Merge pull request #6948 from borg-land/copy-nfd-creds

Create nfd codecov token secret
kubernetes · Jul 5, 2024 · d4ac177 · d4ac177
2 parents 332d510 + abcb25a
commit d4ac177
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml b/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml
@@ -130,3 +130,14 @@ spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: nfd-creds
+  namespace: test-pods
+spec:
+  data:
+  - remoteRef:
+      key: nfd-codecov-token
+    secretKey: codecov-token
diff --git a/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml b/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml
@@ -87,3 +87,16 @@ spec:
   - key: k8s-gcr-audit-test-prod-service-account
     name: service-account.json
     version: latest
+---
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: nfd-creds            # The name of the Kubernetes Secret
+  namespace: test-pods
+spec:
+  backendType: gcpSecretsManager
+  projectId: k8s-infra-prow-build
+  data:
+  - key: nfd-codecov-token  # The name of the GSM Secret
+    name: codecov-token     # The key to write to in the Kubernetes Secret
+    version: latest         # The version of the GSM Secret