diff --git a/deploy/deployment.yaml b/deploy/deployment.yaml
index b4fabfae..f5ef824b 100644
--- a/deploy/deployment.yaml
+++ b/deploy/deployment.yaml
@@ -38,8 +38,8 @@ metadata:
   namespace: #@ data.values.namespace
   labels:
     app: #@ data.values.app_name
+type: kubernetes.io/dockerconfigjson
 data:
-  #! e.g. the output of: kubectl create secret docker-registry x --docker-server=https://example.io --docker-username="USERNAME" --docker-password="PASSWORD" --dry-run=client -o json | jq -r '.data[".dockerconfigjson"]'
   .dockerconfigjson: #@ data.values.image_pull_dockerconfigjson
 #@ end
 ---
diff --git a/deploy/values.yaml b/deploy/values.yaml
index cb747c6a..e5a4c501 100644
--- a/deploy/values.yaml
+++ b/deploy/values.yaml
@@ -15,4 +15,5 @@ webhook_ca_bundle: #! e.g., LS0tLS1CRUdJTiBDRVJUSUZJQ0F...
 
 discovery_url: #! e.g., https://example.com
 
+#! e.g. the output of: kubectl create secret docker-registry x --docker-server=https://example.io --docker-username="USERNAME" --docker-password="PASSWORD" --dry-run=client -o json | jq -r '.data[".dockerconfigjson"]'
 image_pull_dockerconfigjson: #! e.g. {"auths":{"https://registry.example.com":{"username":"USERNAME","password":"PASSWORD","auth":"BASE64_ENCODED_USERNAME_COLON_PASSWORD"}}}