add capi digitalocean creds

kubernetes · Jul 10, 2024 · 41ed763 · 41ed763
1 parent 0b23eb9
commit 41ed763
Show file tree

Hide file tree

Showing 2 changed files with 58 additions and 0 deletions.
diff --git a/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml b/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml
@@ -141,3 +141,32 @@ spec:
   - remoteRef:
       key: nfd-codecov-token
     secretKey: codecov-token
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: spaces-digitalocean-s3
+  namespace: test-pods
+spec:
+  dataFrom:
+  - extract:
+      key: spaces-digitalocean-s3
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cluster-api-provider-digitalocean-token
+  namespace: test-pods
+spec:
+  dataFrom:
+  - extract:
+      key: cluster-api-provider-digitalocean-token
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build
diff --git a/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml b/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml
@@ -100,3 +100,32 @@ spec:
   - key: nfd-codecov-token  # The name of the GSM Secret
     name: codecov-token     # The key to write to in the Kubernetes Secret
     version: latest         # The version of the GSM Secret
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: spaces-digitalocean-s3
+  namespace: test-pods
+spec:
+  dataFrom:
+  - extract:
+      key: spaces-digitalocean-s3
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cluster-api-provider-digitalocean-token
+  namespace: test-pods
+spec:
+  dataFrom:
+  - extract:
+      key: cluster-api-provider-digitalocean-token
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: k8s-infra-prow-build