diff --git a/deploy/kubernetes/main.tf b/deploy/kubernetes/main.tf
index f4f53e3..9f453fb 100644
--- a/deploy/kubernetes/main.tf
+++ b/deploy/kubernetes/main.tf
@@ -73,6 +73,10 @@ variable "cache_url" {
   description = "uri for cache"
 }
 
+variable "thumbservice_password" {
+  type = string
+}
+
 
 locals {
   requests = defaults(var.requests,
@@ -139,7 +143,7 @@ resource "kubernetes_deployment" "photolib" {
           }
           env {
             name  = "THUMB_SERVICE_URL"
-            value = "http://_thumbservice:xxx@${var.name}-thumbservice.${var.namespace}.svc.cluster.local:8081/thumb"
+            value = "http://_thumbservice:${var.thumbservice_password}@${var.name}-thumbservice.${var.namespace}.svc.cluster.local:8081/thumb"
           }