diff --git a/manifests/init.pp b/manifests/init.pp
index 99a63b1..d70f819 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -67,6 +67,7 @@ class zuul (
   $sites = [],
   $nodes = [],
   $connections = [],
+  $connection_secrets = [],
   $trusted_ro_dirs = [],
   $trusted_rw_dirs = [],
   $untrusted_ro_dirs = [],
diff --git a/templates/zuulv3.conf.erb b/templates/zuulv3.conf.erb
index 0fc861e..626a7df 100644
--- a/templates/zuulv3.conf.erb
+++ b/templates/zuulv3.conf.erb
@@ -70,5 +70,14 @@ listen_port=<%= @web_listen_port %>
 <% connection.each do |key,value| -%>
 <%= key %>=<%= value %>
 <% end -%>
+<% @connection_secrets.each do |connection_secret| -%>
+<% if connection_secret['name'] == connection['name'] -%>
+<% connection_secret.each do |key,value| -%>
+<% if key != 'name' -%>
+<%= key %>=<%= value %>
+<% end -%>
+<% end -%>
+<% end -%>
+<% end -%>
 
 <% end -%>