diff --git a/charts/irsa-manager/templates/deployment.yaml b/charts/irsa-manager/templates/deployment.yaml
index 54de97a..7bf85b6 100644
--- a/charts/irsa-manager/templates/deployment.yaml
+++ b/charts/irsa-manager/templates/deployment.yaml
@@ -32,21 +32,25 @@ spec:
             secretKeyRef:
               key: aws-access-key-id
               name: aws-secret
+              optional: true
         - name: AWS_SECRET_ACCESS_KEY
           valueFrom:
             secretKeyRef:
               key: aws-secret-access-key
               name: aws-secret
+              optional: true
         - name: AWS_SESSION_TOKEN
           valueFrom:
             secretKeyRef:
               key: aws-session-token
               name: aws-secret
+              optional: true
         - name: AWS_REGION
           valueFrom:
             secretKeyRef:
               key: aws-region
               name: aws-secret
+              optional: true
         - name: AWS_ROLE_ARN
           valueFrom:
             secretKeyRef:
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 6bcd1bb..f70479b 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -52,25 +52,25 @@ spec:
                 secretKeyRef:
                   name: aws-secret
                   key: aws-access-key-id
-                  # optional: true
+                  optional: true
             - name: AWS_SECRET_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
                   name: aws-secret
                   key: aws-secret-access-key
-                  # optional: true
+                  optional: true
             - name: AWS_SESSION_TOKEN
                 valueFrom:
                   secretKeyRef:
                     name: aws-secret
                     key: aws-session-token
-                    # optional: true
+                    optional: true
             - name: AWS_REGION
               valueFrom:
                 secretKeyRef:
                   name: aws-secret
                   key: aws-region
-                  # optional: true
+                  optional: true
             - name: AWS_ROLE_ARN
               valueFrom:
                 secretKeyRef: