diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index dccce38e..7d3fcabc 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -67,11 +67,23 @@ spec:
                   name: towerops-secrets
                   key: CLOAK_KEY
             - name: STRIPE_SECRET_KEY
-              value: "sk_test_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_SECRET_KEY
+                  optional: true
             - name: STRIPE_WEBHOOK_SECRET
-              value: "whsec_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_WEBHOOK_SECRET
+                  optional: true
             - name: STRIPE_PRICE_ID
-              value: "price_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_PRICE_ID
+                  optional: true
           envFrom:
             - secretRef:
                 name: towerops-db
@@ -160,11 +172,23 @@ spec:
             - name: DATABASE_SSL_VERIFY
               value: "false"
             - name: STRIPE_SECRET_KEY
-              value: "sk_test_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_SECRET_KEY
+                  optional: true
             - name: STRIPE_WEBHOOK_SECRET
-              value: "whsec_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_WEBHOOK_SECRET
+                  optional: true
             - name: STRIPE_PRICE_ID
-              value: "price_fake_placeholder"
+              valueFrom:
+                secretKeyRef:
+                  name: towerops-billing
+                  key: STRIPE_PRICE_ID
+                  optional: true
           envFrom:
             # Redis connection configured via towerops-redis secret
             - secretRef: