diff --git a/styx-scheduler-service/src/main/java/com/spotify/styx/GetGKESecret.java b/styx-scheduler-service/src/main/java/com/spotify/styx/GetGKESecret.java
new file mode 100644
index 0000000000..69e7e941b8
--- /dev/null
+++ b/styx-scheduler-service/src/main/java/com/spotify/styx/GetGKESecret.java
@@ -0,0 +1,17 @@
+package com.spotify.styx;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import com.google.common.hash.Hashing;
+
+public class GetGKESecret {
+  private GetGKESecret() {}
+
+  public static void main(String[] args) {
+    var serviceAccount = "service-account";
+    var suffix = Hashing.sha256().hashString(serviceAccount, UTF_8);
+    System.out.println(suffix);
+    // Then do:
+    // kubectl get secrets | grep <suffix>
+  }
+}