diff --git a/host/k8s-amd64-n3.pyrocufflink.blue.cue b/host/k8s-amd64-n3.pyrocufflink.blue.cue
new file mode 100644
index 0000000..36f645c
--- /dev/null
+++ b/host/k8s-amd64-n3.pyrocufflink.blue.cue
@@ -0,0 +1,5 @@
+import (
+	"du5t1n.me/cfg/env/prod"
+)
+
+sudo: prod.sudo
diff --git a/host/k8s-amd64-n3.pyrocufflink.blue.post.sh b/host/k8s-amd64-n3.pyrocufflink.blue.post.sh
new file mode 100644
index 0000000..17c32eb
--- /dev/null
+++ b/host/k8s-amd64-n3.pyrocufflink.blue.post.sh
@@ -0,0 +1 @@
+. scripts/no-coreos-default-sudo.sh
diff --git a/host/k8s-amd64-n3.pyrocufflink.blue.pre.sh b/host/k8s-amd64-n3.pyrocufflink.blue.pre.sh
new file mode 100644
index 0000000..92a083e
--- /dev/null
+++ b/host/k8s-amd64-n3.pyrocufflink.blue.pre.sh
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+. scripts/pam-ssh-agent-auth.sh
+
+install_packages
diff --git a/instructions/k8s-amd64-n3.pyrocufflink.blue.cue b/instructions/k8s-amd64-n3.pyrocufflink.blue.cue
new file mode 100644
index 0000000..0e1f635
--- /dev/null
+++ b/instructions/k8s-amd64-n3.pyrocufflink.blue.cue
@@ -0,0 +1,9 @@
+import (
+	"list"
+
+	"du5t1n.me/cfg/app/sudo"
+)
+
+render: list.Concat([
+	sudo.templates,
+])