diff --git a/k8s/base/cronjob.yaml b/k8s/base/cronjob.yaml
new file mode 100644
index 0000000..3b4576e
--- /dev/null
+++ b/k8s/base/cronjob.yaml
@@ -0,0 +1,18 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: invoicing-openstack-biweekly
+spec:
+  schedule: "0 7 1,15,28 * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+          - name: invoicing-openstack-biweekly
+            image: ghcr.io/cci-moc/openshift-billing-from-db:latest
+            envFrom:
+              - secretRef:
+                  name: invoicing-openstack-credentials
+            imagePullPolicy: Always
+          restartPolicy: OnFailure
diff --git a/k8s/base/kustomization.yaml b/k8s/base/kustomization.yaml
new file mode 100644
index 0000000..658f62c
--- /dev/null
+++ b/k8s/base/kustomization.yaml
@@ -0,0 +1,6 @@
+commonLabels:
+  app: invoicing-openstack
+resources:
+  - cronjob.yaml
+  - namespace.yaml
+namespace: invoicing-openstack
diff --git a/k8s/base/namespace.yaml b/k8s/base/namespace.yaml
new file mode 100644
index 0000000..b1448ff
--- /dev/null
+++ b/k8s/base/namespace.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: invoicing-openstack
+spec: {}
diff --git a/k8s/overlays/dev/credentials.env b/k8s/overlays/dev/credentials.env
new file mode 100644
index 0000000..f089d2c
--- /dev/null
+++ b/k8s/overlays/dev/credentials.env
@@ -0,0 +1,10 @@
+S3_INPUT_ENDPOINT_URL="http://localhost:9090"
+S3_INPUT_ACCESS_KEY_ID="123"
+S3_INPUT_SECRET_ACCESS_KEY="123"
+
+S3_OUTPUT_ENDPOINT_URL="http://localhost:9090"
+S3_OUTPUT_ACCESS_KEY_ID="123"
+S3_OUTPUT_SECRET_ACCESS_KEY="123"
+
+KEYCLOAK_CLIENT_ID="test"
+KEYCLOAK_CLIENT_SECRET="123"
diff --git a/k8s/overlays/dev/kustomization.yaml b/k8s/overlays/dev/kustomization.yaml
new file mode 100644
index 0000000..d10549a
--- /dev/null
+++ b/k8s/overlays/dev/kustomization.yaml
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+secretGenerator:
+  - name: invoicing-openstack-credentials
+    envs:
+      - credentials.env