diff --git a/helm/cluster_setup/Chart.yaml b/helm/cluster_setup/Chart.yaml
index 9f28d1f..866c490 100644
--- a/helm/cluster_setup/Chart.yaml
+++ b/helm/cluster_setup/Chart.yaml
@@ -12,6 +12,8 @@ annotations:
       description: Added cluster roles and bindings to access logs and shell from kubectl
     - kind: added
       description: Added cluster issuer for lets encrypt
+    - kind: added
+      description: Added vault service principal
   artifacthub.io/signKey: |
     fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
     url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
diff --git a/helm/cluster_setup/templates/vault-service-principal.yaml b/helm/cluster_setup/templates/vault-service-principal.yaml
new file mode 100644
index 0000000..da9a154
--- /dev/null
+++ b/helm/cluster_setup/templates/vault-service-principal.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.vault.enabled -}}
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ .Values.vault.namespace }}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vault-service-principal
+  namespace: {{ .Values.vault.namespace }}
+data:
+  clientId: {{ .Values.vault.clientId | b64enc }}
+  clientSecret: {{ .Values.vault.clientSecret | b64enc }}
+{{- end }}
\ No newline at end of file
diff --git a/helm/cluster_setup/values.yaml b/helm/cluster_setup/values.yaml
index fd81778..65784d2 100644
--- a/helm/cluster_setup/values.yaml
+++ b/helm/cluster_setup/values.yaml
@@ -1 +1,6 @@
-email: admin@2martens.de
\ No newline at end of file
+email: ""
+vault:
+  enabled: false
+  namespace: "vault-secrets-operator-system"
+  clientId: ""
+  clientSecret: ""