diff --git a/apps-kustomized/usb-ipp/configmap.yaml b/apps-kustomized/usb-ipp/configmap.yaml
new file mode 100644
index 0000000..fea83db
--- /dev/null
+++ b/apps-kustomized/usb-ipp/configmap.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ipp-usb
+data:
+  ipp-usb.conf: |
+    [network]
+      dns-sd = disable
+      interface = all
diff --git a/apps-kustomized/usb-ipp/deploy.yaml b/apps-kustomized/usb-ipp/deploy.yaml
new file mode 100644
index 0000000..3b5ae97
--- /dev/null
+++ b/apps-kustomized/usb-ipp/deploy.yaml
@@ -0,0 +1,47 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: ipp-usb
+  labels:
+    app.kubernetes.io/name: ipp-usb
+  annotations:
+    configmap.reloader.stakater.com/reload: "ipp-usb"
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: ipp-usb
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: ipp-usb
+      annotations:
+        descheduler.alpha.kubernetes.io/evict: "true"
+    spec:
+      containers:
+        - name: ipp-usb
+          image: imartyn/ipp-usb:latest
+          resources: {}
+          securityContext: 
+            allowPrivilegeEscalation: true
+            privileged: true
+          ports:
+            - containerPort: 60000
+              protocol: TCP
+          volumeMounts:
+            - mountPath: /app/ipp-usb.conf
+              subPath: ipp-usb.conf
+              name: configmap
+      volumes:
+        - configMap:
+            name: ipp-usb
+          name: configmap
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: feature.node.kubernetes.io/usb-ff_04a9_1913.present
+                operator: Exists
diff --git a/apps-kustomized/usb-ipp/kustomization.yaml b/apps-kustomized/usb-ipp/kustomization.yaml
new file mode 100644
index 0000000..e3dab9f
--- /dev/null
+++ b/apps-kustomized/usb-ipp/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: ipp-usb
+
+resources:
+  - deploy.yaml
+  - configmap.yaml
+  - service.yaml
diff --git a/apps-kustomized/usb-ipp/service.yaml b/apps-kustomized/usb-ipp/service.yaml
new file mode 100644
index 0000000..afe9bbc
--- /dev/null
+++ b/apps-kustomized/usb-ipp/service.yaml
@@ -0,0 +1,14 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: ipp-usb
+  labels:
+    app.kubernetes.io/name: ipp-usb
+spec:
+  selector:
+    app.kubernetes.io/name: ipp-usb
+  ports:
+    - name: http
+      protocol: TCP
+      port: 60000
+      targetPort: 60000
diff --git a/everything-app/ipp-usb.yaml b/everything-app/ipp-usb.yaml
new file mode 100644
index 0000000..efafbc9
--- /dev/null
+++ b/everything-app/ipp-usb.yaml
@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ipp-usb
+  namespace: argocd
+spec:
+  destination:
+    namespace: ipp-usb
+    server: https://kubernetes.default.svc
+  project: infra
+  source:
+    path: apps-kustomized/ipp-usb
+    repoURL: https://git.martyn.berlin/martyn/infra4talos
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      selfHeal: true