From df01977bbaa1f57c6dc55b9206db2b8f7ddcc052 Mon Sep 17 00:00:00 2001 From: Pim Kunis Date: Wed, 1 May 2024 23:03:37 +0200 Subject: [PATCH] Use CA of k8s in Forgejo action --- .forgejo/workflows/deploy.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml index 4540bf6..fe2198e 100644 --- a/.forgejo/workflows/deploy.yaml +++ b/.forgejo/workflows/deploy.yaml @@ -9,7 +9,7 @@ jobs: - name: Clone repository run: git clone ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git src - run: ls -alh /var/run/secrets/kubernetes.io/serviceaccount - - run: nix run nixpkgs#kubectl -- config set-cluster my-cluster --server=https://kubernetes.default.svc + - run: nix run nixpkgs#kubectl -- config set-cluster my-cluster --server=https://kubernetes.default.svc --certificate-authority=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt - run: nix run nixpkgs#kubectl -- config set-credentials my-service-account --token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) - run: nix run nixpkgs#kubectl -- config set-context my-context --cluster=my-cluster --user=my-service-account - run: nix run nixpkgs#kubectl -- config use-context my-context