Skip to main content
In this guide, you’ll learn how to configure a Kubeconfig file within a GitHub Actions workflow, enabling kubectl to authenticate and interact with a remote Kubernetes cluster as part of your CI/CD pipeline.

​
Initial Workflow

Below is the existing dev-deploy job before integrating the Kubeconfig step:
Without a configured context, kubectl cannot authenticate against your Kubernetes cluster in GitHub Actions.

​
Adding the Kubeconfig Secret

To securely provide your cluster credentials, add the Base64-encoded Kubeconfig to GitHub Actions secrets:
  1. In your repository, go to Settings > Secrets and variables > Actions.
  2. Click New repository secret.
  3. Name the secret KUBECONFIG.
  4. Paste your Base64-encoded Kubeconfig content and save.
Never commit your plain Kubeconfig file to source control. Always store it as an encrypted secret.
The image shows a GitHub repository settings page where a new secret named "KUBECONFIG" is being added under "Actions secrets." The secret value is a long encoded string, and there is an "Add secret" button at the bottom.

​
Selecting the Context Action

Use the azure/k8s-set-context@v3 action to apply the Kubeconfig in your workflow. You can find it by searching “kubeconfig” in the GitHub Marketplace under Actions.
The image shows a GitHub Marketplace search results page for "kubeconfig" under the Actions category, displaying various tools and actions related to Kubernetes configuration.

​
Final Workflow with Kubeconfig

Update your dev-deploy job to include a step that sets the Kubernetes context using the secret:

​
Workflow Step Summary

Commit and push these changes to trigger the GitHub Actions workflow. The pipeline will now read the KUBECONFIG secret, configure context, and run kubectl commands against your remote cluster.

​
Monitoring Workflow Results

After completion, you should see a green checkmark on all jobs, including dev-deploy. The Set Kubeconfig Context step applies your credentials, and the subsequent step confirms connectivity.
The image shows a GitHub Actions workflow summary for a project, displaying successful jobs including unit testing, code coverage, containerization, and deployment.

​
Sample Logs

Using this setup, kubectl authenticates with your remote cluster via the secure Kubeconfig file stored in GitHub Actions secrets.

Watch Video