diff --git a/external-secrets/templates/secret-store.yaml b/external-secrets/templates/secret-store.yaml
new file mode 100644
index 0000000..969647f
--- /dev/null
+++ b/external-secrets/templates/secret-store.yaml
@@ -0,0 +1,14 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: vault
+spec:
+  provider:
+    vault:
+      server: "https://https://vault.internal.prd.durp.info"
+      path: "secrets"
+      version: "v2"
+      auth:
+        tokenSecretRef:
+          name: "vault-token"
+          key: "token"