diff --git a/talos/deploy-integrations.sh b/talos/deploy-integrations.sh
new file mode 100755
index 0000000..17d6b7b
--- /dev/null
+++ b/talos/deploy-integrations.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# shellcheck disable=2312
+pushd integrations >/dev/null 2>&1 || exit 1
+
+rm -rf cni/charts
+envsubst < ../../kubernetes/apps/kube-system/cilium/app/values.yaml > cni/values.yaml
+kustomize build --enable-helm cni | kubectl apply -f -
+rm cni/values.yaml
+rm -rf cni/charts
+
+rm -rf kubelet-csr-approver/charts
+envsubst < ../../kubernetes/apps/system/kubelet-csr-approver/app/values.yaml > kubelet-csr-approver/values.yaml
+if ! kubectl get ns system >/dev/null 2>&1; then
+  kubectl create ns system
+fi
+kustomize build --enable-helm kubelet-csr-approver | kubectl apply -f -
+rm kubelet-csr-approver/values.yaml
+rm -rf kubelet-csr-approver/charts
diff --git a/talos/generate-clusterconfig.sh b/talos/generate-clusterconfig.sh
new file mode 100755
index 0000000..5136207
--- /dev/null
+++ b/talos/generate-clusterconfig.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+# Generate a new config using talhelper
+talhelper genconfig --env-file talenv.sops.yaml --secret-file talsecret.sops.yaml --config-file talconfig.yaml