diff --git a/ente/kustomization.yaml b/ente/kustomization.yaml
index 292bacf..c0c2117 100644
--- a/ente/kustomization.yaml
+++ b/ente/kustomization.yaml
@@ -27,6 +27,8 @@ labels:
 
 resources:
   - resources/namespace.yaml
+  - resources/cors-proxy/spinexecutor.yaml
+  - resources/cors-proxy/spinapp.yaml
   - resources/museum/db/db.yaml
   - resources/museum/db/user.yaml
   - resources/museum/cache.yaml
diff --git a/ente/resources/cors-proxy/spinapp.yaml b/ente/resources/cors-proxy/spinapp.yaml
new file mode 100644
index 0000000..10b42c7
--- /dev/null
+++ b/ente/resources/cors-proxy/spinapp.yaml
@@ -0,0 +1,11 @@
+apiVersion: core.spinkube.dev/v1alpha1
+kind: SpinApp
+metadata:
+  name: s3-cors-proxy
+spec:
+  image: "code.icb4dc0.de/infrastructure/functions:latest"
+  executor: containerd-shim-spin
+  replicas: 2
+  variables:
+    - name: s3_endpoint_url
+      value: "https://fsn1.your-objectstorage.com"
diff --git a/ente/resources/cors-proxy/spinexecutor.yaml b/ente/resources/cors-proxy/spinexecutor.yaml
new file mode 100644
index 0000000..fae569b
--- /dev/null
+++ b/ente/resources/cors-proxy/spinexecutor.yaml
@@ -0,0 +1,9 @@
+apiVersion: core.spinkube.dev/v1alpha1
+kind: SpinAppExecutor
+metadata:
+  name: containerd-shim-spin
+spec:
+  createDeployment: true
+  deploymentConfig:
+    installDefaultCACerts: true
+    runtimeClassName: wasmtime-spin-v2