diff --git a/kustomize/deployment.yaml b/kustomize/deployment.yaml
index 2ecb36a..4e49c5c 100644
--- a/kustomize/deployment.yaml
+++ b/kustomize/deployment.yaml
@@ -22,3 +22,9 @@ spec:
           ports:
             - name: web
               containerPort: 4567
+          env:
+            - name: SESSION_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: toy-session-secret
+                  key: toy-session-secret