diff --git a/charts/authentik/README.md b/charts/authentik/README.md
index 488c38ed..06cdb7d3 100644
--- a/charts/authentik/README.md
+++ b/charts/authentik/README.md
@@ -110,6 +110,7 @@ redis:
 | image.pullSecrets | list | `[]` |  |
 | image.repository | string | `"ghcr.io/goauthentik/server"` |  |
 | image.tag | string | `"2022.8.2"` |  |
+| image.digest | string | `nil` | optional container image digest |
 | ingress.annotations | object | `{}` |  |
 | ingress.enabled | bool | `false` |  |
 | ingress.hosts[0].host | string | `"authentik.domain.tld"` |  |
diff --git a/charts/authentik/templates/deployment.yaml b/charts/authentik/templates/deployment.yaml
index a0f15915..84973e29 100644
--- a/charts/authentik/templates/deployment.yaml
+++ b/charts/authentik/templates/deployment.yaml
@@ -67,7 +67,7 @@ spec:
       {{- end }}
       containers:
         - name: {{ $.Chart.Name }}
-          image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}"
+          image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}{{- if $.Values.image.digest -}}@{{ $.Values.image.digest }}{{- end -}}"
           imagePullPolicy: "{{ $.Values.image.pullPolicy }}"
           args: [{{ quote . }}]
           env:
diff --git a/charts/authentik/values.yaml b/charts/authentik/values.yaml
index 86fbc8d2..adb24762 100644
--- a/charts/authentik/values.yaml
+++ b/charts/authentik/values.yaml
@@ -16,6 +16,7 @@ worker:
 image:
   repository: ghcr.io/goauthentik/server
   tag: 2022.8.2
+  digest:
   pullPolicy: IfNotPresent
   pullSecrets: []