diff --git a/infrastructure/03-traefik/shared/cert/kustomization.yaml b/infrastructure/03-traefik/shared/cert/kustomization.yaml
new file mode 100644
index 0000000..92aa104
--- /dev/null
+++ b/infrastructure/03-traefik/shared/cert/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- dc-secret-sealed.yaml
+- ionos-secret-sealed.yaml
+- tls-store.yaml
diff --git a/infrastructure/03-traefik/shared/kustomization.yaml b/infrastructure/03-traefik/shared/kustomization.yaml
index 3e58fd7..8522c61 100644
--- a/infrastructure/03-traefik/shared/kustomization.yaml
+++ b/infrastructure/03-traefik/shared/kustomization.yaml
@@ -3,8 +3,8 @@ kind: Kustomization
 
 resources:
   - foreign
+  - cert
   - base/traefik-middleware-default-headers.yaml
   - base/traefik-pvc.yaml
   - crds
-  - base/dc-secret-sealed.yaml
   - base/traefik-namespace.yaml