prow: add ExternalSecrets to prow-build-trusted

specifically cncf-ci-github-token in test-pods namespace
kubernetes · Jun 15, 2021 · b6e92b6 · b6e92b6
1 parent 0a4f01f
commit b6e92b6
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/.../k8s-infra-prow-build-trusted/prow-build-trusted/resources/test-pods-externalsecrets.yaml b/.../k8s-infra-prow-build-trusted/prow-build-trusted/resources/test-pods-externalsecrets.yaml
@@ -0,0 +1,19 @@
+# This is a place holder for adding kubernetes external secrets, please add the
+# ExternalSecret CR here, separated by `---`.
+---
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: cncf-ci-github-token
+  namespace: test-pods
+spec:
+  backendType: gcpSecretsManager
+  # The project hosting the GSM Secret
+  projectId: k8s-infra-prow-build-trusted 
+  data:
+    # The name of the GSM Secret
+  - key: cncf-ci-github-token # The name of the GSM Secret
+    # The version of the GSM Secret
+    version: latest
+    # Value will appear in .data.{name} in the Kubernetes Secret
+    name: token