diff --git a/kube/deploy/apps/insurgency-sandstorm/app/keda.yaml b/kube/deploy/apps/insurgency-sandstorm/app/keda.yaml
new file mode 100644
index 00000000..46956085
--- /dev/null
+++ b/kube/deploy/apps/insurgency-sandstorm/app/keda.yaml
@@ -0,0 +1,23 @@
+---
+# yaml-language-server: $schema=https://crds.jank.ing/keda.sh/scaledobject_v1alpha1.json
+apiVersion: keda.sh/v1alpha1
+kind: ScaledObject
+metadata:
+  name: &app insurgency-sandstorm
+  namespace: *app
+spec:
+  cooldownPeriod: 0
+  minReplicaCount: 0
+  maxReplicaCount: 1
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: *app
+  triggers:
+    - name: *app
+      type: prometheus
+      metadata:
+        serverAddress: http://vmsingle-victoria.monitoring.svc.cluster.local:8429
+        query: |
+          count(hubble_flows_processed_total{destination_workload="insurgency-sandstorm", traffic_direction="ingress", source="reserved:world", source_pod!~"coredns.*"} > 0) * count(irate(container_network_receive_bytes_total{pod=~"insurgency-sandstorm.*"}) >= 512)
+        threshold: "1"