diff --git a/chart/stash/templates/deployment.yaml b/chart/stash/templates/deployment.yaml
index cca7f484c..cba60702d 100644
--- a/chart/stash/templates/deployment.yaml
+++ b/chart/stash/templates/deployment.yaml
@@ -50,10 +50,12 @@ spec:
         - --tls-cert-file=/var/serving-cert/tls.crt
         - --tls-private-key-file=/var/serving-cert/tls.key
         - --service-name={{ template "stash.fullname" . }}
+        - --enable-mutating-webhook={{ .Values.apiserver.enableMutatingWebhook }}
+        - --enable-validating-webhook={{ .Values.apiserver.enableValidatingWebhook }}
+        - --bypass-validating-webhook-xray={{ .Values.apiserver.bypassValidatingWebhookXray }}
 {{- if and (not .Values.apiserver.disableStatusSubresource) (ge $major 1) (ge $minor 11) }}
         - --enable-status-subresource=true
 {{- end }}
-        - --bypass-validating-webhook-xray={{ .Values.apiserver.bypassValidatingWebhookXray }}
         - --use-kubeapiserver-fqdn-for-aks={{ .Values.apiserver.useKubeapiserverFqdnForAks }}
         - --enable-analytics={{ .Values.enableAnalytics }}
         ports:
diff --git a/hack/deploy/operator.yaml b/hack/deploy/operator.yaml
index 33d6256f5..40ba656a2 100644
--- a/hack/deploy/operator.yaml
+++ b/hack/deploy/operator.yaml
@@ -33,6 +33,7 @@ spec:
         - --tls-cert-file=/var/serving-cert/tls.crt
         - --tls-private-key-file=/var/serving-cert/tls.key
         - --service-name=${STASH_SERVICE_NAME}
+        - --enable-mutating-webhook=${STASH_ENABLE_MUTATING_WEBHOOK}
         - --enable-validating-webhook=${STASH_ENABLE_VALIDATING_WEBHOOK}
         - --bypass-validating-webhook-xray=${STASH_BYPASS_VALIDATING_WEBHOOK_XRAY}
         - --enable-status-subresource=${STASH_ENABLE_STATUS_SUBRESOURCE}