diff --git a/wildduck/wildflock.yaml b/wildduck/wildflock.yaml
index b13bcae..142bb64 100644
--- a/wildduck/wildflock.yaml
+++ b/wildduck/wildflock.yaml
@@ -1,4 +1,14 @@
 ---
+apiVersion: codemowers.cloud/v1beta1
+kind: SecretClaim
+metadata:
+  name: wildflock
+spec:
+  size: 32
+  mapping:
+    - key: SESSION_SECRET
+      value: "%(plaintext)s"
+---
 apiVersion: codemowers.io/v1alpha1
 kind: OIDCGWClient
 metadata:
@@ -97,6 +107,11 @@ spec:
                 secretKeyRef:
                   name: wildduck
                   key: WILDDUCK_API_TOKEN
+            - name: SESSION_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: wildflock
+                  key: SESSION_SECRET
           envFrom:
             - secretRef:
                 name: oidc-client-wildflock-owner-secrets