k3s cert in ci

Author: HardMax71

.github/workflows/backend-ci.yml

@@ -46,27 +46,14 @@ jobs:
           export KUBECONFIG=/home/runner/.kube/config
           timeout 90 bash -c 'until sudo k3s kubectl cluster-info; do sleep 5; done'
 
-      - name: Create kubeconfig for CI
+      - name: Create kubeconfig for CI Docker containers
         run: |
-          cat > backend/kubeconfig.yaml <<EOF
-          apiVersion: v1
-          kind: Config
-          clusters:
-          - name: ci-cluster
-            cluster:
-              server: https://host.docker.internal:6443
-              insecure-skip-tls-verify: true
-          users:
-          - name: ci-user
-            user:
-              token: "ci-token"
-          contexts:
-          - name: ci
-            context:
-              cluster: ci-cluster
-              user: ci-user
-          current-context: ci
-          EOF
+          # Copy real k3s kubeconfig with valid credentials, but change server address
+          # from 127.0.0.1 to host.docker.internal for Docker container networking
+          # (k3s was started with --tls-san host.docker.internal so the cert is valid)
+          sed 's|https://127.0.0.1:6443|https://host.docker.internal:6443|g' \
+            /home/runner/.kube/config > backend/kubeconfig.yaml
+          chmod 644 backend/kubeconfig.yaml
 
       - name: Setup CI Compose
         uses: ./.github/actions/setup-ci-compose