diff --git a/charts/argo/templates/workflow-controller-config-map.yaml b/charts/argo/templates/workflow-controller-config-map.yaml
index 9563ac12..2c182c60 100644
--- a/charts/argo/templates/workflow-controller-config-map.yaml
+++ b/charts/argo/templates/workflow-controller-config-map.yaml
@@ -78,3 +78,6 @@ data:
     {{- with .Values.server.sso }}
     sso: {{- toYaml . | nindent 6 }}
     {{- end }}
+    {{- with .Values.controller.workflowRestrictions }}
+    workflowRestrictions: {{- toYaml . | nindent 6 }}
+    {{- end }}
diff --git a/charts/argo/values.yaml b/charts/argo/values.yaml
index 718d4b55..5914600c 100644
--- a/charts/argo/values.yaml
+++ b/charts/argo/values.yaml
@@ -73,6 +73,8 @@ controller:
   #      secondsAfterCompletion: 84600
   # workflowWorkers: 32
   # podWorkers: 32
+  workflowRestrictions: {}  # Only valid for 2.9+
+  #  templateReferencing: Strict|Secure
   telemetryConfig:
     enabled: false
     path: /telemetry