diff --git a/kubernetes/flux/config/cluster.yaml b/kubernetes/flux/config/cluster.yaml
index ecd3318..98bdb9a 100644
--- a/kubernetes/flux/config/cluster.yaml
+++ b/kubernetes/flux/config/cluster.yaml
@@ -30,8 +30,15 @@ spec:
   sourceRef:
     kind: GitRepository
     name: valinor
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
   postBuild:
     substituteFrom:
       - kind: ConfigMap
         name: cluster-settings
         optional: false
+      - kind: Secret
+        name: cluster-secrets
+        optional: false