summaryrefslogtreecommitdiff
path: root/.github/workflows/ci-cd.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/ci-cd.yml')
-rw-r--r--.github/workflows/ci-cd.yml3
1 files changed, 2 insertions, 1 deletions
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 41ba5978..56fc5f12 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -77,8 +77,9 @@ jobs:
with:
token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
+ # Short-lived credentials (5 min) to avoid accumulating tokens
- name: Setup DigitalOcean kubeconfig
- run: doctl kubernetes cluster kubeconfig save bro-cluster
+ run: doctl kubernetes cluster kubeconfig save --expiry-seconds 300 bro-cluster
- name: Update deployment file
run: TAG=${{ env.DOCKER_IMAGE_TAG_BUILD }} && sed -i 's|:latest|:'${TAG}'|' kubernetes/server.yml
bgstack15