diff --git a/assets/kube-state-metrics/deployment.yaml b/assets/kube-state-metrics/deployment.yaml
index 643cf76593..44a88f83ed 100644
--- a/assets/kube-state-metrics/deployment.yaml
+++ b/assets/kube-state-metrics/deployment.yaml
@@ -33,7 +33,7 @@ spec:
         - --port=8081
         - --telemetry-host=127.0.0.1
         - --telemetry-port=8082
-        - --metric-denylist=kube_secret_labels
+        - --metric-denylist=kube_secret_labels,kube_*_annotations
         - --metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*]
         - |
           --metric-denylist=
diff --git a/jsonnet/components/kube-state-metrics.libsonnet b/jsonnet/components/kube-state-metrics.libsonnet
index 3b22e36a1b..fd068eefa8 100644
--- a/jsonnet/components/kube-state-metrics.libsonnet
+++ b/jsonnet/components/kube-state-metrics.libsonnet
@@ -133,7 +133,7 @@ function(params)
                   else
                     c {
                       args+: [
-                        '--metric-denylist=kube_secret_labels',
+                        '--metric-denylist=kube_secret_labels,kube_*_annotations',
                         '--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*]',
                       ],
                       securityContext: {},