[release-1.7] RHDHBUGS-2056 Missing steps in the orchestrator installment downstream docs (#1397)

* Update the steps for installing the orchestrator

* Update the steps for installing the orchestrator

* Update the steps for installing the orchestrator

---------

Co-authored-by: GitHub Actions <[email protected]>

Author: openshift-cherrypick-robot

modules/orchestrator/proc-enable-orchestrator-plugin.adoc

@@ -17,7 +17,7 @@ You can enable the Orchestrator plugin in {product-very-short} by configuring dy
 - package: "@redhat/backstage-plugin-orchestrator@<plugin_version>"
   disabled: false
 ----
-
++
 .Example: Complete configuration of the Orchestrator plugin
 [source,yaml]
 ----
@@ -53,5 +53,60 @@ spec:
     dynamicPluginsConfigMapName: orchestrator-plugin
 ----
 
+. Create a secret containing the `BACKEND_SECRET` value as shown in the following example:
++
+[source,yaml]
+----
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: app-config-rhdh
+data:
+  app-config-rhdh.yaml: |-
+    auth:
+      environment: development
+      providers:
+        guest:
+          # using the guest user to query the '/api/dynamic-plugins-info/loaded-plugins' endpoint.
+          dangerouslyAllowOutsideDevelopment: true
+    backend:
+      auth:
+        externalAccess:
+          - type: static
+            options:
+              token: ${BACKEND_SECRET}
+              subject: orchestrator
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backend-auth-secret
+stringData:
+  # generated with the command below (from https://backstage.io/docs/auth/service-to-service-auth/#setup):
+  # node -p 'require("crypto").randomBytes(24).toString("base64")'
+  # notsecret
+  BACKEND_SECRET: "R2FxRVNrcmwzYzhhN3l0V1VRcnQ3L1pLT09WaVhDNUEK"
+----
+
+. Configure your {product-custom-resource-type} CR to update the secret name in the `extraEnvs` field as shown in the following example:
++
+[source,yaml]
+----
+apiVersion: rhdh.redhat.com/v1alpha4
+kind: Backstage
+metadata:
+  name: orchestrator
+spec:
+  application:
+    appConfig:
+      configMaps:
+        - name: app-config-rhdh
+    dynamicPluginsConfigMapName: orchestrator-plugin
+    extraEnvs:
+      secrets:
+          # secret that contains the BACKEND_SECRET key
+        - name: backend-auth-secret
+----
+
 .Verification
 * In the {product-very-short} console, confirm that the Orchestrator frontend and backend features are available.