diff --git a/cluster/crds/external-secrets/crds.yaml b/cluster/crds/external-secrets/crds.yaml
new file mode 100644
index 0000000..ae88a33
--- /dev/null
+++ b/cluster/crds/external-secrets/crds.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: external-secrets-crd-source
+  namespace: flux-system
+spec:
+  interval: 30m
+  url: https://github.com/external-secrets/external-secrets.git
+  ref:
+    # renovate: registryUrl=https://charts.external-secrets.io chart=external-secrets
+    tag: v0.3.7
+  ignore: |
+    # exclude all
+    /*
+    # path to crds
+    !/deploy/crds/
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: external-secrets-crds
+  namespace: flux-system
+spec:
+  interval: 15m
+  prune: false
+  wait: true
+  sourceRef:
+    kind: GitRepository
+    name: external-secrets-crd-source
+
diff --git a/cluster/crds/external-secrets/kustomization.yaml b/cluster/crds/external-secrets/kustomization.yaml
new file mode 100644
index 0000000..2ed3b35
--- /dev/null
+++ b/cluster/crds/external-secrets/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - crds.yaml
diff --git a/cluster/crds/kustomization.yaml b/cluster/crds/kustomization.yaml
index 15e57e2..f2ee43c 100644
--- a/cluster/crds/kustomization.yaml
+++ b/cluster/crds/kustomization.yaml
@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - traefik
+ - external-secrets