diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7ff023f..1cb62ac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,10 +4,18 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Added
+
+- Support the label `restarter.stackable.tech/ignore` on ConfigMaps and Secrets and the annotations
+  `restarter.stackable.tech/ignore-configmap.x` and `restarter.stackable.tech/ignore-secret.x` on
+  StatefulSets to exclude ConfigMaps and Secrets from the restarter controller ([#410]).
+
 ### Changed
 
 - Document Helm deployed RBAC permissions and remove unnecessary permissions ([#412]).
+- Bump stackable-operator to version 0.110.0 ([#410]).
 
+[#410]: https://github.com/stackabletech/commons-operator/pull/410
 [#412]: https://github.com/stackabletech/commons-operator/pull/412
 
 ## [26.3.0] - 2026-03-16
diff --git a/Cargo.lock b/Cargo.lock
index 038e8ea..b305a32 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1113,6 +1113,12 @@ version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
 
+[[package]]
+name = "humantime"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424"
+
 [[package]]
 name = "hyper"
 version = "1.8.1"
@@ -1501,17 +1507,18 @@ dependencies = [
 [[package]]
 name = "k8s-version"
 version = "0.1.3"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "darling",
  "regex",
- "snafu 0.8.9",
+ "snafu 0.9.0",
 ]
 
 [[package]]
 name = "kube"
-version = "3.0.1"
-source = "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acc5a6a69da2975ed9925d56b5dcfc9cc739b66f37add06785b7c9f6d1e88741"
 dependencies = [
  "k8s-openapi",
  "kube-client",
@@ -1522,8 +1529,9 @@ dependencies = [
 
 [[package]]
 name = "kube-client"
-version = "3.0.1"
-source = "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fcaf2d1f1a91e1805d4cd82e8333c022767ae8ffd65909bbef6802733a7dd40"
 dependencies = [
  "base64",
  "bytes",
@@ -1556,8 +1564,9 @@ dependencies = [
 
 [[package]]
 name = "kube-core"
-version = "3.0.1"
-source = "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f126d2db7a8b532ec1d839ece2a71e2485dc3bbca6cc3c3f929becaa810e719e"
 dependencies = [
  "derive_more",
  "form_urlencoded",
@@ -1574,8 +1583,9 @@ dependencies = [
 
 [[package]]
 name = "kube-derive"
-version = "3.0.1"
-source = "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6b9b97e121fce957f9cafc6da534abc4276983ab03190b76c09361e2df849fa"
 dependencies = [
  "darling",
  "proc-macro2",
@@ -1587,8 +1597,9 @@ dependencies = [
 
 [[package]]
 name = "kube-runtime"
-version = "3.0.1"
-source = "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c072737075826ee74d3e615e80334e41e617ca3d14fb46ef7cdfda822d6f15f2"
 dependencies = [
  "ahash",
  "async-broadcast",
@@ -2428,9 +2439,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.9"
+version = "0.103.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
+checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06"
 dependencies = [
  "ring",
  "rustls-pki-types",
@@ -2736,6 +2747,15 @@ dependencies = [
  "snafu-derive 0.8.9",
 ]
 
+[[package]]
+name = "snafu"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1d4bced6a69f90b2056c03dcff2c4737f98d6fb9e0853493996e1d253ca29c6"
+dependencies = [
+ "snafu-derive 0.9.0",
+]
+
 [[package]]
 name = "snafu-derive"
 version = "0.6.10"
@@ -2759,6 +2779,18 @@ dependencies = [
  "syn 2.0.116",
 ]
 
+[[package]]
+name = "snafu-derive"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54254b8531cafa275c5e096f62d48c81435d1015405a91198ddb11e967301d40"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.116",
+]
+
 [[package]]
 name = "socket2"
 version = "0.6.2"
@@ -2794,7 +2826,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 [[package]]
 name = "stackable-certs"
 version = "0.4.0"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "const-oid",
  "ecdsa",
@@ -2806,7 +2838,7 @@ dependencies = [
  "rsa",
  "sha2",
  "signature",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "stackable-shared",
  "tokio",
  "tokio-rustls",
@@ -2837,9 +2869,10 @@ dependencies = [
 
 [[package]]
 name = "stackable-operator"
-version = "0.107.1"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+version = "0.110.0"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
+ "base64",
  "clap",
  "const_format",
  "delegate",
@@ -2854,13 +2887,14 @@ dependencies = [
  "k8s-openapi",
  "kube",
  "product-config",
+ "rand 0.9.2",
  "regex",
  "schemars",
  "semver",
  "serde",
  "serde_json",
  "serde_yaml",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "stackable-operator-derive",
  "stackable-shared",
  "stackable-telemetry",
@@ -2877,7 +2911,7 @@ dependencies = [
 [[package]]
 name = "stackable-operator-derive"
 version = "0.3.1"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "darling",
  "proc-macro2",
@@ -2888,7 +2922,7 @@ dependencies = [
 [[package]]
 name = "stackable-shared"
 version = "0.1.0"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "jiff",
  "k8s-openapi",
@@ -2897,15 +2931,15 @@ dependencies = [
  "semver",
  "serde",
  "serde_yaml",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "strum",
  "time",
 ]
 
 [[package]]
 name = "stackable-telemetry"
-version = "0.6.2"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+version = "0.6.3"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "axum",
  "clap",
@@ -2916,7 +2950,7 @@ dependencies = [
  "opentelemetry-semantic-conventions",
  "opentelemetry_sdk",
  "pin-project",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "strum",
  "tokio",
  "tower",
@@ -2928,21 +2962,21 @@ dependencies = [
 
 [[package]]
 name = "stackable-versioned"
-version = "0.8.3"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+version = "0.9.0"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "schemars",
  "serde",
  "serde_json",
  "serde_yaml",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "stackable-versioned-macros",
 ]
 
 [[package]]
 name = "stackable-versioned-macros"
-version = "0.8.3"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+version = "0.9.0"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "convert_case",
  "convert_case_extras",
@@ -2959,13 +2993,14 @@ dependencies = [
 
 [[package]]
 name = "stackable-webhook"
-version = "0.9.0"
-source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#8425ce312cfadcc49c157bada79cac04c3ad5229"
+version = "0.9.1"
+source = "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#95490f2d703d20cf1895e5976fdc5fb8f02aa293"
 dependencies = [
  "arc-swap",
  "async-trait",
  "axum",
  "futures-util",
+ "humantime",
  "hyper",
  "hyper-util",
  "k8s-openapi",
@@ -2975,7 +3010,7 @@ dependencies = [
  "rand 0.9.2",
  "serde",
  "serde_json",
- "snafu 0.8.9",
+ "snafu 0.9.0",
  "stackable-certs",
  "stackable-shared",
  "stackable-telemetry",
diff --git a/Cargo.nix b/Cargo.nix
index 46246bf..99f578b 100644
--- a/Cargo.nix
+++ b/Cargo.nix
@@ -3480,6 +3480,14 @@ rec {
         ];
 
       };
+      "humantime" = rec {
+        crateName = "humantime";
+        version = "2.3.0";
+        edition = "2021";
+        sha256 = "092lpipp32ayz4kyyn4k3vz59j9blng36wprm5by0g2ykqr14nqk";
+        features = {
+        };
+      };
       "hyper" = rec {
         crateName = "hyper";
         version = "1.8.1";
@@ -4800,8 +4808,8 @@ rec {
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "k8s_version";
         authors = [
@@ -4819,7 +4827,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
         ];
         features = {
@@ -4830,14 +4838,9 @@ rec {
       };
       "kube" = rec {
         crateName = "kube";
-        version = "3.0.1";
+        version = "3.1.0";
         edition = "2024";
-        workspace_member = null;
-        src = pkgs.fetchgit {
-          url = "https://github.com/kube-rs/kube-rs";
-          rev = "fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5";
-          sha256 = "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n";
-        };
+        sha256 = "0hc7x38zdjdphmkx1b9pdyv3kiwwzkfbamjxjbcmx5x2knkadidc";
         authors = [
           "clux <sszynrae@gmail.com>"
           "Natalie Klestrup Röijezon <nat@nullable.se>"
@@ -4908,14 +4911,9 @@ rec {
       };
       "kube-client" = rec {
         crateName = "kube-client";
-        version = "3.0.1";
+        version = "3.1.0";
         edition = "2024";
-        workspace_member = null;
-        src = pkgs.fetchgit {
-          url = "https://github.com/kube-rs/kube-rs";
-          rev = "fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5";
-          sha256 = "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n";
-        };
+        sha256 = "0h6xlwrjg07npsdr0rgxiyp6f9q27hryi0ndsh2ih7m9y78z5jhg";
         libName = "kube_client";
         authors = [
           "clux <sszynrae@gmail.com>"
@@ -5041,7 +5039,7 @@ rec {
             name = "tokio";
             packageId = "tokio";
             optional = true;
-            features = [ "time" "signal" "sync" ];
+            features = [ "time" "signal" "sync" "rt" ];
           }
           {
             name = "tokio-util";
@@ -5141,14 +5139,9 @@ rec {
       };
       "kube-core" = rec {
         crateName = "kube-core";
-        version = "3.0.1";
+        version = "3.1.0";
         edition = "2024";
-        workspace_member = null;
-        src = pkgs.fetchgit {
-          url = "https://github.com/kube-rs/kube-rs";
-          rev = "fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5";
-          sha256 = "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n";
-        };
+        sha256 = "17ki1s0smv4vj8zkrk56phxxr1943sky5v1rv30jwlwbgbdx49pi";
         libName = "kube_core";
         authors = [
           "clux <sszynrae@gmail.com>"
@@ -5228,14 +5221,9 @@ rec {
       };
       "kube-derive" = rec {
         crateName = "kube-derive";
-        version = "3.0.1";
+        version = "3.1.0";
         edition = "2024";
-        workspace_member = null;
-        src = pkgs.fetchgit {
-          url = "https://github.com/kube-rs/kube-rs";
-          rev = "fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5";
-          sha256 = "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n";
-        };
+        sha256 = "1yj9z0niwdh9djvr0cdh7ac7chmw999xmimgkizrbkhz29zbkffn";
         procMacro = true;
         libName = "kube_derive";
         authors = [
@@ -5282,14 +5270,9 @@ rec {
       };
       "kube-runtime" = rec {
         crateName = "kube-runtime";
-        version = "3.0.1";
+        version = "3.1.0";
         edition = "2024";
-        workspace_member = null;
-        src = pkgs.fetchgit {
-          url = "https://github.com/kube-rs/kube-rs";
-          rev = "fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5";
-          sha256 = "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n";
-        };
+        sha256 = "1whmdwnq5nnzgkpldyql7p51grj19qrq0pk17r6yfvl2fmq76wn0";
         libName = "kube_runtime";
         authors = [
           "clux <sszynrae@gmail.com>"
@@ -8178,9 +8161,9 @@ rec {
       };
       "rustls-webpki" = rec {
         crateName = "rustls-webpki";
-        version = "0.103.9";
+        version = "0.103.12";
         edition = "2021";
-        sha256 = "0lwg1nnyv7pp2lfwwjhy81bxm233am99jnsp3iymdhd6k8827pyp";
+        sha256 = "01nxzkfd1l96jzp04svc7iznlkarzx3wb9p63a0i17rc4y2vnyc2";
         libName = "webpki";
         dependencies = [
           {
@@ -9127,6 +9110,34 @@ rec {
         };
         resolvedDefaultFeatures = [ "alloc" "default" "rust_1_61" "rust_1_65" "std" ];
       };
+      "snafu 0.9.0" = rec {
+        crateName = "snafu";
+        version = "0.9.0";
+        edition = "2018";
+        sha256 = "1ii9r99x5qcn754m624yzgb9hzvkqkrcygf0aqh0pyb9dbnvrm6i";
+        authors = [
+          "Jake Goulding <jake.goulding@gmail.com>"
+        ];
+        dependencies = [
+          {
+            name = "snafu-derive";
+            packageId = "snafu-derive 0.9.0";
+          }
+        ];
+        features = {
+          "backtrace" = [ "dep:backtrace" ];
+          "backtraces-impl-backtrace-crate" = [ "backtrace" ];
+          "default" = [ "std" "rust_1_81" ];
+          "futures" = [ "futures-core-crate" "pin-project" ];
+          "futures-core-crate" = [ "dep:futures-core-crate" ];
+          "futures-crate" = [ "dep:futures-crate" ];
+          "internal-dev-dependencies" = [ "futures-crate" ];
+          "pin-project" = [ "dep:pin-project" ];
+          "std" = [ "alloc" ];
+          "unstable-provider-api" = [ "snafu-derive/unstable-provider-api" ];
+        };
+        resolvedDefaultFeatures = [ "alloc" "default" "rust_1_81" "std" ];
+      };
       "snafu-derive 0.6.10" = rec {
         crateName = "snafu-derive";
         version = "0.6.10";
@@ -9189,6 +9200,42 @@ rec {
         };
         resolvedDefaultFeatures = [ "rust_1_61" ];
       };
+      "snafu-derive 0.9.0" = rec {
+        crateName = "snafu-derive";
+        version = "0.9.0";
+        edition = "2018";
+        sha256 = "0h0x61kyj4fvilcr2nj02l85shw1ika64vq9brf2gyna662ln9al";
+        procMacro = true;
+        libName = "snafu_derive";
+        authors = [
+          "Jake Goulding <jake.goulding@gmail.com>"
+        ];
+        dependencies = [
+          {
+            name = "heck";
+            packageId = "heck";
+            usesDefaultFeatures = false;
+          }
+          {
+            name = "proc-macro2";
+            packageId = "proc-macro2";
+            usesDefaultFeatures = false;
+          }
+          {
+            name = "quote";
+            packageId = "quote";
+            usesDefaultFeatures = false;
+          }
+          {
+            name = "syn";
+            packageId = "syn 2.0.116";
+            usesDefaultFeatures = false;
+            features = [ "clone-impls" "derive" "full" "parsing" "printing" "proc-macro" ];
+          }
+        ];
+        features = {
+        };
+      };
       "socket2" = rec {
         crateName = "socket2";
         version = "0.6.2";
@@ -9292,8 +9339,8 @@ rec {
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_certs";
         authors = [
@@ -9351,7 +9398,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "stackable-shared";
@@ -9391,7 +9438,7 @@ rec {
       "stackable-commons-operator" = rec {
         crateName = "stackable-commons-operator";
         version = "0.0.0-dev";
-        edition = "2021";
+        edition = "2024";
         crateBin = [
           {
             name = "stackable-commons-operator";
@@ -9473,19 +9520,23 @@ rec {
       };
       "stackable-operator" = rec {
         crateName = "stackable-operator";
-        version = "0.107.1";
+        version = "0.110.0";
         edition = "2024";
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_operator";
         authors = [
           "Stackable GmbH <info@stackable.de>"
         ];
         dependencies = [
+          {
+            name = "base64";
+            packageId = "base64";
+          }
           {
             name = "clap";
             packageId = "clap";
@@ -9549,6 +9600,10 @@ rec {
             name = "product-config";
             packageId = "product-config";
           }
+          {
+            name = "rand";
+            packageId = "rand 0.9.2";
+          }
           {
             name = "regex";
             packageId = "regex";
@@ -9577,7 +9632,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "stackable-operator-derive";
@@ -9650,8 +9705,8 @@ rec {
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         procMacro = true;
         libName = "stackable_operator_derive";
@@ -9685,8 +9740,8 @@ rec {
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_shared";
         authors = [
@@ -9730,7 +9785,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "strum";
@@ -9761,13 +9816,13 @@ rec {
       };
       "stackable-telemetry" = rec {
         crateName = "stackable-telemetry";
-        version = "0.6.2";
+        version = "0.6.3";
         edition = "2024";
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_telemetry";
         authors = [
@@ -9818,7 +9873,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "strum";
@@ -9871,13 +9926,13 @@ rec {
       };
       "stackable-versioned" = rec {
         crateName = "stackable-versioned";
-        version = "0.8.3";
+        version = "0.9.0";
         edition = "2024";
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_versioned";
         authors = [
@@ -9904,7 +9959,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "stackable-versioned-macros";
@@ -9915,13 +9970,13 @@ rec {
       };
       "stackable-versioned-macros" = rec {
         crateName = "stackable-versioned-macros";
-        version = "0.8.3";
+        version = "0.9.0";
         edition = "2024";
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         procMacro = true;
         libName = "stackable_versioned_macros";
@@ -9983,13 +10038,13 @@ rec {
       };
       "stackable-webhook" = rec {
         crateName = "stackable-webhook";
-        version = "0.9.0";
+        version = "0.9.1";
         edition = "2024";
         workspace_member = null;
         src = pkgs.fetchgit {
           url = "https://github.com/stackabletech/operator-rs.git";
-          rev = "8425ce312cfadcc49c157bada79cac04c3ad5229";
-          sha256 = "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3";
+          rev = "95490f2d703d20cf1895e5976fdc5fb8f02aa293";
+          sha256 = "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44";
         };
         libName = "stackable_webhook";
         authors = [
@@ -10013,6 +10068,10 @@ rec {
             name = "futures-util";
             packageId = "futures-util";
           }
+          {
+            name = "humantime";
+            packageId = "humantime";
+          }
           {
             name = "hyper";
             packageId = "hyper";
@@ -10057,7 +10116,7 @@ rec {
           }
           {
             name = "snafu";
-            packageId = "snafu 0.8.9";
+            packageId = "snafu 0.9.0";
           }
           {
             name = "stackable-certs";
diff --git a/Cargo.toml b/Cargo.toml
index 76451a1..2f6d4e8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -6,11 +6,11 @@ resolver = "2"
 version = "0.0.0-dev"
 authors = ["Stackable GmbH <info@stackable.tech>"]
 license = "OSL-3.0"
-edition = "2021"
+edition = "2024"
 repository = "https://github.com/stackabletech/commons-operator"
 
 [workspace.dependencies]
-stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.107.1", features = ["crds", "webhook"] }
+stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.110.0", features = ["crds", "webhook"] }
 
 anyhow = "1.0"
 built = { version = "0.8", features = ["chrono", "git2"] }
diff --git a/crate-hashes.json b/crate-hashes.json
index 2bebff2..1f3488f 100644
--- a/crate-hashes.json
+++ b/crate-hashes.json
@@ -1,17 +1,12 @@
 {
-  "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#kube-client@3.0.1": "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n",
-  "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#kube-core@3.0.1": "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n",
-  "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#kube-derive@3.0.1": "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n",
-  "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#kube-runtime@3.0.1": "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n",
-  "git+https://github.com/kube-rs/kube-rs?rev=fe69cc486ff8e62a7da61d64ec3ebbd9e64c43b5#kube@3.0.1": "1irm4g79crlxjm3iqrgvx0f6wxdcj394ky84q89pk9i36y2mlw3n",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#k8s-version@0.1.3": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-certs@0.4.0": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-operator-derive@0.3.1": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-operator@0.107.1": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-shared@0.1.0": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-telemetry@0.6.2": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-versioned-macros@0.8.3": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-versioned@0.8.3": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
-  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.107.1#stackable-webhook@0.9.0": "08ahxagis53c7bxnj53xgzv5l619av1lwfc67cswrsp2wcakzns3",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#k8s-version@0.1.3": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-certs@0.4.0": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-operator-derive@0.3.1": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-operator@0.110.0": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-shared@0.1.0": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-telemetry@0.6.3": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-versioned-macros@0.9.0": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-versioned@0.9.0": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
+  "git+https://github.com/stackabletech/operator-rs.git?tag=stackable-operator-0.110.0#stackable-webhook@0.9.1": "0svjfddsbx72mscsmg1nh581pkdb4ay8nia5gmly0wbfzj7wgq44",
   "git+https://github.com/stackabletech/product-config.git?tag=0.8.0#product-config@0.8.0": "1dz70kapm2wdqcr7ndyjji0lhsl98bsq95gnb2lw487wf6yr7987"
 }
\ No newline at end of file
diff --git a/docs/modules/commons-operator/pages/restarter.adoc b/docs/modules/commons-operator/pages/restarter.adoc
index e2e2c8b..7f5f887 100644
--- a/docs/modules/commons-operator/pages/restarter.adoc
+++ b/docs/modules/commons-operator/pages/restarter.adoc
@@ -30,3 +30,61 @@ Label:: `restarter.stackable.tech/enabled`
 
 The operator can restart StatefulSets when any referenced configuration object (ConfigMap or Secret) changes.
 To enable this, set the `restarter.stackable.tech/enabled` label on the StatefulSet to `true`.
+
+Annotation:: `restarter.stackable.tech/ignore-configmap.*`
+Annotation:: `restarter.stackable.tech/ignore-secret.*`
+
+These annotations can be added if the restarter is enabled on a StatefulSet, but some ConfigMaps or Secrets should be excluded from triggering a restart. `*` can be replaced with any value and is only used to make the annotation key unique.
+
+[source,yaml]
+----
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: statefulset-with-enabled-restarter
+  labels:
+    restarter.stackable.tech/enabled: "true"
+  annotations:
+    restarter.stackable.tech/ignore-configmap.0: hot-reloaded-configmap
+    restarter.stackable.tech/ignore-secret.0: hot-reloaded-secret
+spec:
+  template:
+    spec:
+      volumes:
+        - name: configuration
+          configMap:
+            name: hot-reloaded-configmap
+        - name: credentials
+          secret:
+            secretName: hot-reloaded-secret
+...
+----
+
+== ConfigMap/Secret
+
+Label:: `restarter.stackable.tech/ignore`
+
+If a ConfigMap or Secret is only used for initializing a StatefulSet or contains data which can be hot-reloaded, add the label `restarter.stackable.tech/ignore: "true"` to avoid unnecessary restarts of the StatefulSet Pods:
+
+[source,yaml]
+----
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: hot-reloaded-configmap
+  labels:
+    restarter.stackable.tech/ignore: "true"
+...
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: hot-reloaded-secret
+  labels:
+    restarter.stackable.tech/ignore: "true"
+...
+----
+
+Unlike the StatefulSet annotations `restarter.stackable.tech/ignore-configmap.\*` and `restarter.stackable.tech/ignore-secret.*`, this label affects every StatefulSet that references the labeled ConfigMaps or Secrets.
diff --git a/rust/operator-binary/src/main.rs b/rust/operator-binary/src/main.rs
index f8c587e..a9fb028 100644
--- a/rust/operator-binary/src/main.rs
+++ b/rust/operator-binary/src/main.rs
@@ -57,11 +57,11 @@ async fn main() -> anyhow::Result<()> {
     match opts.cmd {
         Command::Crd => {
             AuthenticationClass::merged_crd(AuthenticationClassVersion::V1Alpha1)?
-                .print_yaml_schema(built_info::PKG_VERSION, SerializeOptions::default())?;
+                .print_yaml_schema(built_info::PKG_VERSION, &SerializeOptions::default())?;
             S3Connection::merged_crd(S3ConnectionVersion::V1Alpha1)?
-                .print_yaml_schema(built_info::PKG_VERSION, SerializeOptions::default())?;
+                .print_yaml_schema(built_info::PKG_VERSION, &SerializeOptions::default())?;
             S3Bucket::merged_crd(S3BucketVersion::V1Alpha1)?
-                .print_yaml_schema(built_info::PKG_VERSION, SerializeOptions::default())?;
+                .print_yaml_schema(built_info::PKG_VERSION, &SerializeOptions::default())?;
         }
         Command::Run(CommonsOperatorRunArguments {
             common:
@@ -96,7 +96,7 @@ async fn main() -> anyhow::Result<()> {
             let sigterm_watcher = SignalWatcher::sigterm()?;
 
             let eos_checker =
-                EndOfSupportChecker::new(built_info::BUILT_TIME_UTC, maintenance.end_of_support)?
+                EndOfSupportChecker::new(built_info::BUILT_TIME_UTC, &maintenance.end_of_support)?
                     .run(sigterm_watcher.handle())
                     .map(anyhow::Ok);
 
diff --git a/rust/operator-binary/src/restart_controller/pod.rs b/rust/operator-binary/src/restart_controller/pod.rs
index 0fffaa7..7a7e2e1 100644
--- a/rust/operator-binary/src/restart_controller/pod.rs
+++ b/rust/operator-binary/src/restart_controller/pod.rs
@@ -220,23 +220,20 @@ async fn report_result(
         const EVICT_ERROR_MESSAGE: &str =
             "Cannot evict pod as it would violate the pod's disruption budget.";
 
-        // TODO: We need Rust 1.88 and 2024 edition for if-let-chains
-        if let kube::Error::Api(s) = evict_pod_error {
-            if let Status {
+        if let kube::Error::Api(s) = evict_pod_error
+            && let Status {
                 code: TOO_MANY_REQUESTS_HTTP_CODE,
                 message: error_message,
                 ..
             } = s.deref()
-            {
-                if error_message == EVICT_ERROR_MESSAGE {
-                    tracing::info!(
-                        k8s.object.ref = %pod_ref,
-                        error = %evict_pod_error,
-                        "Tried to evict Pod, but wasn't allowed to do so, as it would violate the Pod's disruption budget. Retrying later"
-                    );
-                    return;
-                }
-            }
+            && error_message == EVICT_ERROR_MESSAGE
+        {
+            tracing::info!(
+                k8s.object.ref = %pod_ref,
+                error = %evict_pod_error,
+                "Tried to evict Pod, but wasn't allowed to do so, as it would violate the Pod's disruption budget. Retrying later"
+            );
+            return;
         }
     }
 
diff --git a/rust/operator-binary/src/restart_controller/statefulset.rs b/rust/operator-binary/src/restart_controller/statefulset.rs
index 2cbdd92..c276976 100644
--- a/rust/operator-binary/src/restart_controller/statefulset.rs
+++ b/rust/operator-binary/src/restart_controller/statefulset.rs
@@ -1,4 +1,9 @@
-use std::{collections::BTreeMap, future::Future, sync::Arc, time::Duration};
+use std::{
+    collections::{BTreeMap, BTreeSet},
+    future::Future,
+    sync::Arc,
+    time::Duration,
+};
 
 use futures::{Stream, StreamExt, TryStream, stream};
 use serde_json::json;
@@ -128,13 +133,20 @@ pub async fn start<F>(
                 trigger_all(
                     {
                         let cm_reader = cm_store.as_reader();
-                        reflector(cm_store, metadata_watcher(cms, watcher::Config::default()))
-                            .inspect(move |_| {
-                                if let Some(tx) = cm_store_tx.take() {
-                                    tx.init(cm_reader.clone());
-                                }
-                            })
-                            .touched_objects()
+                        reflector(
+                            cm_store,
+                            metadata_watcher(
+                                cms,
+                                watcher::Config::default()
+                                    .labels("restarter.stackable.tech/ignore != true"),
+                            ),
+                        )
+                        .inspect(move |_| {
+                            if let Some(tx) = cm_store_tx.take() {
+                                tx.init(cm_reader.clone());
+                            }
+                        })
+                        .touched_objects()
                     },
                     sts_store.as_reader(),
                 ),
@@ -143,7 +155,11 @@ pub async fn start<F>(
                         let secret_reader = secret_store.as_reader();
                         reflector(
                             secret_store,
-                            metadata_watcher(secrets, watcher::Config::default()),
+                            metadata_watcher(
+                                secrets,
+                                watcher::Config::default()
+                                    .labels("restarter.stackable.tech/ignore != true"),
+                            ),
                         )
                         .inspect(move |_| {
                             if let Some(tx) = secret_store_tx.take() {
@@ -235,11 +251,13 @@ pub async fn get_updated_restarter_annotations(
     let ns = sts.metadata.namespace.as_deref().expect(
         "A StatefulSet observed by a reflector (so send by Kubernetes) always has a namespace set",
     );
+
     let mut annotations = BTreeMap::<String, String>::new();
     let pod_specs = sts
         .spec
         .iter()
         .flat_map(|sts_spec| sts_spec.template.spec.as_ref());
+
     let cm_refs = pod_specs
         .clone()
         .flat_map(|pod_spec| {
@@ -269,19 +287,35 @@ pub async fn get_updated_restarter_annotations(
         })
         .map(|cm_ref| cm_ref.within(ns));
     let cms = ctx.cms.get().await.context(ConfigMapsUninitializedSnafu)?;
-    annotations.extend(cm_refs.flat_map(|cm_ref| cms.get(&cm_ref)).flat_map(|cm| {
-        Some((
-            format!(
-                "configmap.restarter.stackable.tech/{}",
-                cm.metadata.name.as_ref()?
-            ),
-            format!(
-                "{}/{}",
-                cm.metadata.uid.as_ref()?,
-                cm.metadata.resource_version.as_ref()?
-            ),
-        ))
-    }));
+    let ignored_cms = sts
+        .metadata
+        .annotations
+        .iter()
+        .flatten()
+        .filter_map(|(key, value)| {
+            key.starts_with("restarter.stackable.tech/ignore-configmap.")
+                .then_some(value)
+        })
+        .collect::<BTreeSet<_>>();
+    annotations.extend(
+        cm_refs
+            .map(|cm_ref| (cm_ref.name.clone(), cms.get(&cm_ref)))
+            .map(|(cm_name, cm)| {
+                (
+                    format!("configmap.restarter.stackable.tech/{cm_name}",),
+                    if let Some(cm) = cm
+                        && let Some(uid) = &cm.metadata.uid
+                        && let Some(resource_version) = &cm.metadata.resource_version
+                        && !ignored_cms.contains(&cm_name)
+                    {
+                        format!("{uid}/{resource_version}",)
+                    } else {
+                        "changes-ignored".to_owned()
+                    },
+                )
+            }),
+    );
+
     let secret_refs = pod_specs
         .flat_map(|pod_spec| {
             find_pod_refs(
@@ -305,23 +339,37 @@ pub async fn get_updated_restarter_annotations(
         })
         .map(|secret_ref| secret_ref.within(ns));
     let secrets = ctx.secrets.get().await.context(SecretsUninitializedSnafu)?;
+    let ignored_secrets = sts
+        .metadata
+        .annotations
+        .iter()
+        .flatten()
+        .filter(|annotation| {
+            annotation
+                .0
+                .starts_with("restarter.stackable.tech/ignore-secret.")
+        })
+        .map(|x| x.1)
+        .collect::<BTreeSet<_>>();
     annotations.extend(
         secret_refs
-            .flat_map(|secret_ref| secrets.get(&secret_ref))
-            .flat_map(|cm| {
-                Some((
-                    format!(
-                        "secret.restarter.stackable.tech/{}",
-                        cm.metadata.name.as_ref()?
-                    ),
-                    format!(
-                        "{}/{}",
-                        cm.metadata.uid.as_ref()?,
-                        cm.metadata.resource_version.as_ref()?
-                    ),
-                ))
+            .map(|secret_ref| (secret_ref.name.clone(), secrets.get(&secret_ref)))
+            .map(|(secret_name, secret)| {
+                (
+                    format!("secret.restarter.stackable.tech/{secret_name}",),
+                    if let Some(secret) = secret
+                        && let Some(uid) = &secret.metadata.uid
+                        && let Some(resource_version) = &secret.metadata.resource_version
+                        && !ignored_secrets.contains(&secret_name)
+                    {
+                        format!("{uid}/{resource_version}",)
+                    } else {
+                        "changes-ignored".to_owned()
+                    },
+                )
             }),
     );
+
     Ok(annotations)
 }
 
diff --git a/tests/templates/kuttl/restarter/10-assert.yaml b/tests/templates/kuttl/restarter/10-assert.yaml
index 8926a3d..dbf238f 100644
--- a/tests/templates/kuttl/restarter/10-assert.yaml
+++ b/tests/templates/kuttl/restarter/10-assert.yaml
@@ -1,12 +1,12 @@
 ---
 apiVersion: kuttl.dev/v1beta1
 kind: TestAssert
-timeout: 30
+timeout: 120
 ---
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
-  name: sleep
+  name: test
 status:
   readyReplicas: 1
   replicas: 1
diff --git a/tests/templates/kuttl/restarter/10-create-test-resources.yaml b/tests/templates/kuttl/restarter/10-create-test-resources.yaml
new file mode 100644
index 0000000..0bc86fc
--- /dev/null
+++ b/tests/templates/kuttl/restarter/10-create-test-resources.yaml
@@ -0,0 +1,127 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-not-ignored
+data:
+  revision: "1"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-not-ignored
+stringData:
+  revision: "1"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-self-ignored
+  annotations:
+    restarter.stackable.tech/ignore: "true"
+data:
+  revision: "1"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-self-ignored
+  annotations:
+    restarter.stackable.tech/ignore: "true"
+stringData:
+  revision: "1"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-ignored-in-statefulset
+data:
+  revision: "1"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-ignored-in-statefulset
+stringData:
+  revision: "1"
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: test
+  labels:
+    restarter.stackable.tech/enabled: "true"
+    restarter.stackable.tech/ignore-configmap.0: configmap-ignored-in-statefulset
+    restarter.stackable.tech/ignore-secret.0: secret-ignored-in-statefulset
+spec:
+  selector:
+    matchLabels:
+      app: test
+  serviceName: test
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: test
+    spec:
+      serviceAccount: integration-tests-sa
+      volumes:
+        - name: configmap-not-ignored
+          configMap:
+            name: configmap-not-ignored
+        - name: secret-not-ignored
+          secret:
+            secretName: secret-not-ignored
+        - name: configmap-self-ignored
+          configMap:
+            name: configmap-self-ignored
+        - name: secret-self-ignored
+          secret:
+            secretName: secret-self-ignored
+        - name: configmap-ignored-in-statefulset
+          configMap:
+            name: configmap-ignored-in-statefulset
+        - name: secret-ignored-in-statefulset
+          secret:
+            secretName: secret-ignored-in-statefulset
+      containers:
+        - name: test
+          image: alpine
+          command:
+            - sleep
+          args:
+            - infinity
+          volumeMounts:
+            - mountPath: /config/configmap-not-ignored-subpath/revision
+              name: configmap-not-ignored
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+            - mountPath: /config/secret-not-ignored-subpath/revision
+              name: secret-not-ignored
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+            - mountPath: /config/configmap-self-ignored
+              name: configmap-self-ignored
+            - mountPath: /config/secret-self-ignored
+              name: secret-self-ignored
+            - mountPath: /config/configmap-self-ignored-subpath/revision
+              name: configmap-self-ignored
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+            - mountPath: /config/secret-self-ignored-subpath/revision
+              name: secret-self-ignored
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+            - mountPath: /config/configmap-ignored-in-statefulset
+              name: configmap-ignored-in-statefulset
+            - mountPath: /config/secret-ignored-in-statefulset
+              name: secret-ignored-in-statefulset
+            - mountPath: /config/configmap-ignored-in-statefulset-subpath/revision
+              name: configmap-ignored-in-statefulset
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+            - mountPath: /config/secret-ignored-in-statefulset-subpath/revision
+              name: secret-ignored-in-statefulset
+              # Use a subPath, so that changes are only visible after a restart.
+              subPath: revision
+      terminationGracePeriodSeconds: 5
diff --git a/tests/templates/kuttl/restarter/10-sleep.yaml b/tests/templates/kuttl/restarter/10-sleep.yaml
deleted file mode 100644
index 4d592f6..0000000
--- a/tests/templates/kuttl/restarter/10-sleep.yaml
+++ /dev/null
@@ -1,44 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: sleep
-data:
-  property: value
----
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: sleep
-  labels:
-    restarter.stackable.tech/enabled: "true"
-spec:
-  selector:
-    matchLabels:
-      app: sleep
-  serviceName: "sleep"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        app: sleep
-    spec:
-      serviceAccount: integration-tests-sa
-      volumes:
-        - name: config
-          configMap:
-            name: sleep
-            items:
-              - key: property
-                path: property
-      containers:
-        - name: sleep
-          image: alpine
-          command:
-            - sleep
-          args:
-            - infinity
-          volumeMounts:
-            - name: config
-              mountPath: /config
-      terminationGracePeriodSeconds: 5
diff --git a/tests/templates/kuttl/restarter/20-assert.yaml b/tests/templates/kuttl/restarter/20-assert.yaml
index 5235897..42f197f 100644
--- a/tests/templates/kuttl/restarter/20-assert.yaml
+++ b/tests/templates/kuttl/restarter/20-assert.yaml
@@ -3,4 +3,20 @@ apiVersion: kuttl.dev/v1beta1
 kind: TestAssert
 timeout: 180
 commands:
-  - script: test "restarted" = $(kubectl exec sleep-0 -c sleep -n $NAMESPACE -- cat /config/property)
+  - script: |
+      . ../../../../templates/kuttl/restarter/test-script.sh
+
+      # Resources mounted via subPath are not hot-reloaded by Kubernetes.
+      # It is expected, that the restart controller ignored the annotated resources and that only
+      # the resources not mounted via subPath were updated.
+
+      assert_revision 1 configmap-not-ignored-subpath
+      assert_revision 1 secret-not-ignored-subpath
+      assert_revision 1 configmap-self-ignored-subpath
+      assert_revision 1 secret-self-ignored-subpath
+      assert_revision 2 configmap-self-ignored
+      assert_revision 2 secret-self-ignored
+      assert_revision 1 configmap-ignored-in-statefulset-subpath
+      assert_revision 1 secret-ignored-in-statefulset-subpath
+      assert_revision 2 configmap-ignored-in-statefulset
+      assert_revision 2 secret-ignored-in-statefulset
diff --git a/tests/templates/kuttl/restarter/20-hot-reload.yaml b/tests/templates/kuttl/restarter/20-hot-reload.yaml
new file mode 100644
index 0000000..3ef493e
--- /dev/null
+++ b/tests/templates/kuttl/restarter/20-hot-reload.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-self-ignored
+data:
+  revision: "2"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-self-ignored
+stringData:
+  revision: "2"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-ignored-in-statefulset
+data:
+  revision: "2"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-ignored-in-statefulset
+stringData:
+  revision: "2"
diff --git a/tests/templates/kuttl/restarter/20-update-cm.yaml b/tests/templates/kuttl/restarter/20-update-cm.yaml
deleted file mode 100644
index 0ac0446..0000000
--- a/tests/templates/kuttl/restarter/20-update-cm.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: sleep
-data:
-  property: restarted
diff --git a/tests/templates/kuttl/restarter/21-assert.yaml b/tests/templates/kuttl/restarter/21-assert.yaml
new file mode 100644
index 0000000..974de6f
--- /dev/null
+++ b/tests/templates/kuttl/restarter/21-assert.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: kuttl.dev/v1beta1
+kind: TestAssert
+timeout: 180
+commands:
+  - script: |
+      . ../../../../templates/kuttl/restarter/test-script.sh
+
+      # After a restart, all resources should have been updated.
+
+      assert_revision 2 configmap-not-ignored-subpath
+      assert_revision 2 secret-not-ignored-subpath
+      assert_revision 2 configmap-self-ignored-subpath
+      assert_revision 2 secret-self-ignored-subpath
+      assert_revision 2 configmap-self-ignored
+      assert_revision 2 secret-self-ignored
+      assert_revision 2 configmap-ignored-in-statefulset-subpath
+      assert_revision 2 secret-ignored-in-statefulset-subpath
+      assert_revision 2 configmap-ignored-in-statefulset
+      assert_revision 2 secret-ignored-in-statefulset
diff --git a/tests/templates/kuttl/restarter/21-trigger-restart.yaml b/tests/templates/kuttl/restarter/21-trigger-restart.yaml
new file mode 100644
index 0000000..08650bf
--- /dev/null
+++ b/tests/templates/kuttl/restarter/21-trigger-restart.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-not-ignored
+data:
+  revision: "2"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secret-not-ignored
+stringData:
+  revision: "2"
diff --git a/tests/templates/kuttl/restarter/test-script.sh b/tests/templates/kuttl/restarter/test-script.sh
new file mode 100644
index 0000000..b2e69dc
--- /dev/null
+++ b/tests/templates/kuttl/restarter/test-script.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/env sh
+
+get_revision () {
+    resource="$1"
+
+    kubectl exec test-0 \
+        --namespace "$NAMESPACE" \
+        --container test -- \
+        cat "/config/$resource/revision"
+}
+
+assert_revision () {
+    expected_value="$1"
+    resource="$2"
+
+    actual_value="$(get_revision "$resource")"
+    if test "$expected_value" = "$actual_value"
+    then
+        echo "[PASS] $resource contains expected value"
+    else
+        echo "[FAIL] $resource does not contain expected value: " \
+             "expected: $expected_value != actual: $actual_value"
+        exit 1
+    fi
+}