diff --git a/clouds/k8s-infra.yaml.example b/clouds/k8s-infra.yaml.example
deleted file mode 100644
index 927fa19..0000000
--- a/clouds/k8s-infra.yaml.example
+++ /dev/null
@@ -1,53 +0,0 @@
----
-jenkins:
-  clouds:
-  - kubernetes:
-      name: k8s-infra
-      connectTimeout: 5
-      containerCapStr: 10
-      credentialsId: k8s-infra-config
-      maxRequestsPerHostStr: 32
-      readTimeout: 15
-      skipTlsVerify: true
-      webSocket: true
-      templates:
-      - name: dind-infra
-        showRawYaml: false
-        containers:
-        - name: docker
-          args: 99d
-          command: sleep
-          envVars:
-          - envVar:
-              key: DOCKER_HOST
-              value: tcp://localhost:2375
-          image: docker:19.03.1
-          livenessProbe:
-            failureThreshold: 0
-            initialDelaySeconds: 0
-            periodSeconds: 0
-            successThreshold: 0
-            timeoutSeconds: 0
-          workingDir: /home/jenkins/agent
-        - name: docker-daemon
-          envVars:
-          - envVar:
-              key: DOCKER_TLS_CERTDIR
-          image: docker:19.03.1-dind
-          livenessProbe:
-            failureThreshold: 0
-            initialDelaySeconds: 0
-            periodSeconds: 0
-            successThreshold: 0
-            timeoutSeconds: 0
-          privileged: true
-
-credentials:
-  system:
-    domainCredentials:
-    - credentials:
-        - file:
-            id: k8s-infra-config
-            fileName: k8s-re-jenkins-us-prod.yaml
-            secretBytes: ${CRED_K8S_RE_JENKINS_CONFIG_CONTENT}
-
diff --git a/clouds/kubernetes.yaml b/clouds/kubernetes.yaml
new file mode 100644
index 0000000..54a0447
--- /dev/null
+++ b/clouds/kubernetes.yaml
@@ -0,0 +1,67 @@
+---
+jenkins:
+  clouds:
+  - kubernetes:
+      name: "k8s-sandbox"
+      connectTimeout: 5
+      containerCapStr: "10"
+      credentialsId: "k8s-sandbox-token"
+      maxRequestsPerHostStr: "32"
+      readTimeout: 15
+      serverUrl: ${K8S_SERVICE_URL}
+      skipTlsVerify: true
+      webSocket: true
+      templates:
+      - name: "dind1"
+        showRawYaml: true
+        containers:
+        - name: "docker"
+          args: "99d"
+          command: "sleep"
+          envVars:
+          - envVar:
+              key: "DOCKER_HOST"
+              value: "tcp://localhost:2375"
+          image: "docker:19.03.1"
+          livenessProbe:
+            failureThreshold: 0
+            initialDelaySeconds: 0
+            periodSeconds: 0
+            successThreshold: 0
+            timeoutSeconds: 0
+          workingDir: "/home/jenkins/agent"
+        - name: "docker-daemon"
+          envVars:
+          - envVar:
+              key: "DOCKER_TLS_CERTDIR"
+          image: "docker:19.03.1-dind"
+          livenessProbe:
+            failureThreshold: 0
+            initialDelaySeconds: 0
+            periodSeconds: 0
+            successThreshold: 0
+            timeoutSeconds: 0
+          privileged: true
+      - name: "dind2"
+        showRawYaml: false
+        yaml: |
+          apiVersion: v1
+          kind: Pod
+          spec:
+            containers:
+            - name: docker
+              image: docker:19.03.1
+              command:
+              - sleep
+              args:
+              - 99d
+              env:
+              - name: DOCKER_HOST
+                value: tcp://localhost:2375
+            - name: docker-daemon
+              image: docker:19.03.1-dind
+              securityContext:
+                privileged: true
+              env:
+              - name: DOCKER_TLS_CERTDIR
+                value: ""