Harden the kubectl download against flaky egress [skip ci]

FixVectorService
Shipped
August 3, 2026 at 2:39 AM UTC
Author
Kamo
Commit
a4d4981

dl.k8s.io over the runner's egress intermittently drops mid-transfer: curl: (56) OpenSSL SSL_read: decryption failed or bad record mac which fails the deploy on an otherwise-green build. Observed repeatedly on kamo-signer-monorepo and kamo-translation-dictionary. Adds --retry/--retry-all-errors: plain --retry does NOT cover that class of mid-transfer failure. Also upgrades -sL to -fsSL, so an HTTP error response is a failure instead of being written into the file as a bogus kubectl binary. CI-only change; [skip ci] so this does not redeploy the service. It takes effect on the repo's next real build.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing