diff --git a/deploy/kubernetes/atst-configmap.yml b/deploy/kubernetes/atst-configmap.yml
index f3d428cb..a9584fc5 100644
--- a/deploy/kubernetes/atst-configmap.yml
+++ b/deploy/kubernetes/atst-configmap.yml
@@ -5,15 +5,6 @@ metadata:
   name: atst-config
   namespace: atat
 data:
-  atst-config: |-
-    [default]
-    CAC_URL=https://auth.atat.codes
-    COOKIE_SECRET=a12c87558f85566f846ea53fd3f1611dd207d71677966d4d04a8e59d4d8c6737
-    ENVIRONMENT=production
-    PGHOST=postgres-master.atat.svc.cluster.local
-    REDIS_URI=redis://redis-master.atat.svc.cluster.local:6379
-    SECRET=92d2ef2aedf518e1e04a2a99445e6649539a91f06c977f3d69980c63e4e0fb45
-    SECRET_KEY=beb178f9e4e83066ec0baa471cea36151f26bd3779902ae2c24eb5bb66e28c15
   uwsgi-config: |-
     [uwsgi]
     callable = app
diff --git a/deploy/kubernetes/set_atstconfig_secret.sh b/deploy/kubernetes/set_atstconfig_secret.sh
new file mode 100644
index 00000000..926fa1a0
--- /dev/null
+++ b/deploy/kubernetes/set_atstconfig_secret.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+kubectl -n atat create secret generic atst-config-ini --from-file=${1}