diff --git a/create-ocp-project/secrets.properties b/create-ocp-project/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/create-ocp-project/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/escalation/secrets.properties b/escalation/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/escalation/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/modify-vm-resources/secrets.properties b/modify-vm-resources/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/modify-vm-resources/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/move2kube/secrets.properties b/move2kube/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/move2kube/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta-v6.x/secrets.properties b/mta-v6.x/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta-v6.x/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta-v7.x/secrets.properties b/mta-v7.x/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta-v7.x/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mta/secrets.properties b/mta/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mta/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mtv-migration/secrets.properties b/mtv-migration/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mtv-migration/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/mtv-plan/secrets.properties b/mtv-plan/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/mtv-plan/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/request-vm-cnv/secrets.properties b/request-vm-cnv/secrets.properties
new file mode 100644
index 00000000..4550a6db
--- /dev/null
+++ b/request-vm-cnv/secrets.properties
@@ -0,0 +1 @@
+NOTIFICATIONS_BEARER_TOKEN=
\ No newline at end of file
diff --git a/scripts/gen_manifests.sh b/scripts/gen_manifests.sh
index eb8c6c3e..5d064cdc 100755
--- a/scripts/gen_manifests.sh
+++ b/scripts/gen_manifests.sh
@@ -15,6 +15,15 @@ else
   echo "kn cli already available"
 fi
 
+if [ ! -f kubectl ]; then
+  echo "Installing kubectl CLI"
+  curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" 
+  chmod +x kubectl
+else 
+  echo "kubectl cli already available"
+fi
+
+
 cd "${WORKFLOW_ID}" || exit
 
 echo -e "\nquarkus.flyway.migrate-at-start=true" >> application.properties
@@ -47,6 +56,10 @@ yq --inplace eval '.metadata.annotations["sonataflow.org/profile"] = "prod"' "${
 yq --inplace ".spec.podTemplate.container.image=\"quay.io/orchestrator/serverless-workflow-${workflow_id}:latest\"" "${SONATAFLOW_CR}"
 yq --inplace ".spec.podTemplate.container.envFrom=[{\"secretRef\": { \"name\": \"${workflow_id}-creds\"}}]" "${SONATAFLOW_CR}"
 
+if test -f "secrets.properties"; then
+  ../kubectl create -n sonataflow-infra secret generic "${workflow_id}-creds" --from-env-file=secrets.properties --dry-run=client -oyaml > "manifests/00-secrets_${workflow_id}.yaml"
+fi
+
 if [ "$ENABLE_PERSISTENCE" = false ]; then
   exit
 fi