diff --git a/deploy/charts/istio-csr/templates/deployment.yaml b/deploy/charts/istio-csr/templates/deployment.yaml
index 35c38edf..8b7a3737 100644
--- a/deploy/charts/istio-csr/templates/deployment.yaml
+++ b/deploy/charts/istio-csr/templates/deployment.yaml
@@ -86,7 +86,7 @@ spec:
               {{- $x := list $annotation.name $annotation.value | join "=" }}
               {{- $annotations = append $annotations $x }}
             {{- end }}
-          - {{ printf "%s=%s" "--certificate-request-additional-annotations" ( join "," $annotations ) | quote -}}
+          - {{ printf "\"%s=%s\"" "--certificate-request-additional-annotations" ( join "," $annotations ) | quote -}}
           {{- end }}
 
             # tls
@@ -135,7 +135,7 @@ spec:
           {{- range $annotation := .Values.app.certmanager.additionalAnnotations }}
           {{ $annotationList = append $annotationList (printf "%s=%s" $annotation.name $annotation.value) }}
           {{- end }}
-          - {{ printf "%s=%s" "--istiod-cert-additional-annotations" ( join "," $annotationList ) | quote -}}
+          - {{ printf "\"%s=%s\"" "--istiod-cert-additional-annotations" ( join "," $annotationList ) | quote -}}
           {{- end }}
           - "--istiod-cert-istio-revisions={{ join "," .Values.app.istio.revisions }}"
         {{- if .Values.volumeMounts }}