diff --git a/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml b/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml
index 2e55fcdd4f1..8b1c2154f03 100644
--- a/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml
+++ b/infra/aws/terraform/prow-build-cluster/resources/test-pods/externalsecrets.yaml
@@ -130,3 +130,14 @@ spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: k8s-infra-prow-build
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: nfd-creds
+  namespace: test-pods
+spec:
+  data:
+  - remoteRef:
+      key: nfd-codecov-token
+    secretKey: codecov-token
diff --git a/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml b/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml
index 1cf3c85e94b..c7d5ed96eca 100644
--- a/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml
+++ b/infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/test-pods/externalsecrets.yaml
@@ -87,3 +87,16 @@ spec:
   - key: k8s-gcr-audit-test-prod-service-account
     name: service-account.json
     version: latest
+---
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: nfd-creds            # The name of the Kubernetes Secret
+  namespace: test-pods
+spec:
+  backendType: gcpSecretsManager
+  projectId: k8s-infra-prow-build
+  data:
+  - key: nfd-codecov-token  # The name of the GSM Secret
+    name: codecov-token     # The key to write to in the Kubernetes Secret
+    version: latest         # The version of the GSM Secret