fix: 修复 KUBECONFIG_B64 解码校验

2026-08-26 21:13:18 +08:00
parent 4d48c2474f
commit f729de4111
1 changed files with 5 additions and 1 deletions
@@ -34,12 +34,16 @@ jobs:
          curl -sLO "https://dl.k8s.io/release/$KUBECTL_VERSION/bin/linux/amd64/kubectl"
          chmod +x kubectl
          mv kubectl /usr/local/bin/
-          echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
+          echo "${{ secrets.KUBECONFIG_B64 }}" | tr -d '[:space:]' | base64 -d > /tmp/kubeconfig
          chmod 600 /tmp/kubeconfig
          if [ ! -s /tmp/kubeconfig ]; then
            echo "ERROR: KUBECONFIG_B64 secret 为空，请先在 lpt-infra 仓库配置 Secret"
            exit 1
          fi
+          if ! grep -q '^apiVersion:' /tmp/kubeconfig; then
+            echo "ERROR: KUBECONFIG_B64 解码后不是有效 kubeconfig，请重新生成并配置 Secret"
+            exit 1
+          fi
          kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null

      - name: Apply manifests