diff --git a/.drone.yml b/.drone.yml
index 28e1704e2bf..afee8af9463 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -4179,6 +4179,18 @@ get:
 kind: secret
 name: prerelease_bucket
 ---
+get:
+  name: username
+  path: infra/data/ci/grafanaci-docker-hub
+kind: secret
+name: docker_username
+---
+get:
+  name: password
+  path: infra/data/ci/grafanaci-docker-hub
+kind: secret
+name: docker_password
+---
 get:
   name: credentials.json
   path: infra/data/ci/grafana/releng/artifacts-uploader-service-account
@@ -4330,6 +4342,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 6e0557d0803fe49def459921054bf6641a592426639e24f91d857138eeb47c52
+hmac: 95a078ec021e3a8992d25bb971e51cd8b0cdc7952c437ce951ee7a98c1448bfb
 
 ...
diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star
index 04b57b105b0..b362d9482dd 100644
--- a/scripts/drone/vault.star
+++ b/scripts/drone/vault.star
@@ -41,6 +41,8 @@ def secrets():
         vault_secret("github_token", "infra/data/ci/github/grafanabot", "pat"),
         vault_secret(drone_token, "infra/data/ci/drone", "machine-user-token"),
         vault_secret(prerelease_bucket, "infra/data/ci/grafana/prerelease", "bucket"),
+        vault_secret("docker_username", "infra/data/ci/grafanaci-docker-hub", "username"),
+        vault_secret("docker_password", "infra/data/ci/grafanaci-docker-hub", "password"),
         vault_secret(
             gcp_upload_artifacts_key,
             "infra/data/ci/grafana/releng/artifacts-uploader-service-account",