diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-rolebinding.yaml b/apps/kube-dashboard/base/kube-dashboard-rolebinding.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/base/kube-dashboard-rolebinding.yaml
rename to apps/kube-dashboard/base/kube-dashboard-rolebinding.yaml
diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-serviceaccount.yaml b/apps/kube-dashboard/base/kube-dashboard-serviceaccount.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/base/kube-dashboard-serviceaccount.yaml
rename to apps/kube-dashboard/base/kube-dashboard-serviceaccount.yaml
diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-ui-ingress.yaml b/apps/kube-dashboard/base/kube-dashboard-ui-ingress.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/base/kube-dashboard-ui-ingress.yaml
rename to apps/kube-dashboard/base/kube-dashboard-ui-ingress.yaml
diff --git a/infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml b/apps/kube-dashboard/base/kube-dashboard-user-secret.yaml
similarity index 58%
rename from infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml
rename to apps/kube-dashboard/base/kube-dashboard-user-secret.yaml
index faffec2..546a142 100644
--- a/infrastructure/06-kube-dashboard/base/kube-dashboard-user-secret.yaml
+++ b/apps/kube-dashboard/base/kube-dashboard-user-secret.yaml
@@ -1,3 +1,6 @@
+# Create long-live bearer token
+# retrieve with: `kubectl get secret dashboard-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d`
+
 apiVersion: v1
 kind: Secret
 metadata:
diff --git a/infrastructure/06-kube-dashboard/kustomization.yaml b/apps/kube-dashboard/kustomization.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/kustomization.yaml
rename to apps/kube-dashboard/kustomization.yaml
diff --git a/infrastructure/06-kube-dashboard/patches/dashboard-insecure-access.yaml b/apps/kube-dashboard/patches/dashboard-insecure-access.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/patches/dashboard-insecure-access.yaml
rename to apps/kube-dashboard/patches/dashboard-insecure-access.yaml
diff --git a/infrastructure/06-kube-dashboard/patches/dashboard-insecure-service.yaml b/apps/kube-dashboard/patches/dashboard-insecure-service.yaml
similarity index 100%
rename from infrastructure/06-kube-dashboard/patches/dashboard-insecure-service.yaml
rename to apps/kube-dashboard/patches/dashboard-insecure-service.yaml
diff --git a/infrastructure/06-sealed-secrets/kustomization.yaml b/infrastructure/06-sealed-secrets/kustomization.yaml
new file mode 100644
index 0000000..c306ec4
--- /dev/null
+++ b/infrastructure/06-sealed-secrets/kustomization.yaml
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: sealed-secrets
+
+helmCharts:
+- name: sealed-secrets
+  includeCRDs: true
+  version: 2.15.2
+  repo: https://bitnami-labs.github.io/sealed-secrets
+  # valuesFile: base/values.yaml