diff --git a/api/v1alpha1/toolchaincluster_types.go b/api/v1alpha1/toolchaincluster_types.go
index 411d69cd..d695761b 100644
--- a/api/v1alpha1/toolchaincluster_types.go
+++ b/api/v1alpha1/toolchaincluster_types.go
@@ -20,6 +20,10 @@ const (
 	ToolchainClusterClusterNotReadyReason     = "ClusterNotReady"
 	ToolchainClusterClusterNotReachableReason = "ClusterNotReachable"
 	ToolchainClusterClusterReachableReason    = "ClusterReachable"
+
+	// ToolchainClusterLabel is the label on the Secret containing the credentials to connect
+	// to the cluster represented by the ToolchainCluster object.
+	ToolchainClusterLabel = LabelKeyPrefix + "toolchain-cluster"
 )
 
 type TLSValidation string