diff --git a/charts/tezos/values.yaml b/charts/tezos/values.yaml
index 5d9fec1d9..10f90efbf 100644
--- a/charts/tezos/values.yaml
+++ b/charts/tezos/values.yaml
@@ -413,6 +413,13 @@ dalNodes: {}
 #    storageSize: 50Gi
 #    attesterProfiles: tz1foXHgRzdYdaLgX6XhpZGxbBv42LZ6ubvE
 
+# Optional - a pod that injects slots for DAL - will go away once rollups do it
+#dal_deploy_slot_injector:
+#  enabled: true
+#  inject_using_account: mybaker
+#  node_rpc_url: http://tezos-baking-node-0.tezos-baking-node:8732
+#  dal_node_rpc_url: http://dal1:10732
+
 # When spinning up nodes, tezos-k8s will attempt to download a snapshot from a
 # known source. This should be a url to a json metadata file in the format
 # xtz-shots uses. If you want to sync from scratch or for a private chain, set
diff --git a/utils/config-generator.py b/utils/config-generator.py
index 5d5cfd646..82ebc248e 100755
--- a/utils/config-generator.py
+++ b/utils/config-generator.py
@@ -370,10 +370,11 @@ def expose_secret_key(account_name):
     if MY_POD_TYPE == "signing":
         return account_name in MY_POD_CONFIG.get("accounts")
 
-    if MY_POD_TYPE == "rollup":
+    if MY_POD_TYPE in [ "rollup", "slot-injector" ]:
         return account_name == MY_POD_CONFIG.get("operator_account")
     if MY_POD_TYPE == "slot-injector":
-        return True
+        # deploy all secret keys
+        return account_name == os.environ["INJECTOR_ACCOUNT"]
 
     if MY_POD_TYPE in ["node", "baker"]:
         baking_account = MY_POD_CONFIG.get("bake_using_account", "")