diff --git a/config/moda/secrets/ci/secrets.yml b/config/moda/secrets/ci/secrets.yml
new file mode 100644
index 00000000..4ca0285b
--- /dev/null
+++ b/config/moda/secrets/ci/secrets.yml
@@ -0,0 +1,9 @@
+---
+secrets:
+  kittens:
+    key: kittens
+    type: kittens
+    owner: ''
+    playbook:
+    externally_usable: false
+    kind: latest_at_deployment_start
diff --git a/config/moda/secrets/production/secrets.yml b/config/moda/secrets/production/secrets.yml
new file mode 100644
index 00000000..1dca37f6
--- /dev/null
+++ b/config/moda/secrets/production/secrets.yml
@@ -0,0 +1,30 @@
+---
+secrets:
+  kittens:
+    key: kittens
+    type: kittens
+    owner: ''
+    playbook:
+    externally_usable: false
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing:
+    key: spn_copilot_cli_signing
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing_client_id:
+    key: spn_copilot_cli_signing_client_id
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing_tenant_id:
+    key: spn_copilot_cli_signing_tenant_id
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start