diff --git a/components/internal-services/internal-production/es/es.yaml b/components/internal-services/internal-production/es/es.yaml
index 1b919e76..0d3f9c9c 100644
--- a/components/internal-services/internal-production/es/es.yaml
+++ b/components/internal-services/internal-production/es/es.yaml
@@ -1214,3 +1214,25 @@ spec:
     creationPolicy: Owner
     deletionPolicy: Delete
     name: signing-artifact-storage-prod
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: quay-internal-oci
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  dataFrom:
+    - extract:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: releng/konflux/rhtap-releng-tenant/private-network/quay-internal-oci
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: SecretStore
+    name: releng-vault
+  target:
+    creationPolicy: Owner
+    deletionPolicy: Delete
+    name: quay-internal-oci