diff --git a/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2 b/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2
index 2fa42035..d5350871 100644
--- a/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2
+++ b/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2
@@ -86,6 +86,12 @@ nodes:
     patches:
       - "@./patches/node_#{ item.name }#.yaml"
     #% endif %#
+    #% if item.manifests %#
+    extraManifests:
+      #% for manifest in item.manifests %#
+      - #{ manifest }#
+      #% endfor %#
+    #% endif %#
   #% endfor %#
 
 patches:
diff --git a/config.sample.yaml b/config.sample.yaml
index e744b602..9f400743 100644
--- a/config.sample.yaml
+++ b/config.sample.yaml
@@ -24,6 +24,8 @@ bootstrap_node_inventory: []
     #   mac_addr: ""      # (Required) MAC address of the NIC for this node (talosctl get links -n <ip> --insecure)
     #   schematic_id: ""  # (Optional) Override the 'bootstrap_schematic_id' with a node specific schematic ID from https://factory.talos.dev/
     #   mtu: ""           # (Optional) MTU for the NIC, default is 1500
+    #   manifests:        # (Optional) Additional manifests to include after MachineConfig
+    #     - extra.yaml    #            See: https://www.talos.dev/v1.7/reference/configuration/extensions/extensionserviceconfig/
     # ...
 
 # (Optional) The DNS servers to use for the cluster nodes.