diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
new file mode 100644
index 0000000..b853791
--- /dev/null
+++ b/.github/workflows/publish.yaml
@@ -0,0 +1,16 @@
+name: Publish Kustomize Bundle
+on:
+  push:
+  release:
+    types: ['published']
+jobs:
+  publish-kustomize-bundles:
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.21.0
+    with:
+      bundle-name: ghcr.io/datum-cloud/network-kustomize
+      bundle-path: config/crd
+    secrets: inherit