diff --git a/kubernetes/kustomization.yaml b/kubernetes/kustomization.yaml
index 838d727..405387a 100644
--- a/kubernetes/kustomization.yaml
+++ b/kubernetes/kustomization.yaml
@@ -2,11 +2,11 @@
 # Explicitly lists all components to exclude:
 # - cert-manager: managed by separate Flux Kustomization (CRD dependency)
 # - cert-manager-issuer: managed by separate Flux Kustomization (depends on cert-manager)
-# - cilium: managed by Terraform (not Flux)
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   # System components
+  - system/cilium # cilium IP pool is managed here
   - system/blocky
   - system/caddy
   - system/coredns
diff --git a/kubernetes/system/cilium/kustomization.yaml b/kubernetes/system/cilium/kustomization.yaml
new file mode 100644
index 0000000..319a16f
--- /dev/null
+++ b/kubernetes/system/cilium/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - pool.yaml