diff --git a/tf/cloudflare_tunnels.tf b/tf/cloudflare_tunnels.tf
index bba34a61..39aac066 100644
--- a/tf/cloudflare_tunnels.tf
+++ b/tf/cloudflare_tunnels.tf
@@ -64,4 +64,33 @@ output "cloudflare_tunnel_token_mediabox" {
 
 output "cloudflare_tunnel_cname_mediabox" {
   value = module.mediabox.cname
-}
\ No newline at end of file
+}
+
+variable "cloudflare_tunnel_secret_kubernetes" {
+  type      = string
+  sensitive = true
+}
+
+module "kubernetes" {
+  source     = "./tunnel"
+  name       = "kubernetes"
+  secret     = var.cloudflare_tunnel_secret_kubernetes
+  account_id = var.cloudflare_account_id
+  zone_id    = cloudflare_zone.gensokyo-zone_zone.id
+  subdomains = [
+    "k8s",
+  ]
+}
+
+output "cloudflare_tunnel_id_kubernetes" {
+  value = module.kubernetes.id
+}
+
+output "cloudflare_tunnel_token_kubernetes" {
+  value     = module.kubernetes.token
+  sensitive = true
+}
+
+output "cloudflare_tunnel_cname_kubernetes" {
+  value = module.kubernetes.cname
+}
diff --git a/tf/terraform.tfvars.sops b/tf/terraform.tfvars.sops
index 51d43933..39a15201 100644
--- a/tf/terraform.tfvars.sops
+++ b/tf/terraform.tfvars.sops
@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data: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,iv:HAMNqftFG/je5o4vvQ9Cr+2JKmhC4xhOiyipm5GPFuU=,tag:9xEBj110g2A2uqchLxhi0g==,type:str]",
+	"data": "ENC[AES256_GCM,data:W8uLdpRkQ4Co9FI1tLO/J+rnsBGoCOZfqJbTpaGCqBt/lhto4fZq+mUIS6zCtRuHQBjKKefLszXmeXlnrN65IjcanhYQ+r26YzfG2mEcLhkC5NC1S4PQfzUDewHImXuOSt9FAvB9IkWMfsc3ApZ0RQZADzmFVicem/aTvc0bBrlj5h2xIX/KoEROKrUF/4lw8U9Qi54Av8WUW/VJTnndBCTsCVwoR0OlZAcj+5FSG1zXTJJNmwJML5K724x+nuI3TXwMIh9s1Kct1ICfNIdYyA+Mv6FT2VY20ph+Th3s4+u68Iqrzh7Z3rXoz6V74Q7TYHNSbO/4Hf+kvyPfW1zOCIsFATRiG4JD0qfJlzlGK1Du9/TzWKMEEVWS/uQCSkSTkBdkowhkWTMWicPglx2v/uB6wyPCIV+mciIXirAz1X9hP5pT27rUlHszlYOOf5RCn15C7hh8oa3lqkNRORSs9YByUjssXj4PgC3i/TMm8ZHWbecpx2nJYslrGT+xEWkfiRxJadRmoBHJUIvlBM0r+nstjZG+8bkzxsoAtc0sVRK0mfnU1I7sCUDyLcbbMpMLpF9bt77eUoPAAXzge0iz+Vv/V9OCM9Y9HkDxJostv0A6XdHFGBAWLjHnp5Je5dkYNAymLQHqeMeYDPoSXCsb1tqlHSKpuMTTcZFysN0VzBJC5219z9wvPNut3/9tdPJnBPgy4iyhjiWQZGEFlUWCHJTBAW5HXVfhjdH0MqOnCpX3pMarp63AfCRhQgBnbUxZqv21cn/x0er/q17dOQm8h4a7hXq5imJyz1Wzsicd,iv:LigoYWev/6IxhqB/iyvD9z9+e31S8tBeRvZiK/LqsvU=,tag:yD99Jxl5k9GKNfZH9PqlEQ==,type:str]",
 	"sops": {
 		"shamir_threshold": 1,
 		"kms": null,
@@ -7,8 +7,8 @@
 		"azure_kv": null,
 		"hc_vault": null,
 		"age": null,
-		"lastmodified": "2024-01-14T20:55:09Z",
-		"mac": "ENC[AES256_GCM,data:GNh372+4iVRE/3fLBpQdaccJBMFsWibjPUkDmY+goAYjFvba/wLlViLiCkLGLhK7krdm0Ifc0pnf5n8X+vVdPZtwJ2MN12qw1qj2fcRRjJkxmoSA8GrVgGJQNUbhpO8CI6YUmvlC2UKW1KSg0A1PKh/T/vbmBRByQC8qkeMOVWc=,iv:KH6lSsEF4UrHc9YfhkXcg9uIjaMZh02thcNAom91ckw=,tag:a5z8ZkXbUFJiZrLCIXvvZQ==,type:str]",
+		"lastmodified": "2024-01-18T17:32:53Z",
+		"mac": "ENC[AES256_GCM,data:CneSJmziCAEpQxkg7sATX4rML1wwhIQOceUtIc4PcUw2DXRUnABF7puDGckg7QQFZ3ol4leSVLmjnOmhmYTNxP8OLaMKp3T0vgifvVl81c5tS1RxieUZfX7lH1ZurzXS4GooFG6XibLtA8nDZ2yuACwc8RaO1tAUqyYdL5kKmFg=,iv:uGZ7WlP+Mq/nsyuT1SWTp5mnv7f34ANNfjW92z7ct7A=,tag:CBOQ1YM849h5xrkI7iFjpQ==,type:str]",
 		"pgp": [
 			{
 				"created_at": "2024-01-14T19:49:29Z",