diff --git a/kubernetes/infrastructure/sealed-secrets/kustomization.yaml b/kubernetes/infrastructure/sealed-secrets/kustomization.yaml
new file mode 100644
index 0000000..3cbb765
--- /dev/null
+++ b/kubernetes/infrastructure/sealed-secrets/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - sealed-secrets.yaml
diff --git a/kubernetes/infrastructure/sealed-secrets/sealed-secrets.yaml b/kubernetes/infrastructure/sealed-secrets/sealed-secrets.yaml
new file mode 100644
index 0000000..bf61b3e
--- /dev/null
+++ b/kubernetes/infrastructure/sealed-secrets/sealed-secrets.yaml
@@ -0,0 +1,26 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: sealed-secrets
+  namespace: kube-system
+spec:
+  interval: 12h
+  url: https://bitnami-labs.github.io/sealed-secrets
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: sealed-secrets
+  namespace: kube-system
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: sealed-secrets
+      version: "2.16.1"
+      sourceRef:
+        kind: HelmRepository
+        name: sealed-secrets
+        namespace: kube-system
+      interval: 12h