diff --git a/charts/cryostat/templates/db_secret.yaml b/charts/cryostat/templates/db_secret.yaml
new file mode 100644
index 00000000..26df5339
--- /dev/null
+++ b/charts/cryostat/templates/db_secret.yaml
@@ -0,0 +1,11 @@
+{{- if empty .Values.core.databaseSecretName -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Release.Name }}-db
+type: Opaque
+immutable: true
+data:
+  ENCRYPTION_KEY: {{ include "cryostat.databaseEncryptionKey" . }}
+  CONNECTION_KEY: {{ include "cryostat.databaseConnectionKey" . }}
+{{- end -}}