diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md
index 7cafb56..7709ba6 100644
--- a/charts/spire/charts/spire-server/README.md
+++ b/charts/spire/charts/spire-server/README.md
@@ -133,6 +133,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
 | `dataStore.sql.externalSecret.enabled`                                                       | Enable external secret for datastore creds                                                                                                                                                                                                                                                                                                                           | `false`                                                                                        |
 | `dataStore.sql.externalSecret.name`                                                          | The name of the secret object                                                                                                                                                                                                                                                                                                                                        | `""`                                                                                           |
 | `dataStore.sql.externalSecret.key`                                                           | The key of the secret object whose value is the dataStore.sql password                                                                                                                                                                                                                                                                                               | `""`                                                                                           |
+| `auditLogEnabled`                                                                            | If true, enables audit logging                                                                                                                                                                                                                                                                                                                                       | `false`                                                                                        |
 | `logLevel`                                                                                   | The log level, valid values are "debug", "info", "warn", and "error"                                                                                                                                                                                                                                                                                                 | `info`                                                                                         |
 | `jwtIssuer`                                                                                  | The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset                                                                                                                                                                                                                                                                                              | `""`                                                                                           |
 | `clusterName`                                                                                | Set the name of the Kubernetes cluster. (`kubeadm init --service-dns-domain`)                                                                                                                                                                                                                                                                                        | `example-cluster`                                                                              |
diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml
index 37e369b..fffc2eb 100644
--- a/charts/spire/charts/spire-server/templates/configmap.yaml
+++ b/charts/spire/charts/spire-server/templates/configmap.yaml
@@ -46,6 +46,7 @@ server:
   data_dir: "/run/spire/data"
   log_level: {{ .Values.logLevel | quote }}
   jwt_issuer: {{ include "spire-lib.jwt-issuer" . | quote }}
+  audit_log_enabled: {{ .Values.auditLogEnabled }}
 
   ca_key_type: {{ .Values.caKeyType | quote }}
   ca_ttl: {{ .Values.caTTL | quote }}
diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml
index d254eab..0a7dfc8 100644
--- a/charts/spire/charts/spire-server/values.yaml
+++ b/charts/spire/charts/spire-server/values.yaml
@@ -173,6 +173,8 @@ dataStore:
       ## @param dataStore.sql.externalSecret.key The key of the secret object whose value is the dataStore.sql password
       key: ""
 
+## @param auditLogEnabled If true, enables audit logging
+auditLogEnabled: false
 ## @param logLevel The log level, valid values are "debug", "info", "warn", and "error"
 logLevel: info
 ## @param jwtIssuer The JWT issuer domain. Defaults to oidc-discovery.$trustDomain if unset