diff --git a/infra/crossplane/templates/argocd.yaml b/infra/crossplane/templates/argocd.yaml
index 69dec8a..948540e 100644
--- a/infra/crossplane/templates/argocd.yaml
+++ b/infra/crossplane/templates/argocd.yaml
@@ -22,6 +22,23 @@ spec:
         key: kv/argocd/provider-argocd
         property: token
 
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: prod-kubeconfig
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: prod-kubeconfig
+  data:
+    - secretKey: kubeconfig
+      remoteRef:
+        key: kv/argocd/prd
+        property: kubeconfig
+
 ---
 apiVersion: argocd.crossplane.io/v1alpha1
 kind: ProviderConfig
@@ -37,3 +54,21 @@ spec:
       namespace: crossplane
       name: argocd-secret
       key: authToken
+
+---
+apiVersion: cluster.argocd.crossplane.io/v1alpha1
+kind: Cluster
+metadata:
+  name: prd-cluster-kubeconfig
+  labels:
+    purpose: prd
+spec:
+  forProvider:
+    name: prd-cluster-kubeconfig
+    config:
+      kubeconfigSecretRef:
+        name: prod-kubeconfig
+        namespace: crossplane
+        key: kubeconfig
+  providerConfigRef:
+    name: argocd-provider