From f5480f9f1ce116170f4f454c93e3be999952f3c7 Mon Sep 17 00:00:00 2001
From: jordan <jordan.washburn@gmail.com>
Date: Fri, 6 Mar 2026 12:42:58 -0700
Subject: [PATCH] ci: base64-decode kubeconfig secret before writing to file

---
 .woodpecker.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 298b78f..861dd39 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -25,7 +25,7 @@ steps:
       KUBECONFIG_DATA:
         from_secret: kubeconfig
     commands:
-      - mkdir -p ~/.kube && echo "$KUBECONFIG_DATA" > ~/.kube/config
+      - mkdir -p /root/.kube && echo "$KUBECONFIG_DATA" | base64 -d > /root/.kube/config
       - kubectl set image deployment/stemedb-api stemedb-api=registry.threesix.ai/stemedb-api:${CI_COMMIT_SHA:0:8} -n stemedb
       - kubectl rollout status deployment/stemedb-api -n stemedb --timeout=300s
     depends_on: [build]