diff --git a/kustomize/auth/kustomization.yaml b/kustomize/auth/kustomization.yaml
new file mode 100644
index 0000000000..b97c178748
--- /dev/null
+++ b/kustomize/auth/kustomization.yaml
@@ -0,0 +1,5 @@
+bases:
+  - ../../base
+
+patchesStrategicMerge:
+  - patches.yaml
diff --git a/kustomize/auth/patches.yaml b/kustomize/auth/patches.yaml
new file mode 100644
index 0000000000..bb60a2cfc0
--- /dev/null
+++ b/kustomize/auth/patches.yaml
@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: phoenix
+spec:
+  template:
+    spec:
+      containers:
+      - name: phoenix
+        env:
+        - name: PHOENIX_ENABLE_AUTH
+          value: "true"
+        # When enabling Auth, you must provide a secret
+        # For example, set a Kubernetes Secret with:
+        # kubectl create secret generic phoenix-secret --from-literal=secret-key='[YOUR-SECRET]'
+        # then use 
+        #  valueFrom:
+        #    secretKeyRef:
+        #      name: phoenix-secret
+        #      key: secret-key
+        - name: PHOENIX_SECRET
+          value:  "3413f9a7735bb780c6b8e4db7d946a492b64d26112a955cdea6a797f4c833593"
\ No newline at end of file