diff --git a/helm/cv-app/templates/secret.yaml b/helm/cv-app/templates/secret.yaml
new file mode 100644
index 0000000..69b36d7
--- /dev/null
+++ b/helm/cv-app/templates/secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "cv-app.fullname" . }}-secret
+  labels:
+    {{- include "cv-app.labels" . | nindent 4 }}
+type: Opaque
+data:
+  {{- if eq .Values.backend.auth.mode "simple" }}
+  JWT_SECRET: {{ randAlphaNum 32 | b64enc | quote }}
+  {{- end }}