diff --git a/create-ocp-project/secret.properties b/create-ocp-project/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/create-ocp-project/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/escalation/secret.properties b/escalation/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/escalation/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/modify-vm-resources/secret.properties b/modify-vm-resources/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/modify-vm-resources/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/move2kube/secret.properties b/move2kube/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/move2kube/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta-v6.x/secret.properties b/mta-v6.x/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta-v6.x/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta-v7.x/secret.properties b/mta-v7.x/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta-v7.x/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta/secret.properties b/mta/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mtv-migration/secret.properties b/mtv-migration/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mtv-migration/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mtv-plan/secret.properties b/mtv-plan/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mtv-plan/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/request-vm-cnv/secret.properties b/request-vm-cnv/secret.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/request-vm-cnv/secret.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/scripts/gen_manifests.sh b/scripts/gen_manifests.sh
index 4402c54b..ff6ec324 100755
--- a/scripts/gen_manifests.sh
+++ b/scripts/gen_manifests.sh
@@ -51,6 +51,19 @@ yq --inplace eval '.metadata.annotations["sonataflow.org/profile"] = "prod"' "${
 
 yq --inplace ".spec.podTemplate.container.image=\"quay.io/orchestrator/serverless-workflow-${workflow_id}:latest\"" "${SONATAFLOW_CR}"
 
+if test -f "secret.properties"; then
+  if [ ! -f kubectl ]; then
+    echo "Installing kubectl CLI"
+    curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" 
+    chmod +x kubectl
+  else 
+    echo "kubectl cli already available"
+  fi
+
+  yq --inplace ".spec.podTemplate.container.envFrom=[{\"secretRef\": { \"name\": \"${workflow_id}-creds\"}}]" "${SONATAFLOW_CR}"
+  ../kubectl create -n sonataflow-infra secret generic "${workflow_id}-creds" --from-env-file=secret.properties --dry-run=client -oyaml > "manifests/01-secret_${workflow_id}.yaml"
+fi
+
 yq --inplace ".spec |= (
   . + {
     \"persistence\": {