diff --git a/kubernetes/apps/default/radarr-archive/app/externalsecret.yaml b/kubernetes/apps/default/radarr-archive/app/externalsecret.yaml
new file mode 100644
index 000000000..0e5f0c284
--- /dev/null
+++ b/kubernetes/apps/default/radarr-archive/app/externalsecret.yaml
@@ -0,0 +1,23 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-archive-db
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: crunchy-pgo-secrets
+  target:
+    name: radarr-archive-db-secret
+    template:
+      engineVersion: v2
+      data:
+        RADARR__POSTGRES__MAINDB: '{{ index . "dbname" }}'
+        RADARR__POSTGRES__LOGDB: radarr_archive_log
+        RADARR__POSTGRES__HOST: '{{ index . "host" }}'
+        RADARR__POSTGRES__USER: '{{ index . "user" }}'
+        RADARR__POSTGRES__PASSWORD: '{{ index . "password" }}'
+        RADARR__POSTGRES__PORT: '{{ index . "port" }}'
+  dataFrom:
+    - extract:
+        key: postgres-pguser-radarr-archive