diff --git a/kubernetes/README.md b/kubernetes/README.md
index 8af4ffc..a1844f9 100644
--- a/kubernetes/README.md
+++ b/kubernetes/README.md
@@ -21,7 +21,7 @@ Once you've entered your secret key base, base url and admin credentials, you're
 
 ```bash
 kubectl create namespace plausible # Create a new namespace for all resources
-kubectl -n plausible create configmap plausible-config --from-env-file=plausible-conf.env # Create a configmap from the plausible-conf.env file
+kubectl -n plausible create secret generic plausible-config --from-env-file=plausible-conf.env # Create a configmap from the plausible-conf.env file
 # Please change the Postgres and Clickhouse passwords to something more secure here!
 kubectl -n plausible create secret generic plausible-db-user --from-literal='username=postgres' --from-literal='password=postgres' # Create the Postgres user
 kubectl -n plausible create secret generic plausible-events-db-user --from-literal='username=clickhouse' --from-literal='password=clickhouse' # Create the Clickhouse user
diff --git a/kubernetes/plausible.yaml b/kubernetes/plausible.yaml
index 952cb6d..ee64722 100644
--- a/kubernetes/plausible.yaml
+++ b/kubernetes/plausible.yaml
@@ -50,7 +50,7 @@ spec:
           args:
             - sleep 30 && /entrypoint.sh db createdb && /entrypoint.sh db migrate && /entrypoint.sh db init-admin
           envFrom:
-            - configMapRef:
+            - secretRef:
                 name: plausible-config
           env:
             - name: POSTGRES_USER
@@ -95,7 +95,7 @@ spec:
           ports:
             - containerPort: 8000
           envFrom:
-            - configMapRef:
+            - secretRef:
                 name: plausible-config
           env:
             - name: POSTGRES_USER