diff --git a/hack/gcr-push.sh b/hack/gcr-push.sh
index 9d7e78e79..9eade805d 100755
--- a/hack/gcr-push.sh
+++ b/hack/gcr-push.sh
@@ -27,7 +27,9 @@ function highest_release() {
     done
 }
 
-gcloud auth activate-service-account --key-file OUR_KEY_FILE
+openssl aes-256-cbc -K $encrypted_f58ab4413c21_key -iv $encrypted_f58ab4413c21_iv -in heptio-images-fac92d2303ac.json.enc -out heptio-images-fac92d2303ac.json -d
+
+gcloud auth activate-service-account --key-file heptio-images-fac92d2303ac.json
 unset GIT_HTTP_USER_AGENT
 
 # only publish for master or if a tag is defined
diff --git a/heptio-images-fac92d2303ac.json.enc b/heptio-images-fac92d2303ac.json.enc
new file mode 100644
index 000000000..4ecffa214
Binary files /dev/null and b/heptio-images-fac92d2303ac.json.enc differ