diff --git a/configs/encryption-config.yaml b/configs/encryption-config.yaml
new file mode 100644
index 0000000..47259e1
--- /dev/null
+++ b/configs/encryption-config.yaml
@@ -0,0 +1,11 @@
+apiVersion: apiserver.config.k8s.io/v1
+kind: EncryptionConfiguration
+resources:
+  - resources:
+      - secrets
+    providers:
+      - aescbc:
+          keys:
+            - name: key
+              secret: ${ENCRYPTION_KEY}
+      - identity: {}