diff --git a/clusters/prod/infrastructure.yaml b/clusters/prod/infrastructure.yaml
index c2b48f0..8b4ca70 100644
--- a/clusters/prod/infrastructure.yaml
+++ b/clusters/prod/infrastructure.yaml
@@ -28,6 +28,10 @@ spec:
   dependsOn:
     - name: cluster-vars
     - name: infrastructure-core
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
   postBuild:
     substituteFrom:
       - kind: Secret