diff --git a/11-3-kuard-secret.yaml b/11-3-kuard-secret.yaml
new file mode 100644
index 0000000..3b1e41d
--- /dev/null
+++ b/11-3-kuard-secret.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: kuard-tls
+spec:
+  containers:
+    - name: kuard-tls
+      image: gcr.io/kuar-demo/kuard-amd64:1
+      imagePullPolicy: Always
+      volumeMounts:
+      - name: tls-certs
+        mountPath: "/tls"
+        readOnly: true
+  volumes:
+    - name: tls-certs
+      secret:
+        secretName: kuard-tls