diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md
index c29a43e..e7b71c4 100644
--- a/charts/spire/charts/spire-server/README.md
+++ b/charts/spire/charts/spire-server/README.md
@@ -108,6 +108,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
 | `service.port`                                                                                                | Port for the created service                                                                                                                                                                                                                                                                                                                                                                         | `443`                                                                                                       |
 | `service.annotations`                                                                                         | Annotations to add to the service object                                                                                                                                                                                                                                                                                                                                                             | `{}`                                                                                                        |
 | `service.loadBalancerIP`                                                                                      | IP address to assign to load balancer (if supported)                                                                                                                                                                                                                                                                                                                                                 | `""`                                                                                                        |
+| `service.externalTrafficPolicy`                                                                               | Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty.                                                                                                                                                                                                                                                         | `""`                                                                                                        |
 | `configMap.annotations`                                                                                       | Annotations to add to the SPIRE Server ConfigMap                                                                                                                                                                                                                                                                                                                                                     | `{}`                                                                                                        |
 | `resources`                                                                                                   | Resource requests and limits                                                                                                                                                                                                                                                                                                                                                                         | `{}`                                                                                                        |
 | `autoscaling.enabled`                                                                                         | Flag to enable autoscaling                                                                                                                                                                                                                                                                                                                                                                           | `false`                                                                                                     |
diff --git a/charts/spire/charts/spire-server/templates/service.yaml b/charts/spire/charts/spire-server/templates/service.yaml
index 49a3430..8bfb7f7 100644
--- a/charts/spire/charts/spire-server/templates/service.yaml
+++ b/charts/spire/charts/spire-server/templates/service.yaml
@@ -15,6 +15,9 @@ spec:
   {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerIP }}
   loadBalancerIP: {{ .Values.service.loadBalancerIP }}
   {{- end }}
+  {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.externalTrafficPolicy }}
+  externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
+  {{- end }}
   ports:
     - name: grpc
       port: {{ .Values.service.port }}
diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml
index a5a08ef..e3fac03 100644
--- a/charts/spire/charts/spire-server/values.yaml
+++ b/charts/spire/charts/spire-server/values.yaml
@@ -90,6 +90,8 @@ service:
   annotations: {}
   ## @param service.loadBalancerIP IP address to assign to load balancer (if supported)
   loadBalancerIP: ""
+  ## @param service.externalTrafficPolicy Traffic policy applied when service.type is LoadBalancer (e.g. "Local" to preserve client source IP). Defaults to "Cluster" when left empty.
+  externalTrafficPolicy: ""
 
 configMap:
   ## @param configMap.annotations [object] Annotations to add to the SPIRE Server ConfigMap