Add secret for grafana credentials

[howardjohn]

For istio/istio#21541 we will need grafana credentials in the cluster. This will be used by the release builder.

I am not sure if there is a standard practice for how we handle these secrets in the cluster?

[howardjohn]

This is not particularly urgent, by the way, timeline for this is 1.6 which is released in 3 months. I still need to write all the code to handle this anyways

[clarketm]

There is currently an issue tracking the proposal for a standard, declarative, secret manager tool/service (kubernetes/test-infra#14049).

The current practice is to backup the secret value in an external data store, manually upload the value as a Kubernetes secret in the cluster(s), and optionally create a Prow preset for convenience (if applicable).

[howardjohn]

In this specific case we only need it on one job so preset is probably not really needed

[clarketm]

Created secret grafana-token with key token in test-pods namespace of istio-prow-build cluster.

[howardjohn]

Thanks!

…

On Mon, Mar 2, 2020 at 10:00 AM Travis Clarke ***@***.***> wrote: Closed #2441 <#2441>. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#2441?email_source=notifications&email_token=AAEYGXNFGZZ4ZOJ6MLZGCDDRFPX5JA5CNFSM4K47LCMKYY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOXAPOVKA#event-3089033896>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAEYGXINMHYW3RBB4M2LASTRFPX5JANCNFSM4K47LCMA> .