diff --git a/charts/argo/templates/workflow-controller-clusterrole.yaml b/charts/argo/templates/workflow-controller-clusterrole.yaml
index 20515321..bc619369 100644
--- a/charts/argo/templates/workflow-controller-clusterrole.yaml
+++ b/charts/argo/templates/workflow-controller-clusterrole.yaml
@@ -26,6 +26,7 @@ rules:
   - ""
   resources:
   - configmaps
+  - secrets
   verbs:
   - get
   - watch
diff --git a/charts/argo/values.yaml b/charts/argo/values.yaml
index b1324014..b42bfa89 100644
--- a/charts/argo/values.yaml
+++ b/charts/argo/values.yaml
@@ -33,24 +33,24 @@ controller:
     enabled: false
     path: /metrics
     port: 8080
-    persistence: {}
-    #  connectionPool:
-    #    maxIdleConns: 100
-    #    maxOpenConns: 0
-    #  # save the entire workflow into etcd and DB
-    #  nodeStatusOffLoad: false
-    #  postgresql:
-    #    host: localhost
-    #    port: 5432
-    #    database: postgres
-    #    tableName: argo_workflows
-    #    # the database secrets must be in the same namespace of the controller
-    #    userNameSecret:
-    #      name: argo-postgres-config
-    #      key: username
-    #    passwordSecret:
-    #      name: argo-postgres-config
-    #      key: password
+  persistence: {}
+    # connectionPool:
+    #   maxIdleConns: 100
+    #   maxOpenConns: 0
+    # # save the entire workflow into etcd and DB
+    # nodeStatusOffLoad: false
+    # postgresql:
+    #   host: localhost
+    #   port: 5432
+    #   database: postgres
+    #   tableName: argo_workflows
+    #   # the database secrets must be in the same namespace of the controller
+    #   userNameSecret:
+    #     name: argo-postgres-config
+    #     key: username
+    #   passwordSecret:
+    #     name: argo-postgres-config
+    #     key: password
   workflowDefaults: {}  # Only valid for 2.7+
   #  spec:
   #    ttlStrategy: