diff --git a/manifests/workloads/actions-runner-scale-set/kustomization.yaml b/manifests/workloads/actions-runner-scale-set/kustomization.yaml
index a9ef8380..2b872387 100644
--- a/manifests/workloads/actions-runner-scale-set/kustomization.yaml
+++ b/manifests/workloads/actions-runner-scale-set/kustomization.yaml
@@ -6,9 +6,10 @@ resources:
 - namespace.yaml
 - controller
 - crds
+- workers
 
-generators:
-- generator.yaml
+# generators:
+# - generator.yaml
 
 components:
-- workers
+- secrets
diff --git a/manifests/workloads/actions-runner-scale-set/generator.yaml b/manifests/workloads/actions-runner-scale-set/secrets/generator.yaml
similarity index 75%
rename from manifests/workloads/actions-runner-scale-set/generator.yaml
rename to manifests/workloads/actions-runner-scale-set/secrets/generator.yaml
index e97194ba..53df2cb4 100644
--- a/manifests/workloads/actions-runner-scale-set/generator.yaml
+++ b/manifests/workloads/actions-runner-scale-set/secrets/generator.yaml
@@ -3,4 +3,4 @@ kind: ksops
 metadata:
   name: github-secrets
 files:
-- secrets/github-app.yaml
+- github-app.yaml
diff --git a/manifests/workloads/actions-runner-scale-set/secrets/kustomization.yaml b/manifests/workloads/actions-runner-scale-set/secrets/kustomization.yaml
new file mode 100644
index 00000000..eebffd2e
--- /dev/null
+++ b/manifests/workloads/actions-runner-scale-set/secrets/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+namespace: github-rss
+
+generators:
+- generator.yaml
diff --git a/manifests/workloads/actions-runner-scale-set/workers/helm-charts/danmanners.homelab-kube-repo.yaml b/manifests/workloads/actions-runner-scale-set/workers/helm-charts/danmanners.homelab-kube-repo.yaml
index 90b6157b..d7727743 100644
--- a/manifests/workloads/actions-runner-scale-set/workers/helm-charts/danmanners.homelab-kube-repo.yaml
+++ b/manifests/workloads/actions-runner-scale-set/workers/helm-charts/danmanners.homelab-kube-repo.yaml
@@ -11,11 +11,10 @@ valuesInline:
   githubConfigUrl: https://github.com/danmanners/homelab-kube-cluster
   # githubConfigSecret: controller-manager
   githubConfigSecret:
-    github_app_id: "test"
-    github_app_installation_id: "test"
+    github_app_id: "fake"
+    github_app_installation_id: "fake"
     github_app_private_key: |
-      ====key file?
-      === ==end key
+      fake key here
 
   controllerServiceAccount:
     name: github-rss-controller
diff --git a/manifests/workloads/actions-runner-scale-set/workers/kustomization.yaml b/manifests/workloads/actions-runner-scale-set/workers/kustomization.yaml
index f8ff7503..9abbfcdf 100644
--- a/manifests/workloads/actions-runner-scale-set/workers/kustomization.yaml
+++ b/manifests/workloads/actions-runner-scale-set/workers/kustomization.yaml
@@ -1,11 +1,17 @@
-# apiVersion: kustomize.config.k8s.io/v1beta1
-# kind: Kustomization
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+# apiVersion: kustomize.config.k8s.io/v1alpha1
+# kind: Component
 namespace: github-rss
 
 generators:
 - helm-charts/danmanners.homelab-kube-repo.yaml
 
-# patches:
-# - path: image-patch.yaml
+patches:
+- patch: |-
+    $patch: delete
+    kind: Secret
+    apiVersion: v1
+    metadata:
+      name: danmanners.homelab-kube-repo-gha-rs-github-secret
+      namespace: github-rss