chore: add test files for secure json data in kind

hack/kind/resources/default/deployment-thanos.yaml

@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: thanos
+  labels:
+    app: thanos
+spec:
+  selector:
+    matchLabels:
+      app: thanos
+  template:
+    metadata:
+      labels:
+        app: thanos
+    spec:
+      terminationGracePeriodSeconds: 3
+      containers:
+        - name: netcat
+          image: alpine
+          command:
+            - sh
+            - -c
+            - |
+              set -eu
+              echo "Starting pod"
+              while true; do echo -e 'HTTP/1.1 200 OK\n\n{"asdf":"date"}' | nc -l -p 8080; done
+          ports:
+            - containerPort: 8080
+              name: http
+              protocol: TCP
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: thanos
+spec:
+  selector:
+    app: thanos
+  ports:
+    - port: 8080
+      name: http
+      protocol: TCP
+      targetPort: 8080

hack/kind/resources/default/grafana-datasource-thanos.yaml

@@ -0,0 +1,29 @@
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDatasource
+metadata:
+  name: thanos
+spec:
+  datasource:
+    access: proxy
+    basicAuth: false
+    editable: true
+    isDefault: true
+    jsonData:
+      httpHeaderName1: Authorization
+      timeInterval: 5s
+      tlsSkipVerify: true
+    name: Thanos
+    orgId: 1
+    secureJsonData:
+      httpHeaderValue1: Bearer ${token}
+    type: prometheus
+    url: http://thanos.default.svc:8080
+  instanceSelector:
+    matchLabels:
+      dashboards: grafana
+  valuesFrom:
+    - targetPath: 'secureJsonData.httpHeaderValue1'
+      valueFrom:
+        secretKeyRef:
+          name: grafana-instance-sa-token
+          key: token

hack/kind/resources/default/kustomization.yaml

@@ -3,3 +3,8 @@ resources:
   - grafana-dashboard.yaml
   - grafana-datasource.yaml
   - grafana-contactpoint.yaml
+
+  - grafana-datasource-thanos.yaml
+  - secret.yaml
+  - serviceaccount.yaml
+  - deployment-thanos.yaml

hack/kind/resources/default/secret.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: grafana-instance-sa-token
+  annotations:
+    kubernetes.io/service-account.name: grafana-instance-sa
+type: kubernetes.io/service-account-token

hack/kind/resources/default/serviceaccount.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-instance-sa
+secrets:
+  - name: grafana-instance-sa-token