# kubectl create secret generic tidbcloud-secret -n test-infra --dry-run=client -oyaml \
# --from-literal=TIDBCLOUD_URL=us-west-2.staging.shared.aws.tidbcloud.com \
# --from-literal=TIDBCLOUD_THANOS_URL=http://tidbcloud-kubectl-proxy-service.test-infra:8001/api/v1/namespaces/monitoring/services/http:thanos-query:9090/proxy \
# --from-literal=TIDBCLOUD_AUTH0_CLIENT_ID= \
# --from-literal=TIDBCLOUD_AUTH0_CLIENT_SECRET= \
# --from-literal=TIDBCLOUD_AUTH0_DOMAIN= \
# --from-literal=TIDBCLOUD_REGION=us-west-2 \
# --from-literal=TIDBCLOUD_CLOUD_PROVIDER=aws \
# --from-literal=TIDBCLOUD_BASE_EKS_APISERVER_ENDPOINT= \
# --from-literal=TIDBCLOUD_BASE_EKS_ASSUME_ROLE= \
# --from-literal=TIDBCLOUD_BASE_EKS_CLUSTER_NAME= \
# --from-literal=TIDBCLOUD_SHOOT_KUBE_CONFIG_SECRET_NS=