diff --git a/dmz/vault/templates/secrets.yaml b/dmz/vault/templates/secrets.yaml
new file mode 100644
index 0000000..de082ff
--- /dev/null
+++ b/dmz/vault/templates/secrets.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vault-token-g955r
+  annotations:
+    kubernetes.io/service-account.name: vault
+type: kubernetes.io/service-account-token