diff --git a/k8s/ironclad/configmap-ssh.yaml b/k8s/ironclad/configmap-ssh.yaml
new file mode 100644
index 0000000..e90dca4
--- /dev/null
+++ b/k8s/ironclad/configmap-ssh.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ssh-config
+data:
+  sshd_config: |
+    Port 22
+    PermitRootLogin no
+    PasswordAuthentication yes
+    ChallengeResponseAuthentication no
+    UsePAM yes
+    X11Forwarding no
+    PrintMotd yes
+    AcceptEnv LANG LC_*
+    Subsystem sftp /usr/lib/openssh/sftp-server