2.0.0                                                                                                                      | `false`                                                                            |
+| `config.generateTLS`                | Generate a dummy Certificate Authority and certs for service communication. Manual CA and certs can be set in values.                                                                                      | `true`                                                                             |
+| `config.forceGenerateTLS`           | Force recreation of generated TLS certificates.  You will need to restart your deployments after running                                                                                                   | `false`                                                                            |
 | `config.sharedSecret`               | 256 bit key to secure service communication. [See more](https://www.pomerium.io/docs/config-reference.html#shared-secret).                                                                                 | 32 [random ascii chars](http://masterminds.github.io/sprig/strings.html)           |
 | `config.cookieSecret`               | Cookie secret is a 32 byte key used to encrypt user sessions.                                                                                                                                              | 32 [random ascii chars](http://masterminds.github.io/sprig/strings.html)           |
 | `config.policy`                     | Base64 encoded string containing the routes, and their access policies.                                                                                                                                    |