fix: 修复 KUBECONFIG_B64 解码校验
This commit is contained in:
@@ -34,12 +34,16 @@ jobs:
|
|||||||
curl -sLO "https://dl.k8s.io/release/$KUBECTL_VERSION/bin/linux/amd64/kubectl"
|
curl -sLO "https://dl.k8s.io/release/$KUBECTL_VERSION/bin/linux/amd64/kubectl"
|
||||||
chmod +x kubectl
|
chmod +x kubectl
|
||||||
mv kubectl /usr/local/bin/
|
mv kubectl /usr/local/bin/
|
||||||
echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
|
echo "${{ secrets.KUBECONFIG_B64 }}" | tr -d '[:space:]' | base64 -d > /tmp/kubeconfig
|
||||||
chmod 600 /tmp/kubeconfig
|
chmod 600 /tmp/kubeconfig
|
||||||
if [ ! -s /tmp/kubeconfig ]; then
|
if [ ! -s /tmp/kubeconfig ]; then
|
||||||
echo "ERROR: KUBECONFIG_B64 secret 为空,请先在 lpt-infra 仓库配置 Secret"
|
echo "ERROR: KUBECONFIG_B64 secret 为空,请先在 lpt-infra 仓库配置 Secret"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
if ! grep -q '^apiVersion:' /tmp/kubeconfig; then
|
||||||
|
echo "ERROR: KUBECONFIG_B64 解码后不是有效 kubeconfig,请重新生成并配置 Secret"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
|
kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
|
||||||
|
|
||||||
- name: Apply manifests
|
- name: Apply manifests
|
||||||
|
|||||||
Reference in New Issue
Block a user