Merge pull request #2389 from spiffxp/k8s-triage-robot-github-token

prow: add k8s-triage-robot-github-token secret
kubernetes · Jul 22, 2021 · ea5fcb4 · ea5fcb4
2 parents 10493ce + a529e9d
commit ea5fcb4
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/...-prow-build-trusted/prow-build-trusted/resources/test-pods/test-pods-externalsecrets.yaml b/...-prow-build-trusted/prow-build-trusted/resources/test-pods/test-pods-externalsecrets.yaml
@@ -25,3 +25,16 @@ spec:
   - key: snyk-token   # The name of the GSM Secret
     name: SNYK_TOKEN  # The key to write to in the Kubernetes Secret
     version: latest   # The version of the GSM Secret
+---
+apiVersion: kubernetes-client.io/v1
+kind: ExternalSecret
+metadata:
+  name: k8s-triage-robot-github-token
+  namespace: test-pods
+spec:
+  backendType: gcpSecretsManager
+  projectId: k8s-infra-prow-build-trusted
+  data:
+  - key: k8s-triage-robot-github-token # The name of the GSM Secret
+    name: token                        # The key to write to in the Kubernetes Secret
+    version: latest                    # The version of the GSM Secret
diff --git a/infra/gcp/prow/ensure-e2e-projects.sh b/infra/gcp/prow/ensure-e2e-projects.sh
@@ -141,6 +141,7 @@ function ensure_e2e_project() {
 function ensure_trusted_prow_build_cluster_secrets() {
     local project="${TRUSTED_BUILD_CLUSTER_PROJECT}"
     local secret_specs=(
+        k8s-triage-robot-github-token/sig-contributor-experience/[email protected]
         cncf-ci-github-token/sig-testing/[email protected]
         snyk-token/sig-architecture/[email protected]
     )