diff --git a/charts/spire/charts/spire-server/templates/statefulset.yaml b/charts/spire/charts/spire-server/templates/statefulset.yaml
index bf20868..38215b8 100644
--- a/charts/spire/charts/spire-server/templates/statefulset.yaml
+++ b/charts/spire/charts/spire-server/templates/statefulset.yaml
@@ -132,6 +132,9 @@ spec:
               mountPath: /controller-manager-config.yaml
               subPath: controller-manager-config.yaml
               readOnly: true
+            - name: spire-controller-manager-tmp
+              mountPath: /tmp
+              readOnly: false
         {{- end }}
         {{- if gt (len .Values.extraContainers) 0 }}
         {{- toYaml .Values.extraContainers | nindent 8 }}
@@ -158,6 +161,8 @@ spec:
             name: {{ include "spire-server.fullname" . }}
         - name: spire-server-socket
           emptyDir: {}
+        - name: spire-controller-manager-tmp
+          emptyDir: {}
         {{- if eq (.Values.upstreamAuthority.disk.enabled | toString) "true" }}
         - name: upstream-ca
           secret: