diff --git a/README.md b/README.md
index fb605e6..939a1a1 100644
--- a/README.md
+++ b/README.md
@@ -113,9 +113,7 @@ Die Gitea Action in `.gitea/workflows/container.yml` übernimmt Build, Push und
 Workload und CI-Berechtigungen werden einmalig mit einem Cluster-Administrator angelegt:
 
 ```bash
-./k8s/create-invitation-secret.sh
-kubectl apply -f k8s/invitation.yaml
-kubectl apply -f k8s/ci-deployer.yaml
+./install.sh
 ./k8s/create-ci-kubeconfig.sh
 ```
 
diff --git a/install.sh b/install.sh
new file mode 100755
index 0000000..4bd1efe
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+repo_root=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
+
+"${repo_root}/k8s/create-invitation-secret.sh"
+kubectl apply --filename="${repo_root}/k8s/ci-deployer.yaml"
+kubectl apply --filename="${repo_root}/k8s/invitation.yaml"