diff --git a/deploy/kubernetes/set_clientca_secret.sh b/deploy/kubernetes/set_clientca_secret.sh
new file mode 100755
index 00000000..b27fbb2d
--- /dev/null
+++ b/deploy/kubernetes/set_clientca_secret.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+kubectl -n atat delete secret atst-config-ini
+kubectl -n atat create secret generic nginx-client-ca-bundle --from-file="${1}"