diff --git a/deploy/helm/secret-operator/templates/daemonset.yaml b/deploy/helm/secret-operator/templates/daemonset.yaml
index f0027b3c..610efff8 100644
--- a/deploy/helm/secret-operator/templates/daemonset.yaml
+++ b/deploy/helm/secret-operator/templates/daemonset.yaml
@@ -48,7 +48,8 @@ spec:
               mountPath: {{ .Values.kubeletDir }}/pods
               mountPropagation: Bidirectional
         - name: external-provisioner
-          image: k8s.gcr.io/sig-storage/csi-provisioner:v3.1.0
+          image: "{{ .Values.csiProvisioner.image.repository }}:{{ .Values.csiProvisioner.image.tag }}"
+          imagePullPolicy: {{ .Values.csiProvisioner.image.pullPolicy }}
           args:
             - --csi-address=/csi/csi.sock
             - --feature-gates=Topology=true
@@ -57,7 +58,8 @@ spec:
             - name: csi
               mountPath: /csi
         - name: node-driver-registrar
-          image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.4.0
+          image: "{{ .Values.csiNodeDriverRegistrar.image.repository }}:{{ .Values.csiNodeDriverRegistrar.image.tag }}"
+          imagePullPolicy: {{ .Values.csiNodeDriverRegistrar.image.pullPolicy }}
           args:
             - --csi-address=/csi/csi.sock
             - --kubelet-registration-path={{ .Values.kubeletDir }}/plugins/secrets.stackable.tech/csi.sock
diff --git a/deploy/helm/secret-operator/templates/roles.yaml b/deploy/helm/secret-operator/templates/roles.yaml
index a68a7006..3378bb98 100644
--- a/deploy/helm/secret-operator/templates/roles.yaml
+++ b/deploy/helm/secret-operator/templates/roles.yaml
@@ -14,6 +14,7 @@ rules:
       - list
       - watch
       - create
+      - patch
   - apiGroups:
       - ""
     resources:
diff --git a/deploy/helm/secret-operator/values.yaml b/deploy/helm/secret-operator/values.yaml
index ea08c4eb..2ae23b50 100644
--- a/deploy/helm/secret-operator/values.yaml
+++ b/deploy/helm/secret-operator/values.yaml
@@ -3,6 +3,16 @@
 image:
   repository: docker.stackable.tech/stackable/secret-operator
   pullPolicy: IfNotPresent
+csiProvisioner:
+  image:
+    repository: docker.stackable.tech/k8s/sig-storage/csi-provisioner
+    tag: v3.1.0
+    pullPolicy: IfNotPresent
+csiNodeDriverRegistrar:
+  image:
+    repository: docker.stackable.tech/k8s/sig-storage/csi-node-driver-registrar
+    tag: v2.5.0
+    pullPolicy: IfNotPresent
 
 imagePullSecrets: []
 nameOverride: ""