diff --git a/requirements/monitoring/grafana/certificate.yaml b/requirements/monitoring/grafana/certificate.yaml
new file mode 100644
index 0000000..151fbd0
--- /dev/null
+++ b/requirements/monitoring/grafana/certificate.yaml
@@ -0,0 +1,8 @@
+apiVersion: networking.gke.io/v1
+kind: ManagedCertificate
+metadata:
+  name: monitoring
+  namespace: default
+spec:
+  domains:
+    - montoring.wisv.ch
diff --git a/requirements/monitoring/grafana/iap.yaml b/requirements/monitoring/grafana/iap.yaml
new file mode 100644
index 0000000..ba10232
--- /dev/null
+++ b/requirements/monitoring/grafana/iap.yaml
@@ -0,0 +1,16 @@
+apiVersion: networking.gke.io/v1
+kind: GCPBackendPolicy
+metadata:
+  name: grafana-backend-policy
+  namespace: default
+spec:
+  default:
+    iap:
+      enabled: true
+      oauth2ClientSecret:
+        name: iap-secret
+      clientID: 966138216790-us6sue108a879v3vk2om9inn3ftpobkg.apps.googleusercontent.com
+  targetRef:
+    group: ""
+    kind: Service
+    name: grafana
diff --git a/requirements/monitoring/grafana/kustomization.yaml b/requirements/monitoring/grafana/kustomization.yaml
new file mode 100644
index 0000000..7b01616
--- /dev/null
+++ b/requirements/monitoring/grafana/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - release.yaml
+  - certificate.yaml
+  - iap.yaml
diff --git a/requirements/monitoring/grafana.yaml b/requirements/monitoring/grafana/release.yaml
similarity index 100%
rename from requirements/monitoring/grafana.yaml
rename to requirements/monitoring/grafana/release.yaml
diff --git a/requirements/monitoring/kustomization.yaml b/requirements/monitoring/kustomization.yaml
index 73fd7df..c6cb17f 100644
--- a/requirements/monitoring/kustomization.yaml
+++ b/requirements/monitoring/kustomization.yaml
@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - grafana.yaml
+  - grafana
   - victoriametrics.yaml