diff --git a/cluster/core/external-secrets/external-secrets/helm-release.yaml b/cluster/core/external-secrets/external-secrets/helm-release.yaml
new file mode 100644
index 0000000..6078974
--- /dev/null
+++ b/cluster/core/external-secrets/external-secrets/helm-release.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: external-secrets
+  namespace: external-secrets
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://charts.external-secrets.io
+      chart: external-secrets
+      version: 0.3.7
+      sourceRef:
+        kind: HelmRepository
+        name: external-secrets-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    configInline:
+      installCRDs: false
+
diff --git a/cluster/core/external-secrets/external-secrets/kustomization.yaml b/cluster/core/external-secrets/external-secrets/kustomization.yaml
new file mode 100644
index 0000000..2fa2de2
--- /dev/null
+++ b/cluster/core/external-secrets/external-secrets/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
diff --git a/cluster/core/external-secrets/kustomization.yaml b/cluster/core/external-secrets/kustomization.yaml
new file mode 100644
index 0000000..cf78af6
--- /dev/null
+++ b/cluster/core/external-secrets/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - external-secrets
diff --git a/cluster/core/kustomization.yaml b/cluster/core/kustomization.yaml
index bf0a6d5..88687c7 100644
--- a/cluster/core/kustomization.yaml
+++ b/cluster/core/kustomization.yaml
@@ -3,3 +3,5 @@ kind: Kustomization
 resources:
   - namespaces
   - networking
+  - external-secrets
+