diff --git a/deploy/k8s/chart/templates/deployment.yaml b/deploy/k8s/chart/templates/deployment.yaml
index 9dd390c..a5a34c3 100644
--- a/deploy/k8s/chart/templates/deployment.yaml
+++ b/deploy/k8s/chart/templates/deployment.yaml
@@ -25,6 +25,12 @@ spec:
       labels:
         {{- include "cortex-tenant.selectorLabels" . | nindent 8 }}
     spec:
+      {{- if .Values.image.pullSecrets }}
+      imagePullSecrets:
+      {{- range .Values.image.pullSecrets }}
+        - name: {{ . }}
+      {{- end }}
+      {{- end }}
       containers:
         - image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
diff --git a/deploy/k8s/chart/values.yaml b/deploy/k8s/chart/values.yaml
index b06e2ba..3341f00 100644
--- a/deploy/k8s/chart/values.yaml
+++ b/deploy/k8s/chart/values.yaml
@@ -10,6 +10,11 @@ image:
   pullPolicy: IfNotPresent
   # -- Overrides the image tag (default is `.Chart.appVersion`)
   tag: ""
+  # -- Optionally specify an array of imagePullSecrets
+  # Secrets must be manually created in the namespace.
+  # ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+  # pullSecrets:
+  #   - myRegistryKeySecretName
 
 service:
   # -- The type of service