diff --git a/components/konflux-kite/production/kflux-ocp-p01/database-secret-path.yaml b/components/konflux-kite/production/kflux-ocp-p01/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/kflux-ocp-p01/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/kflux-ocp-p01/kustomization.yaml b/components/konflux-kite/production/kflux-ocp-p01/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/kflux-ocp-p01/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/kflux-osp-p01/database-secret-path.yaml b/components/konflux-kite/production/kflux-osp-p01/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/kflux-osp-p01/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/kflux-osp-p01/kustomization.yaml b/components/konflux-kite/production/kflux-osp-p01/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/kflux-osp-p01/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/kflux-prd-rh02/database-secret-path.yaml b/components/konflux-kite/production/kflux-prd-rh02/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/kflux-prd-rh02/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/kflux-prd-rh02/kustomization.yaml b/components/konflux-kite/production/kflux-prd-rh02/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/kflux-prd-rh02/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/kflux-prd-rh03/database-secret-path.yaml b/components/konflux-kite/production/kflux-prd-rh03/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/kflux-prd-rh03/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/kflux-prd-rh03/kustomization.yaml b/components/konflux-kite/production/kflux-prd-rh03/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/kflux-prd-rh03/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/stone-prd-rh01/database-secret-path.yaml b/components/konflux-kite/production/stone-prd-rh01/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/stone-prd-rh01/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/stone-prd-rh01/kustomization.yaml b/components/konflux-kite/production/stone-prd-rh01/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/stone-prd-rh01/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/stone-prod-p01/database-secret-path.yaml b/components/konflux-kite/production/stone-prod-p01/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/stone-prod-p01/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/stone-prod-p01/kustomization.yaml b/components/konflux-kite/production/stone-prod-p01/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/stone-prod-p01/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge
diff --git a/components/konflux-kite/production/stone-prod-p02/database-secret-path.yaml b/components/konflux-kite/production/stone-prod-p02/database-secret-path.yaml
new file mode 100644
index 00000000000..e85d3de755e
--- /dev/null
+++ b/components/konflux-kite/production/stone-prod-p02/database-secret-path.yaml
@@ -0,0 +1,4 @@
+---
+- op: add
+  path: /spec/dataFrom/0/extract/key
+  value: integrations-output/external-resources/to be created
diff --git a/components/konflux-kite/production/stone-prod-p02/kustomization.yaml b/components/konflux-kite/production/stone-prod-p02/kustomization.yaml
new file mode 100644
index 00000000000..f8896ca1df4
--- /dev/null
+++ b/components/konflux-kite/production/stone-prod-p02/kustomization.yaml
@@ -0,0 +1,33 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ../../base/external-secrets
+
+patches:
+  - path: database-secret-path.yaml
+    target:
+      name: database-secret
+      group: external-secrets.io
+      version: v1beta1
+      kind: ExternalSecret
+  # Delete the base secret since we're using External Secret
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kite-database-credentials
+        namespace: konflux-kite
+
+# Only update some parts of the generated development configmap
+configMapGenerator:
+  - name: kite-config
+    namespace: konflux-kite
+    literals:
+      - KITE_PROJECT_ENV=staging
+      - KITE_DB_SSL_MODE=require
+      - KITE_LOG_LEVEL=info
+      - KITE_LOG_FORMAT=json
+      - KITE_FEATURE_NAMESPACE_CHECKING=true
+    behavior: merge