diff --git a/controllers/configmap_controller.go b/controllers/configmap_controller.go
index 0ec6f52..d59d790 100644
--- a/controllers/configmap_controller.go
+++ b/controllers/configmap_controller.go
@@ -19,11 +19,20 @@ package controllers
 import (
 	"context"
 	"fmt"
+	"time"
 
-	kcpclient "github.com/kcp-dev/apimachinery/pkg/client"
 	corev1 "k8s.io/api/core/v1"
+	apierrors "k8s.io/apimachinery/pkg/api/errors"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/types"
+
+	kcpclient "github.com/kcp-dev/apimachinery/pkg/client"
+
+	"github.com/kcp-dev/logicalcluster"
+
 	ctrl "sigs.k8s.io/controller-runtime"
 	"sigs.k8s.io/controller-runtime/pkg/client"
+	"sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
 	"sigs.k8s.io/controller-runtime/pkg/log"
 )
 
@@ -45,6 +54,22 @@ func (r *ConfigMapReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 	}
 
 	log.Info("Get: retrieved configMap")
+	labels := configMap.Labels
+
+	if labels["name"] != "" {
+		response := fmt.Sprintf("hello-%s", labels["name"])
+
+		if labels["response"] != response {
+			labels["response"] = response
+
+			// Test Update
+			if err := r.Update(ctx, &configMap); err != nil {
+				return ctrl.Result{}, err
+			}
+			log.Info("Update: updated configMap")
+			return ctrl.Result{}, nil
+		}
+	}
 
 	// Test list
 	var configMapList corev1.ConfigMapList
@@ -53,29 +78,63 @@ func (r *ConfigMapReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 		return ctrl.Result{}, nil
 	}
 	for _, cm := range configMapList.Items {
-		log.Info("List: got", "namespace", cm.Namespace, "name", cm.Name)
+		log.Info("List: got", "clusterName", logicalcluster.From(&cm).String(), "namespace", cm.Namespace, "name", cm.Name)
 	}
 
-	labels := configMap.Labels
-	if labels == nil {
-		return ctrl.Result{}, nil
-	}
-
-	// Test Update
-	if labels["name"] == "" {
-		return ctrl.Result{}, nil
+	// If the configmap has a namespace field, create the corresponding namespace
+	nsName, exists := configMap.Data["namespace"]
+	if exists {
+		var namespace corev1.Namespace
+		nsKey := client.ObjectKey{
+			NamespacedName: types.NamespacedName{Name: nsName},
+			Cluster:        req.ObjectKey.Cluster,
+		}
+
+		if err := r.Get(ctx, nsKey, &namespace); err != nil {
+			if !apierrors.IsNotFound(err) {
+				log.Error(err, "unable to get namespace")
+				return ctrl.Result{}, err
+			}
+
+			// Need to create ns
+			namespace.SetName(nsName)
+			if err = r.Create(ctx, &namespace); err != nil {
+				log.Error(err, "unable to create namespace")
+				return ctrl.Result{}, err
+			}
+			log.Info("Create: created ", "namespace", nsName)
+			return ctrl.Result{RequeueAfter: time.Second * 5}, nil
+		}
+		log.Info("Exists", "namespace", nsName)
 	}
 
-	response := fmt.Sprintf("hello-%s", labels["name"])
-
-	if labels["response"] == response {
-		return ctrl.Result{}, nil
-	}
-
-	labels["response"] = response
-
-	if err := r.Update(ctx, &configMap); err != nil {
-		return ctrl.Result{}, err
+	// If the configmap has a secretData field, create a secret in the same namespace
+	// If the secret already exists but is out of sync, it will be non-destructively patched
+	secretData, exists := configMap.Data["secretData"]
+	if exists {
+		var secret corev1.Secret
+
+		secret.SetName(configMap.GetName())
+		secret.SetNamespace(configMap.GetNamespace())
+		secret.SetClusterName(logicalcluster.From(&configMap).String())
+		secret.SetOwnerReferences([]metav1.OwnerReference{metav1.OwnerReference{
+			Name:       configMap.GetName(),
+			UID:        configMap.GetUID(),
+			APIVersion: "v1",
+			Kind:       "ConfigMap",
+			Controller: func() *bool { x := true; return &x }(),
+		}})
+		secret.Data = map[string][]byte{"dataFromCM": []byte(secretData)}
+
+		operationResult, err := controllerutil.CreateOrPatch(ctx, r, &secret, func() error {
+			secret.Data["dataFromCM"] = []byte(secretData)
+			return nil
+		})
+		if err != nil {
+			log.Error(err, "unable to create or patch secret")
+			return ctrl.Result{}, err
+		}
+		log.Info(string(operationResult), "secret", secret.GetName())
 	}
 
 	return ctrl.Result{}, nil
@@ -84,5 +143,6 @@ func (r *ConfigMapReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 func (r *ConfigMapReconciler) SetupWithManager(mgr ctrl.Manager) error {
 	return ctrl.NewControllerManagedBy(mgr).
 		For(&corev1.ConfigMap{}).
+		Owns(&corev1.Secret{}).
 		Complete(r)
 }