diff --git a/.gitignore b/.gitignore
index d23374e..c581fe4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,6 +9,7 @@ ca-key.pem
 ca.csr                     
 ca.pem                     
 encryption-config.yaml     
+!configs/encryption-config.yaml     
 kube-controller-manager-csr.json
 kube-controller-manager-key.pem
 kube-controller-manager.csr
diff --git a/configs/encryption-config.yaml b/configs/encryption-config.yaml
new file mode 100644
index 0000000..866e5ab
--- /dev/null
+++ b/configs/encryption-config.yaml
@@ -0,0 +1,11 @@
+kind: EncryptionConfig
+apiVersion: v1
+resources:
+  - resources:
+      - secrets
+    providers:
+      - aescbc:
+          keys:
+            - name: key1
+              secret: ${ENCRYPTION_KEY}
+      - identity: {}
\ No newline at end of file