diff --git a/secrets b/secrets
index a64d500..b0d4855 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit a64d500fc3b4222dd3e4565086467aa603b221b7
+Subproject commit b0d485544dded5461e2dd6fd378cd08f1a5ea644
diff --git a/src/helm/oidc2fer/templates/satosa_deployment.yaml b/src/helm/oidc2fer/templates/satosa_deployment.yaml
index 53c1111..cd99eec 100644
--- a/src/helm/oidc2fer/templates/satosa_deployment.yaml
+++ b/src/helm/oidc2fer/templates/satosa_deployment.yaml
@@ -82,3 +82,16 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+---
+{{ if .Values.satosa.pdb.enabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ $fullName }}
+  namespace: {{ .Release.Namespace | quote }}
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      {{- include "oidc2fer.common.selectorLabels" (list . $component) | nindent 6 }}
+{{ end }}
diff --git a/src/helm/oidc2fer/values.yaml b/src/helm/oidc2fer/values.yaml
index c4cc4ae..39a8b19 100644
--- a/src/helm/oidc2fer/values.yaml
+++ b/src/helm/oidc2fer/values.yaml
@@ -52,6 +52,10 @@ ingress:
 
 satosa:
 
+  ## @param satosa.pdb.enabled Enable pdb on backend
+  pdb:
+    enabled: true
+
   ## @param satosa.command Override the satosa container command
   command: []