diff --git a/charts/infrastructure/templates/metrics.yaml b/charts/infrastructure/templates/workflow-artifacts.yaml
similarity index 81%
rename from charts/infrastructure/templates/metrics.yaml
rename to charts/infrastructure/templates/workflow-artifacts.yaml
index c02f8f79..d63bd651 100644
--- a/charts/infrastructure/templates/metrics.yaml
+++ b/charts/infrastructure/templates/workflow-artifacts.yaml
@@ -5,24 +5,24 @@ metadata:
   annotations:
     volsync.backube/privileged-movers: "true"
   labels:
-    kubernetes.io/metadata.name: metrics
+    kubernetes.io/metadata.name: workflow-artifacts
     #pod-security.kubernetes.io/enforce: privileged
-  name: metrics
+  name: workflow-artifacts
 ---
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: metrics
+  name: workflow-artifacts
   namespace: argocd
   finalizers:
   - resources-finalizer.argocd.argoproj.io
 spec:
   destination:
     name: ''
-    namespace: metrics
+    namespace: workflow-artifacts
     server: 'https://kubernetes.default.svc'
   source:
-    path: charts/metrics
+    path: charts/workflow-artifacts
     repoURL: {{ .Values.global.repo }}
     targetRevision: {{ .Values.environment.revision }}
     helm:
@@ -31,7 +31,7 @@ spec:
         {{- if eq .Values.environment.mode "staging" }}
         {{- else if eq .Values.environment.mode "production" }}
         {{- end }}
-  #project: metrics
+  #project: workflow-artifacts
   project: default
   syncPolicy:
     automated:
@@ -44,19 +44,19 @@ spec:
 apiVersion: argoproj.io/v1alpha1
 kind: AppProject
 metadata:
-  name: metrics
+  name: workflow-artifacts
   namespace: argocd
   # Finalizer that ensures that project is not deleted until it is not referenced by any application
   finalizers:
     - resources-finalizer.argocd.argoproj.io
 spec:
-  description: Infra-level project to isolate metrics
+  description: Infra-level project to isolate workflow-artifacts
   # Allow manifests to deploy from any Git repos
   sourceRepos:
   - '*'
   # Only permit applications to deploy to the guestbook namespace in the same cluster
   destinations:
-  - namespace: metrics
+  - namespace: workflow-artifacts
     server: https://kubernetes.default.svc
   # Deny all cluster-scoped resources from being created, except for Namespace
   clusterResourceWhitelist:
@@ -79,9 +79,9 @@ spec:
   roles:
   # A role which provides read-only access to all applications in the project
   - name: read-only
-    description: Read-only privileges to metrics
+    description: Read-only privileges to workflow-artifacts
     policies:
-    - p, proj:my-project:read-only, applications, get, metrics/*, allow
+    - p, proj:my-project:read-only, applications, get, workflow-artifacts/*, allow
     groups:
     - my-oidc-group
 {{- end }}
diff --git a/charts/workflows/templates/pull-secret-artifacts.yaml b/charts/workflows/templates/pull-secret-artifacts.yaml
new file mode 100644
index 00000000..3a7255a2
--- /dev/null
+++ b/charts/workflows/templates/pull-secret-artifacts.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: workflows
+  namespace: workflows
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: workflow-artifacts/workflows