A nice feature is to have checksum annotations for secrets and configmaps on the deployment which restarts the pods when they change