diff --git a/charts/workflows/Chart.yaml b/charts/workflows/Chart.yaml
index 85f1d667a..a5d6624c0 100644
--- a/charts/workflows/Chart.yaml
+++ b/charts/workflows/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: workflows
 description: Data Analysis workflow orchestration
 type: application
-version: 0.13.67
+version: 0.13.68
 dependencies:
   - name: argo-workflows
     repository: https://argoproj.github.io/argo-helm
diff --git a/charts/workflows/templates/inject-envoy-sidecar-clusterpolicy.yaml b/charts/workflows/templates/inject-envoy-sidecar-clusterpolicy.yaml
index 11b271216..fc84b8128 100644
--- a/charts/workflows/templates/inject-envoy-sidecar-clusterpolicy.yaml
+++ b/charts/workflows/templates/inject-envoy-sidecar-clusterpolicy.yaml
@@ -99,6 +99,13 @@ spec:
                   # GraphQL server
                   - |
                     cat > /etc/envoy/envoy.yaml << 'ENVOYEOF'
+                    admin:
+                      address:
+                        socket_address:
+                          address: 0.0.0.0
+                          port_value: 9901
+                      allow_paths:
+                      - exact: /ready
                     static_resources:
                       listeners:
                       - name: envoy-local-graph-proxy
@@ -320,12 +327,20 @@ spec:
                   - "--log-level"
                   - "{{ .Values.authenticatedWorkflows.envoy.logLevel | default "warn" }}"
                 startupProbe:
-                  tcpSocket:
-                    port: 6000
+                  httpGet:
+                    port: 9901
+                    path: /ready
                   initialDelaySeconds: 1
                   periodSeconds: 1
-                  failureThreshold: 30
+                  failureThreshold: 60
                   timeoutSeconds: 1
+                readinessProbe:
+                  httpGet:
+                    port: 9901
+                    path: /ready
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
                 volumeMounts:
                   - name: workflows-envoy-config
                     mountPath: /etc/envoy
diff --git a/charts/workflows/values.yaml b/charts/workflows/values.yaml
index 86c014488..c24ff09f6 100644
--- a/charts/workflows/values.yaml
+++ b/charts/workflows/values.yaml
@@ -299,8 +299,8 @@ authenticatedWorkflows:
     resources:
       requests:
         cpu: 100m
-        memory: 32Mi
+        memory: 128Mi
       limits:
         # limit range doesn't allow a smaller value
         cpu: 1000m
-        memory: 64Mi
+        memory: 256Mi