diff --git a/chart/templates/deployment.yaml b/chart/templates/deployment.yaml
index 6ae11b08b..6708ce251 100644
--- a/chart/templates/deployment.yaml
+++ b/chart/templates/deployment.yaml
@@ -52,6 +52,9 @@ spec:
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
         - --v=0
+        {{- with .Values.controller.kubeRbacProxy.extraArgs }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
         env:
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.controller.kubernetesClusterDomain }}
diff --git a/chart/values.yaml b/chart/values.yaml
index 36862d2c9..e5c6f3f01 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -136,6 +136,15 @@ controller:
         cpu: 5m
         memory: 64Mi
 
+    # Defines additional commandline arguments to be passed to the kube-rbac-proxy container.
+    # Example:
+    # ```yaml
+    # extraArgs:
+    #   - --client-ca-file=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+    # ```
+    # @type: array
+    extraArgs: []
+
   # Image pull secret to use for private container registry authentication which will be applied to the controllers
   # service account. Alternatively, the value may be specified as an array of strings.
   # Example: