diff --git a/kubernetes/rpi5-cluster/.sops.yaml b/kubernetes/rpi5-cluster/.sops.yaml
new file mode 100644
index 0000000..02c17a3
--- /dev/null
+++ b/kubernetes/rpi5-cluster/.sops.yaml
@@ -0,0 +1,4 @@
+creation_rules:
+  - path_regex: .*.yaml
+    encrypted_regex: ^(data|stringData)$
+    pgp: 6CEA91DDB1964869C94DCEC7AF6E3BB1B44F669B