diff --git a/incubator/keycloak/Chart.yaml b/incubator/keycloak/Chart.yaml
index 2e766447e7..01634cafe7 100644
--- a/incubator/keycloak/Chart.yaml
+++ b/incubator/keycloak/Chart.yaml
@@ -1,5 +1,5 @@
 name: keycloak
-version: 0.2.4
+version: 0.3.0
 appVersion: 3.4.0.Final
 description: Open Source Identity and Access Management For Modern Applications and Services
 keywords:
diff --git a/incubator/keycloak/README.md b/incubator/keycloak/README.md
index ea6c09442e..3d58cec6dc 100644
--- a/incubator/keycloak/README.md
+++ b/incubator/keycloak/README.md
@@ -11,7 +11,7 @@ $ helm install incubator/keycloak
 
 ## Introduction
 
-This chart bootstraps a [Keycloak](http://www.keycloak.org/) StatefulSet on a [Kubernetes](https://kubernetes.io) cluster 
+This chart bootstraps a [Keycloak](http://www.keycloak.org/) StatefulSet on a [Kubernetes](https://kubernetes.io) cluster
 using the [Helm](https://helm.sh) package manager. It provisions a fully featured Keycloak installation.
 For more information on Keycloak and its capabilities, see its [documentation](http://www.keycloak.org/documentation.html).
 
@@ -49,6 +49,7 @@ Parameter | Description | Default
 `keycloak.image.repository` | The Keycloak image repository | `jboss/keycloak`
 `keycloak.image.tag` | The Keycloak image tag | `3.4.0.Final`
 `keycloak.image.pullPolicy` | The Keycloak image pull policy | `IfNotPresent`
+`keycloak.image.pullSecrets`| Specify image pull secrets | `nil` (does not add image pull secrets to deployed pods) |
 `keycloak.username` | Username for the initial Keycloak admin user | `keycloak`
 `keycloak.password` | Password for the initial Keycloak admin user. If not set, a random 10 characters password is created | `""`
 `keycloak.additionalEnv` | Allows the specification of additional environment variables for Keycloak | `[]`
@@ -104,7 +105,7 @@ $ helm install --name keycloak -f values.yaml incubator/keycloak
 ### Database Setup
 
 By default, the [PostgreSQL](https://github.com/kubernetes/charts/tree/master/stable/postgresql) chart is deployed and used as database.
-Please refer to this chart for additional PostgreSQL configuration options. If PostgreSQL is disabled, Keycloak uses an embedded H2 
+Please refer to this chart for additional PostgreSQL configuration options. If PostgreSQL is disabled, Keycloak uses an embedded H2
 database which is only suitable for testing with a single replica.
 
 #### Using an External Database
@@ -158,7 +159,7 @@ WildFly can be configured via its [command line interface (CLI)](https://docs.jb
 This chart uses the official Keycloak Docker image and customizes the installation running CLI scripts at server startup.
 
 In order to make further customization easier, the CLI commands are separated by their concerns into smaller scripts.
-Everything is in `values.yaml` and can be overridden. Additional CLI commands may be added via `keycloak.cli.custom`, 
+Everything is in `values.yaml` and can be overridden. Additional CLI commands may be added via `keycloak.cli.custom`,
 which is empty by default.
 
 ### High Availability and Clustering
diff --git a/incubator/keycloak/templates/statefulset.yaml b/incubator/keycloak/templates/statefulset.yaml
index f2e8169bbb..1779ddcc15 100644
--- a/incubator/keycloak/templates/statefulset.yaml
+++ b/incubator/keycloak/templates/statefulset.yaml
@@ -21,6 +21,12 @@ spec:
         app: {{ template "keycloak.name" . }}
         release: "{{ .Release.Name }}"
     spec:
+      {{- if .Values.keycloak.image.pullSecrets }}
+      imagePullSecrets:
+      {{- range .Values.keycloak.image.pullSecrets }}
+        - name: {{ . }}
+      {{- end}}
+      {{- end }}
       serviceAccountName: {{ template "keycloak.serviceAccountName" . }}
     {{- if .Values.keycloak.persistence.deployPostgres }}
       initContainers:
diff --git a/incubator/keycloak/values.yaml b/incubator/keycloak/values.yaml
index d420f33468..bdda27ef09 100644
--- a/incubator/keycloak/values.yaml
+++ b/incubator/keycloak/values.yaml
@@ -12,6 +12,12 @@ keycloak:
     repository: jboss/keycloak
     tag: 3.4.0.Final
     pullPolicy: IfNotPresent
+    ## Optionally specify an array of imagePullSecrets.
+    ## Secrets must be manually created in the namespace.
+    ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+    ##
+    # pullSecrets:
+    #   - myRegistrKeySecretName
 
   ## Username for the initial Keycloak admin user
   username: keycloak