diff --git a/charts/pomerium/Chart.yaml b/charts/pomerium/Chart.yaml
index b164975..b1d52c9 100644
--- a/charts/pomerium/Chart.yaml
+++ b/charts/pomerium/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: pomerium
-version: 31.1.2
+version: 31.1.3
 appVersion: 0.17.1
 home: http://www.pomerium.com/
 icon: https://www.pomerium.com/img/icon.svg
diff --git a/charts/pomerium/README.md b/charts/pomerium/README.md
index de4f65c..fc14b2b 100644
--- a/charts/pomerium/README.md
+++ b/charts/pomerium/README.md
@@ -420,7 +420,7 @@ A full listing of Pomerium's configuration variables can be found on the [config
 | `operator.deployment.annotations`                            | Annotations for the operator deployment.                                                                                                                                                                                                                                                                                                                              | `{}`                                                                        |
 | `operator.serviceAccount.annotations`                        | Annotations for the operator pod service account. If none given, then use value of `annotations`                                                                                                                                                                                                                                                                      | `{}`                                                                        |
 | `operator.serviceAccount.nameOverride`                       | Override the name of the operator pod service account                                                                                                                                                                                                                                                                                                                 | `pomerium-operator`                                                         |
-| `redis.replica.replicaCount`                                   | Number of redis replicas to run. [More](https://github.com/bitnami/charts/tree/master/bitnami/redis#parameters)                                                                                                                                                                                                                                                       | `1`                                                                         |
+| `redis.replica.replicaCount`                                 | Number of redis replicas to run. [More](https://github.com/bitnami/charts/tree/master/bitnami/redis#parameters)                                                                                                                                                                                                                                                       | `1`                                                                         |
 | `redis.enabled`                                              | Enable a redis master-slave subchart deployment based on https://github.com/bitnami/charts/tree/master/bitnami/redis                                                                                                                                                                                                                                                  | `false`                                                                     |
 | `redis.auth.createSecret`                                    | Create the secret to store redis password and connect string.  Set to `false` if you wish to use a secret not managed by this helm chart                                                                                                                                                                                                                              | `true`                                                                      |
 | `redis.auth.existingSecret`                                  | Secret used to store authentication password for redis.  This is shared between Pomerium and redis.  [More](https://github.com/bitnami/charts/tree/master/bitnami/redis#parameters)                                                                                                                                                                                   | `pomerium-redis-password`                                                   |
@@ -446,9 +446,10 @@ A full listing of Pomerium's configuration variables can be found on the [config
 | `ingressController.ingressClassResource.defaultCertSecret`   | Specify a default TLS certificate for Ingress resources that do not specify their own.  Format: [namespace]/[name]                                                                                                                                                                                                                                                    |                                                                             |
 | `ingressController.config.ingressClass`                      | `kubernetes.io/ingress.class` for the ingressController to monitor                                                                                                                                                                                                                                                                                                    | `pomerium.io/ingress-controller`                                            |
 | `ingressController.config.namespaces`                        | List of namespaces to monitor for `Ingress` resources.  Defaults to all.                                                                                                                                                                                                                                                                                              | `[]`                                                                        |
-| `ingressController.config.operatorMode`                      | Run Ingress Controller as a replacement for the Pomerium Operator.  This implies using Forward-Auth and a third party Proxy.                                                                                                                                                                                                                                          |
+| `ingressController.config.operatorMode`                      | Run Ingress Controller as a replacement for the Pomerium Operator.  This implies using Forward-Auth and a third party Proxy.                                                                                                                                                                                                                                          |                                                                             |
 | `ingressController.config.updateStatus`                      | Update `Ingress` resource with status from the Proxy service                                                                                                                                                                                                                                                                                                          | `true`                                                                      |
 | `ingressController.deployment.annotations`                   | Annotations for the ingressController deployment.                                                                                                                                                                                                                                                                                                                     | `{}`                                                                        |
+| `ingressController.deployment.podAnnotations`                | Annotations for the ingressController deployment pods.                                                                                                                                                                                                                                                                                                                | `{}`                                                                        |
 | `ingressController.serviceAccount.annotations`               | Annotations for the ingressController pod service account. If none given, then use value of `annotations`                                                                                                                                                                                                                                                             | `{}`                                                                        |
 | `ingressController.serviceAccount.nameOverride`              | Override the name of the ingressController pod service account                                                                                                                                                                                                                                                                                                        | `pomerium-ingressController`                                                |
 
diff --git a/charts/pomerium/values.yaml b/charts/pomerium/values.yaml
index 9af8524..3f33ca8 100644
--- a/charts/pomerium/values.yaml
+++ b/charts/pomerium/values.yaml
@@ -206,6 +206,7 @@ ingressController:
   deployment:
     annotations: {}
     extraEnv: {}
+    podAnnotations: {}
   serviceAccount:
     annotations: {}
     nameOverride: ""