diff --git a/helm/garage-ui/templates/extra-objects.yaml b/helm/garage-ui/templates/extra-objects.yaml
new file mode 100644
index 0000000..b058f88
--- /dev/null
+++ b/helm/garage-ui/templates/extra-objects.yaml
@@ -0,0 +1,4 @@
+{{- range .Values.extraObjects }}
+---
+{{ tpl (toYaml .) $ }}
+{{- end }}
diff --git a/helm/garage-ui/values.yaml b/helm/garage-ui/values.yaml
index 68c25a8..dfdcb9d 100644
--- a/helm/garage-ui/values.yaml
+++ b/helm/garage-ui/values.yaml
@@ -14,6 +14,26 @@ fullnameOverride: ""
 
 extraEnvs: []
 
+# Extra Kubernetes manifests to deploy alongside the chart.
+# Each entry is rendered through `tpl`, so Helm templating is supported.
+# Useful for ExternalSecret, HTTPRoute, CiliumNetworkPolicy, etc.
+extraObjects: []
+  # - apiVersion: external-secrets.io/v1beta1
+  #   kind: ExternalSecret
+  #   metadata:
+  #     name: garage-ui-admin
+  #   spec:
+  #     refreshInterval: 1h
+  #     secretStoreRef:
+  #       name: vault
+  #       kind: ClusterSecretStore
+  #     target:
+  #       name: garage-ui-admin
+  #     data:
+  #       - secretKey: admin-token
+  #         remoteRef:
+  #           key: garage/admin-token
+
 config:
   server:
     host: "0.0.0.0"