diff --git a/charts/terrakube/Chart.yaml b/charts/terrakube/Chart.yaml
index def32b6..7c39b58 100644
--- a/charts/terrakube/Chart.yaml
+++ b/charts/terrakube/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.2.0
+version: 3.2.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/terrakube/templates/deployment-api.yaml b/charts/terrakube/templates/deployment-api.yaml
index 43d1269..c36b663 100644
--- a/charts/terrakube/templates/deployment-api.yaml
+++ b/charts/terrakube/templates/deployment-api.yaml
@@ -14,6 +14,8 @@ spec:
     metadata:
       labels:
         app: terrakube-api
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/secrets-api.yaml") . | sha256sum }}
     spec:
       containers:
       - name: terrakube-api
diff --git a/charts/terrakube/templates/deployment-executor.yaml b/charts/terrakube/templates/deployment-executor.yaml
index 0da5255..60bf912 100644
--- a/charts/terrakube/templates/deployment-executor.yaml
+++ b/charts/terrakube/templates/deployment-executor.yaml
@@ -14,6 +14,8 @@ spec:
     metadata:
       labels:
         app: terrakube-executor
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/secrets-executor.yaml") . | sha256sum }}
     spec:
       containers:
       - name: terrakube-executor
diff --git a/charts/terrakube/templates/deployment-openldap.yaml b/charts/terrakube/templates/deployment-openldap.yaml
index 35b5fa2..2ebad09 100644
--- a/charts/terrakube/templates/deployment-openldap.yaml
+++ b/charts/terrakube/templates/deployment-openldap.yaml
@@ -14,6 +14,8 @@ spec:
     metadata:
       labels:
         app: terrakube-openldap
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/secret-openldap.yaml") . | sha256sum }}
     spec:
       containers:
       - name: terrakube-openldap
diff --git a/charts/terrakube/templates/deployment-registry.yaml b/charts/terrakube/templates/deployment-registry.yaml
index 3484a65..0b5dc19 100644
--- a/charts/terrakube/templates/deployment-registry.yaml
+++ b/charts/terrakube/templates/deployment-registry.yaml
@@ -14,6 +14,8 @@ spec:
     metadata:
       labels:
         app: terrakube-registry
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/secrets-registry.yaml") . | sha256sum }}
     spec:
       containers:
       - name: terrakube-registry
diff --git a/charts/terrakube/templates/deployment-ui.yaml b/charts/terrakube/templates/deployment-ui.yaml
index 9aaec8f..1f7b36d 100644
--- a/charts/terrakube/templates/deployment-ui.yaml
+++ b/charts/terrakube/templates/deployment-ui.yaml
@@ -14,6 +14,8 @@ spec:
     metadata:
       labels:
         app: terrakube-ui
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/secrets-ui.yaml") . | sha256sum }}
     spec:
       containers:
       - name: terrakube-ui