diff --git a/rook/README.md b/rook/README.md
new file mode 100644
index 0000000..a5567cb
--- /dev/null
+++ b/rook/README.md
@@ -0,0 +1,3 @@
+# Rook
+
+https://rook.io/docs/rook/latest-release/CRDs/Cluster/external-cluster/external-cluster/
\ No newline at end of file
diff --git a/rook/kustomization.yaml b/rook/kustomization.yaml
new file mode 100644
index 0000000..4b57bd4
--- /dev/null
+++ b/rook/kustomization.yaml
@@ -0,0 +1,36 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: rook-ceph
+
+# spec: https://kubectl.docs.kubernetes.io/references/kustomize/builtins/#_helmchartinflationgenerator_
+helmCharts:
+# Operator
+- includeCRDs: true
+  name: &name rook-ceph
+  releaseName: rook-ceph
+  repo: https://charts.rook.io/release
+  version: v1.17.7 # helm search repo rook-release/rook-ceph --versions
+
+- includeCRDs: true
+  name: &name rook-ceph-ks
+  releaseName: rook-ceph-cluster
+  repo: https://charts.rook.io/release
+  version: v1.17.7
+  valuesInline: # https://github.com/rook/rook/blob/master/deploy/charts/rook-ceph-cluster/values-external.yaml  
+    operatorNamespace: rook-ceph
+    clusterName: ks
+    cephClusterSpec:
+      external:
+        enable: true
+        fsid: 6e5d948f-9399-43b6-8359-99de16e4f1bc
+        mon:
+          endpoints: "pve90=[2001:bb8:4008:21:20::90]:6789"
+        # The name of the Kubernetes Secret below
+        secretName: rook-ceph-external-admin-secret
+      dataDirHostPath: /var/lib/rook
+
+resources:
+- ssh://git@git.k-space.ee/secretspace/kube/rook-ceph # secrets: rook-ceph-external-admin-secret
+- ./storage-classes.yaml
+
diff --git a/rook/storage-classes.yaml b/rook/storage-classes.yaml
new file mode 100644
index 0000000..e69de29