Add Github HMAC token

Create and Github HMAC Token to GCP Secrets Manager of project kubernetes-public. Signed-off-by: Arnaud Meukam <[email protected]>
kubernetes · Jul 21, 2021 · 63aa983 · 63aa983
1 parent c483e29
commit 63aa983
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/apps/prow/cluster/prow-externalsecrets.yaml b/apps/prow/cluster/prow-externalsecrets.yaml
@@ -32,3 +32,19 @@ spec:
   - key: k8s-infra-build-clusters-kubeconfig # The name of the GSM Secret
     name: kubeconfig                         # The key to write to in the Kubernetes Secret
     version: latest                          # The version of the GSM Secret
+---
+# Github HMAC token synchronized from GCP Secrets Manager
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: k8s-infra-prow-hmac-token
+  namespace: prow
+  labels:
+    app: prow
+spec:
+  backendType: gcpSecretsManager
+  projectId: kubernetes-public
+  data:
+  - key: k8s-infra-prow-hmac-token # The name of the GSM Secret
+    name: hmac                     # The key to write to in the Kubernetes Secret
+    version: latest                # The version of the GSM Secret
diff --git a/infra/gcp/ensure-main-project.sh b/infra/gcp/ensure-main-project.sh
@@ -337,6 +337,7 @@ function ensure_aaa_external_secrets() {
     local prow_secrets=(
         k8s-infra-build-clusters-kubeconfig
         k8s-infra-ci-robot-github-token
+        k8s-infra-prow-hmac-token
     )
     local slack_infra_secrets=(
         recaptcha