From 0480ba7e84fa32e72acdd477cdb1a3de58bd8fe3 Mon Sep 17 00:00:00 2001
From: Clemens Hering <c.hering@hotmail.de>
Date: Sun, 1 Mar 2026 08:39:05 +0100
Subject: [PATCH] Fix

---
 .gitea/workflows/deploy-kubeviz.yml | 24 +++++++++++++++++-------
 1 file changed, 17 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/deploy-kubeviz.yml b/.gitea/workflows/deploy-kubeviz.yml
index b2bfdd7..2f71ff1 100644
--- a/.gitea/workflows/deploy-kubeviz.yml
+++ b/.gitea/workflows/deploy-kubeviz.yml
@@ -34,16 +34,26 @@ jobs:
             exit 1
           fi
 
-          if [ -z "${token}" ]; then
-            echo "No token available for git clone."
-            echo "Set secret CI_REPO_TOKEN with read access to ${repo}."
+          host="$(printf '%s' "${server_url}" | sed -E 's#https?://##')"
+          if [ -n "${token}" ]; then
+            proto="$(printf '%s' "${server_url}" | sed -E 's#(https?://).*#\1#')"
+            repo_url="${proto}${actor}:${token}@${host}/${repo}.git"
+            echo "Using token-based checkout."
+          elif [ -f "${HOME}/.ssh/id_ed25519" ] || [ -f "${HOME}/.ssh/id_rsa" ]; then
+            mkdir -p "${HOME}/.ssh"
+            chmod 700 "${HOME}/.ssh"
+            if [ ! -f "${HOME}/.ssh/known_hosts" ]; then
+              ssh-keyscan -t rsa,ecdsa,ed25519 "${host}" >> "${HOME}/.ssh/known_hosts"
+              chmod 600 "${HOME}/.ssh/known_hosts"
+            fi
+            repo_url="git@${host}:${repo}.git"
+            echo "Using SSH deploy-key checkout (${repo_url})."
+          else
+            echo "No token available and no SSH key found for git clone."
+            echo "Either set CI_REPO_TOKEN secret or install deploy key at ${HOME}/.ssh/id_ed25519."
             exit 1
           fi
 
-          proto="$(printf '%s' "${server_url}" | sed -E 's#(https?://).*#\1#')"
-          host="$(printf '%s' "${server_url}" | sed -E 's#https?://##')"
-          repo_url="${proto}${actor}:${token}@${host}/${repo}.git"
-
           rm -rf "${workspace}"
           mkdir -p "${workspace}"
           git clone --depth 1 --no-tags "${repo_url}" "${workspace}"