Hello @johnwook

I might be wrong here because I’m not too familiar with GitHub actions. I think you should be able to add the secret in GitHub GUI as environment variable securely then reuse it in all the deployments.

We have a blog post which might help you in setting it up:

https://www.digitalocean.com/blog/how-to-deploy-to-digitalocean-kubernetes-with-github-actions/

Cheers,

Dikshith

Let me know if you’d like more detail, but I believe what I did was:

• Create a service account in my K8s cluster with exactly the permissions I wanted it to have (update deployments for example).
• Use that service account’s token for the GitHub action secret

That way you don’t have to give GitHub actions your global DO credentials.