diff --git a/deploy/charts/static-site/templates/deployment.yaml b/deploy/charts/static-site/templates/deployment.yaml
index 83cbe53..9862e9e 100644
--- a/deploy/charts/static-site/templates/deployment.yaml
+++ b/deploy/charts/static-site/templates/deployment.yaml
@@ -20,9 +20,9 @@ spec:
       labels:
         {{- include "static-site.selectorLabels" . | nindent 8 }}
     spec:
-      {{- with .Values.imagePullSecrets }}
+      {{- if .Values.image.pullSecretBase64 }}
       imagePullSecrets:
-        {{- toYaml . | nindent 8 }}
+        - name: {{ include "static-site.fullname" . }}-registry-credentials
       {{- end }}
       serviceAccountName: {{ include "static-site.serviceAccountName" . }}
       securityContext:
diff --git a/deploy/charts/static-site/templates/registry-secret.yaml b/deploy/charts/static-site/templates/registry-secret.yaml
new file mode 100644
index 0000000..722f864
--- /dev/null
+++ b/deploy/charts/static-site/templates/registry-secret.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "wsj-standup.fullname" . }}-registry-credentials
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: {{ .Values.image.pullSecretBase64 }}
diff --git a/deploy/charts/static-site/values.yaml b/deploy/charts/static-site/values.yaml
index fc1cafb..d4219fd 100644
--- a/deploy/charts/static-site/values.yaml
+++ b/deploy/charts/static-site/values.yaml
@@ -6,11 +6,11 @@ replicaCount: 1
 
 image:
   repository: nginx
-  pullPolicy: IfNotPresent
+  pullPolicy: Always
   # Overrides the image tag whose default is the chart appVersion.
   tag: ''
+  pullSecretBase64: null
 
-imagePullSecrets: []
 nameOverride: ''
 fullnameOverride: ''