diff --git a/jupyterhub/templates/extraManifests.yaml b/jupyterhub/templates/extraManifests.yaml
new file mode 100644
index 0000000000..2855904ec7
--- /dev/null
+++ b/jupyterhub/templates/extraManifests.yaml
@@ -0,0 +1,4 @@
+{{ range .Values.extraObjects }}
+---
+{{ tpl (toYaml .) $ }}
+{{ end }}
\ No newline at end of file
diff --git a/jupyterhub/values.schema.yaml b/jupyterhub/values.schema.yaml
index 51324ebeb9..6b0324352f 100644
--- a/jupyterhub/values.schema.yaml
+++ b/jupyterhub/values.schema.yaml
@@ -2925,3 +2925,8 @@ properties:
           A flag that should only be set to true temporarily when experiencing a
           deprecation message that contain censored content that you wish to
           reveal.
+
+  extraObjects:
+    type: array
+    description: |
+      Any additional K8s manifests to deploy with the chart
diff --git a/jupyterhub/values.yaml b/jupyterhub/values.yaml
index 96dd9bb714..57b494a71a 100644
--- a/jupyterhub/values.yaml
+++ b/jupyterhub/values.yaml
@@ -659,3 +659,26 @@ debug:
 
 global:
   safeToShowValues: false
+
+# -- Array of extra K8s manifests to deploy
+extraObjects: []
+  # example:
+  # - apiVersion: secrets-store.csi.x-k8s.io/v1
+  #   kind: SecretProviderClass
+  #   metadata:
+  #     name: singleuser-hub-secrets-store
+  #   spec:
+  #     provider: aws
+  #     parameters:
+  #       objects: |
+  #         - objectName: "singleuser-secret"
+  #           objectType: "secretsmanager"
+  #           jmesPath:
+  #               - path: "somevar"
+  #                 objectAlias: "somevalue"
+  #     secretObjects:
+  #     - data:
+  #       - key: somevalue
+  #         objectName: somevalue
+  #       secretName: singleuser-secret
+  #       type: Opaque