diff --git a/src/@orb.yml b/src/@orb.yml
index a2e49b1..d3b746a 100644
--- a/src/@orb.yml
+++ b/src/@orb.yml
@@ -5,3 +5,4 @@ orbs:
   gcloud: circleci/gcp-cli@1.0.6
   gcr: circleci/gcp-gcr@0.6.1
   k8s: circleci/kubernetes@0.1.0
+  vpn: titel-media/wireguard@0.0.5
diff --git a/src/commands/install.yml b/src/commands/install.yml
index 27c5d54..f3319e1 100644
--- a/src/commands/install.yml
+++ b/src/commands/install.yml
@@ -2,3 +2,7 @@ description: "Install `gcloud` and `kubectl` if not already installed."
 steps:
   - gcloud/install
   - k8s/install
+  - when:
+      condition: $WIREGUARD_CONFIG
+      steps:
+        - vpn/install
diff --git a/src/jobs/publish-and-rollout-image.yml b/src/jobs/publish-and-rollout-image.yml
index 37af267..17bf727 100644
--- a/src/jobs/publish-and-rollout-image.yml
+++ b/src/jobs/publish-and-rollout-image.yml
@@ -73,6 +73,10 @@ steps:
       tag: << parameters.tag >>
       path: <<parameters.cwd-path-for-build>>
       extra_build_args: <<parameters.extra_build_args>>
+  - when:
+      condition: $WIREGUARD_CONFIG
+      steps:
+        - vpn/connect
   - gcr/push-image:
       registry-url: <<parameters.registry-url>>
       google-project-id: <<parameters.google-project-id>>