diff --git a/cluster/base/ks.yaml b/cluster/base/ks.yaml
index 6f62c10..8c8cd15 100644
--- a/cluster/base/ks.yaml
+++ b/cluster/base/ks.yaml
@@ -1,5 +1,19 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
+metadata:
+  name: cluster-secrets
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  path: ./cluster/secrets
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
 metadata:
   name: crds
   namespace: flux-system
@@ -22,6 +36,7 @@ spec:
   interval: 10m
   dependsOn:
     - name: crds
+    - name: cluster-secrets
   path: ./cluster/core
   prune: false
   sourceRef:
@@ -49,6 +64,7 @@ spec:
   interval: 10m
   dependsOn:
     - name: core
+    - name: cluster-secrets
   path: ./cluster/apps
   prune: true
   sourceRef:
diff --git a/cluster/base/cluster-secrets.sops.yaml b/cluster/secrets/cluster-secrets.sops.yaml
similarity index 100%
rename from cluster/base/cluster-secrets.sops.yaml
rename to cluster/secrets/cluster-secrets.sops.yaml
diff --git a/cluster/base/cluster-settings.yaml b/cluster/secrets/cluster-settings.yaml
similarity index 100%
rename from cluster/base/cluster-settings.yaml
rename to cluster/secrets/cluster-settings.yaml
diff --git a/cluster/secrets/kustomization.yaml b/cluster/secrets/kustomization.yaml
new file mode 100644
index 0000000..970b3ed
--- /dev/null
+++ b/cluster/secrets/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./cluster-secrets.sops.yaml
+- ./cluster-settings.yaml
\ No newline at end of file