diff --git a/docs/modules/ROOT/pages/explanations/decisions/admin-kubeconfig.adoc b/docs/modules/ROOT/pages/explanations/decisions/admin-kubeconfig.adoc
index 809fc316..56c5a7ce 100644
--- a/docs/modules/ROOT/pages/explanations/decisions/admin-kubeconfig.adoc
+++ b/docs/modules/ROOT/pages/explanations/decisions/admin-kubeconfig.adoc
@@ -87,6 +87,7 @@ Another approach is to manage and renew the admin credentials by hand.
 == Decision
 
 Use <<sa_tokens,service account tokens generated through the TokenRequest API>> and implement a <<custom_controller,custom controller>> to manage the service account, cluster role binding and tokens.
+The implementation can be found on GitHub at https://github.com/appuio/emergency-credentials-controller[appuio/emergency-credentials-controller].
 
 == Rationale