diff --git a/credentials/infra.yaml b/credentials/infra.yaml
new file mode 100644
index 0000000..61ccc95
--- /dev/null
+++ b/credentials/infra.yaml
@@ -0,0 +1,27 @@
+---
+credentials:
+  system:
+    domainCredentials:
+    - credentials:
+      - basicSSHUserPrivateKey:
+          id: sandbox-ci
+          username: sandbox-ci
+          description: >
+            Jenkins master SSH key
+          privateKeySource:
+            directEntry:
+              privateKey: ${CRED_SANDBOX_CI_SSH_KEY}
+      - basicSSHUserPrivateKey:
+          id: sandbox-ci-agent
+          username: jenkins
+          description: >
+            Jenkins master SSH key for agents
+          privateKeySource:
+            directEntry:
+              privateKey: ${CRED_SANDBOX_CI_SSH_KEY}
+      - usernamePassword:
+          id: jjb-update
+          username: sandbox-jenkins
+          password: ${CRED_JJB_UPDATE_PASSWORD}
+          description: |
+            Credentials to update jenkins-jobs