diff --git a/infra/kubernetes/cgit/config.yaml b/infra/kubernetes/cgit/config.yaml
index b4794b5e4..569d279e0 100644
--- a/infra/kubernetes/cgit/config.yaml
+++ b/infra/kubernetes/cgit/config.yaml
@@ -1,4 +1,14 @@
 ---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gcsr-secrets
+type: Opaque
+data:
+  username: "Z2l0LXRhemppbi5nbWFpbC5jb20="
+  # This credential is a GCSR 'gitcookie' token.
+  password: '{{ passLookup "gcsr-tazjin-password" | b64enc }}'
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/secrets/gcsr-tazjin-password b/secrets/gcsr-tazjin-password
new file mode 100644
index 000000000..5893de131
Binary files /dev/null and b/secrets/gcsr-tazjin-password differ