diff --git a/kubernetes/infra/TODO.md b/kubernetes/infra/TODO.md
index 874105f..86ee9ec 100644
--- a/kubernetes/infra/TODO.md
+++ b/kubernetes/infra/TODO.md
@@ -1,3 +1,7 @@
 before auto applying the certificate make sure nginx controller is patched with
 
 - '--default-ssl-certificate=default/cert-wildcard-staging-domain'
+
+skapa token på do för att kunna managera dns. lägg in base64 encodad i dns-secret och applicera både certificate.yaml och dns-secret.yml
+
+this step is not automated yet!
\ No newline at end of file
diff --git a/kubernetes/infra/dns-secret.yml b/kubernetes/infra/dns-secret.yml
new file mode 100644
index 0000000..7f48aa4
--- /dev/null
+++ b/kubernetes/infra/dns-secret.yml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: digitalocean-dns
+type: Opaque
+data:
+    access-token: <token>