diff --git a/helm/metabase/README.md b/helm/metabase/README.md
index 33e9095e..7b457e70 100644
--- a/helm/metabase/README.md
+++ b/helm/metabase/README.md
@@ -103,7 +103,3 @@ The one complicated part of adding a db to the metabase account is the host.  Th
 ```
 
 It is important to connect to the read only service if one is available.  If the connection attempt times out, it is possible the network policy you created is not set up properly.
-
-## Troubleshooting
-
-The secrets for the db get regenerated each time the helm charts are tun.  This means the database pods may need to be scaled down to zero then back up to chance the credential.
diff --git a/helm/metabase/templates/imagestream.yaml b/helm/metabase/templates/imagestream.yaml
new file mode 100644
index 00000000..e4f92131
--- /dev/null
+++ b/helm/metabase/templates/imagestream.yaml
@@ -0,0 +1,16 @@
+apiVersion: image.openshift.io/v1
+kind: ImageStream
+metadata:
+  labels:
+    app: metabase
+    template: metabase-postgresql-template
+  name: {{ .Values.metabaseServiceName }}
+spec:
+  tags:
+  - from:
+      kind: DockerImage
+      name: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+    generation: 2
+    name: latest
+    referencePolicy:
+      type: Source