diff --git a/src/main/helm/templates/keycloak-user-crd.yaml b/src/main/helm/templates/keycloak-user-crd.yaml
index 42dd1067e64c01021d3df351f92caab603bc8c02..00c1a65966a7f4c3dfd579816a3e0d0837020233 100644
--- a/src/main/helm/templates/keycloak-user-crd.yaml
+++ b/src/main/helm/templates/keycloak-user-crd.yaml
@@ -7,6 +7,7 @@ metadata:
   namespace: {{ include "app.namespace" . }}
 spec:
   keep_after_delete: {{ .Values.sso.api_user.keep_after_delete | default false }}
+  update_user: {{ .Values.sso.api_user.update_user | default false }}
   keycloak_user:
     username: {{ .Values.sso.api_user.name | lower }}
     first_name: {{ .Values.sso.api_user.first_name | default "" }}
diff --git a/src/test/helm/keycloak-user-crd-test.yaml b/src/test/helm/keycloak-user-crd-test.yaml
index 7003396f23b25269fd64137dd62f7778decfc060..b6f4e349cea0aa09594be1d96add43afa8231c51 100644
--- a/src/test/helm/keycloak-user-crd-test.yaml
+++ b/src/test/helm/keycloak-user-crd-test.yaml
@@ -278,4 +278,25 @@ tests:
       - isNull:
           path: spec.keycloak_user.realm_roles
       - isNull:
-          path: spec.keycloak_user.client_roles
\ No newline at end of file
+          path: spec.keycloak_user.client_roles
+
+  - it: should set updateUser
+    set:
+      sso:
+        api_user:
+          name: testapiuser
+          update_user: true
+    asserts:
+    - equal:
+        path: spec.update_user
+        value: true
+
+  - it: should set default updateUser to false
+    set:
+      sso:
+        api_user:
+          name: testapiuser
+    asserts:
+    - equal:
+        path: spec.update_user
+        value: false
\ No newline at end of file