diff --git a/infrastructure/vpa/admissioncontroller-patch.yaml b/infrastructure/vpa/admissioncontroller-patch.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..fe74d08803ec5b8f1fbd43154f0d201251c20c3e
--- /dev/null
+++ b/infrastructure/vpa/admissioncontroller-patch.yaml
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/containers/0/args
+  value: []
+- op: add
+  path: /spec/template/spec/containers/0/args/-
+  value: --client-ca-file=/etc/tls-certs/ca.crt
+- op: add
+  path: /spec/template/spec/containers/0/args/-
+  value: --tls-private-key=/etc/tls-certs/tls.key
+- op: add
+  path: /spec/template/spec/containers/0/args/-
+  value: --tls-cert-file=/etc/tls-certs/tls.crt
\ No newline at end of file
diff --git a/infrastructure/vpa/kustomization.yaml b/infrastructure/vpa/kustomization.yaml
index ccb0a0498e24301609dfc5c28aa927dd67fe7f5b..5b8c97753e5a5d30937cdb9ad29783c5dbd7329b 100644
--- a/infrastructure/vpa/kustomization.yaml
+++ b/infrastructure/vpa/kustomization.yaml
@@ -18,6 +18,12 @@ patches:
       version: v1
       group: apps
       kind: Deployment
+  - path: admissioncontroller-patch.yaml
+    target:
+      version: v1
+      group: apps
+      kind: Deployment
+      name: vpa-admission-controller
 
 components:
   - ../../shared/components/namespace-restricted