diff --git a/lab-server/deployment/app.yml b/lab-server/deployment/app.yml
new file mode 100644
index 000000000..1709e03e8
--- /dev/null
+++ b/lab-server/deployment/app.yml
@@ -0,0 +1,65 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lab-server
+  labels:
+    app: lab-server
+spec:
+  replicas: 2
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: lab-server
+  template:
+    metadata:
+      labels:
+        app: lab-server
+    spec:
+      containers:
+        - image: ghcr.io/hpi-dhc/lab-server:main
+          imagePullPolicy: "Always"
+          name: lab-server
+          ports:
+            - containerPort: 3000
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: svc-lab-server
+  labels:
+    app: lab-server
+spec:
+  ports:
+    - name: http
+      port: 80
+      targetPort: 3000
+  selector:
+    app: lab-server
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-lab-server
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    # TODO: might not need cluster issuer below
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+    - host: "<TODO: configure host>"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: svc-lab-server
+                port:
+                  number: 80
+---
+
diff --git a/lab-server/deployment/namespace.yml b/lab-server/deployment/namespace.yml
new file mode 100644
index 000000000..a92a3c64b
--- /dev/null
+++ b/lab-server/deployment/namespace.yml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  creationTimestamp: null
+  name: annotation-server
+spec: {}
+status: {}