diff --git a/20-kube/10-pom-pom.yaml b/20-kube/10-pom-pom.yaml
--- a/20-kube/10-pom-pom.yaml
+++ b/20-kube/10-pom-pom.yaml
@@ -15,6 +15,9 @@ spec:
       # adds name+locale to user details
       - profile
     secret: pomerium/idp
+  storage:
+    postgres:
+      secret: pomerium/postgres-connection-key
 
   # Note pom won't start up if this cert doesn't exist, so you have to run once
   # with it commented out, then after cert success, run again with it enabled.