diff --git a/metal/roles/k3s/templates/config.yaml.j2 b/metal/roles/k3s/templates/config.yaml.j2
index e617e3b6..d6d5f75c 100644
--- a/metal/roles/k3s/templates/config.yaml.j2
+++ b/metal/roles/k3s/templates/config.yaml.j2
@@ -10,4 +10,5 @@ disable:
 - local-storage
 - servicelb
 - traefik
+secrets-encryption: true
 {% endif %}