diff --git a/chart/templates/istio/controlplane/values.yaml b/chart/templates/istio/controlplane/values.yaml
index ba80c814f32b955856cd32dbe95e73df4c5766ab..5beec266c35f785c50a3af16126d49ad74616865 100644
--- a/chart/templates/istio/controlplane/values.yaml
+++ b/chart/templates/istio/controlplane/values.yaml
@@ -72,6 +72,12 @@ networkPolicies:
 
 imagePullPolicy: {{ .Values.imagePullPolicy }}
 
+{{- if or .Values.sso.certificate_authority (dig "certificateAuthority" "cert" false .Values.sso)}}
+values:
+  pilot:
+    jwksResolverExtraRootCA: {{ default (dig "certificateAuthority" "cert" "" .Values.sso) .Values.sso.certificate_authority | quote }}
+{{- end }}
+
 {{- if .Values.istio.ingressGateways }}
 ingressGateways:
   istio-ingressgateway: