diff --git a/.buildkite/secrets/.gitignore b/.buildkite/secrets/.gitignore
new file mode 100644
index 0000000000000..2a84f48682a04
--- /dev/null
+++ b/.buildkite/secrets/.gitignore
@@ -0,0 +1,11 @@
+# Ignore everything
+*
+
+# Don't ignore this `.gitignore` file
+!.gitignore
+
+# Don't ignore encrypted files
+!*.encrypted
+
+# Don't ignore public keys, that's fine to include
+!*.pub
diff --git a/.buildkite/secrets/ssh_docs_deploy.encrypted b/.buildkite/secrets/ssh_docs_deploy.encrypted
new file mode 100644
index 0000000000000..8b7e2ffe27940
Binary files /dev/null and b/.buildkite/secrets/ssh_docs_deploy.encrypted differ
diff --git a/.buildkite/secrets/ssh_docs_deploy.pub b/.buildkite/secrets/ssh_docs_deploy.pub
new file mode 100644
index 0000000000000..eaea073e5257b
--- /dev/null
+++ b/.buildkite/secrets/ssh_docs_deploy.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2HupO7+uq6NE//ZCCYS1szwDVutH8ZVtF0wjJJGmfRLzDe6l2Kcx+CY+i3k2HoxrfNlmri3RdWrfDbEruPZlWaz9HH/Hi8S8ZkyQO932dbag7u5JGKw3Mb/3x05O2QaL+0HGItUyfFMFT9NBZ1na+AH/ZPWamXR98PLh39ic1HFw2x2hacYA/4w0ylxwrojRfCqcjK/YVJUCdQ/XwsmSjs+0+rIfdVwSLbJKeHj5JYLX6CmF4zf4WzJKKDXx1k6gwaSS6oY5XOVit2I1u80cxZRiQhrMfYPKywY5+Y6gqjrGABLYSq/JJRKsgdJxs39V8O1ZjXVsGxbR+1r3F9ISH buildkite-docs-deploy