diff --git a/kitchen/kustomization.yaml b/kitchen/kustomization.yaml
index 122cd52..892f5b9 100644
--- a/kitchen/kustomization.yaml
+++ b/kitchen/kustomization.yaml
@@ -3,6 +3,7 @@ kind: Kustomization
 
 resources:
 - kitchen.yaml
+- secrets.yaml
 
 configMapGenerator:
 - name: kitchen
@@ -11,13 +12,6 @@ configMapGenerator:
   files:
   - config.yaml
 
-secretGenerator:
-- name: imagepull-gitea
-  namespace: kitchen
-  type: kubernetes.io/dockerconfigjson
-  files:
-  - .dockerconfigjson
-
 patches:
 - patch: |-
     apiVersion: apps/v1
diff --git a/kitchen/secrets.yaml b/kitchen/secrets.yaml
new file mode 100644
index 0000000..713cb8f
--- /dev/null
+++ b/kitchen/secrets.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: imagepull-gitea
+  namespace: kitchen
+spec:
+  encryptedData:
+    .dockerconfigjson: AgBu444RgsmWrrb7+BnJnnkToVtuoAA4RdwBT8MmhnqPVEDZzqVVC/qLaP43sOBJOPLJzR/6NmqY6gYFpSWrBbIVCtOrT8XmOqIW2ZCPgR/mJGCs6rR71ArVHJMDn/YXed37p6XqXlS/k6E8gmzXOFqTj1br8R6JwGedwC6ThLW6+qmR06d7kIGcR3dO4fYSzwiWG9zO4q0z9EB+TN8fSpD5vQJnvOEFkN1jKDxKbXYGX7EzyXttujsWeLyXPp0NwM0ROGM9eZRG3bUhOVshJ75LIF6oKt2xmKonT9A7oTpr+ChBtJxeU5dQvhSXFaGYagmWGgoO7RbNFueORWtJu7E/mVoDJSGuzWViW5Wk5Hwd8C9+kRy5DIehKmwJz6XlLAyzBULE9jAyZ826ne4dxljCYWsIgboGrW0/fZE/F9ZlAfrnUhuxdh0g++GXQibJJ26jGv8dMy60/4ZK/G7yrkug3MUhfUt/RTxcK+GL+v6fXRkIP57/rA2g4jWr+gcFlebZHjQC7caxi7BBLjoHqmdkbE1o1KGx9HnVOKeRNhzrotqNPEhE6vR7H066n+HhosJLhu44ouUf6Hgp5f2JDYl1Vp/TlyS5iv/eQiDk9wcZlWxvITPna9ENesN3oiBaXXnqF1aCwNCgZwRe7XhObm+t8CpJq4Hgq6utGBdfVhwN3rmYf6Z7GnHzfJHK4sx02VY5+BgnePNc+lZ0gDx4Qzq9g1h3I6NwlUsZ5RqSpUG2/nFY/tMD3NS2jrpMRBhjcLJU3hNOVAEkBL7sbTy8yyJ+ZFeRr2mY1dd+hhTaM5xOYgafeowjjd/lHO2i0g0KnM3R4uGDSrXxYyTr4ZSfjPQK2Ekw4tvwXmBqD0rpquwRMoHsTuwRX/tPSMRXsR+OWarusIlPQcs6e9xRXPcB0IM11ISp7q39eaY0JcUmWS/LZHsasElfEF18jOe4v2cxhqX4HZ/NsgZS2vywDTab/MP6U7n6cwQ6+xOdzh1AEKZTKpscmQQKYZSBbBHCB78=
+  template:
+    metadata:
+      name: imagepull-gitea
+      namespace: kitchen
+    type: kubernetes.io/dockerconfigjson