diff --git a/molgenis-jenkins/templates/molgenis-pipeline-env-secret.yaml b/molgenis-jenkins/templates/molgenis-pipeline-env-secret.yaml
index dd5763e..831a1ea 100644
--- a/molgenis-jenkins/templates/molgenis-pipeline-env-secret.yaml
+++ b/molgenis-jenkins/templates/molgenis-pipeline-env-secret.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.PipelineSecrets.Env }}
+{{- if .Values.PipelineSecrets.Env.Replace }}
 apiVersion: v1
 kind: Secret
 metadata:
diff --git a/molgenis-jenkins/templates/molgenis-pipeline-file-secret.yaml b/molgenis-jenkins/templates/molgenis-pipeline-file-secret.yaml
index d8ecbb6..e242f9d 100644
--- a/molgenis-jenkins/templates/molgenis-pipeline-file-secret.yaml
+++ b/molgenis-jenkins/templates/molgenis-pipeline-file-secret.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.PipelineSecrets.File }}
+{{- if .Values.PipelineSecrets.File.Replace }}
 apiVersion: v1
 kind: Secret
 metadata:
diff --git a/molgenis-jenkins/values.yaml b/molgenis-jenkins/values.yaml
index e18ab73..c3d8450 100644
--- a/molgenis-jenkins/values.yaml
+++ b/molgenis-jenkins/values.yaml
@@ -101,6 +101,8 @@ jenkins:
     # jenkins-agent: v1
 PipelineSecrets:
   Env:
+    # Set to false to keep existing secret
+    Replace: true
     # Passphrase for the pgp private key file
     pgpPassphrase: xxxx
     # Token for codecov.io service
@@ -110,6 +112,8 @@ PipelineSecrets:
     # Token for sonarcloud.io
     sonarToken: xxxx
   File:
+    # Set to false to keep existing secret
+    Replace: true
     # PGP Private key in ascii format used to sign artifacts
     PGPPrivateKeyAsc: |-
       -----BEGIN PGP PRIVATE KEY BLOCK-----