diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index d6ed462..b6817ca 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -78,25 +78,11 @@ jobs:
         uses: azure/setup-kubectl@v4
 
       - name: Configure kubectl
-        env:
-          KUBE_CONFIG_B64: ${{ secrets.KUBE_CONFIG_B64 }}
         run: |
-          if [ -z "$KUBE_CONFIG_B64" ]; then
-            echo "Missing KUBE_CONFIG_B64 secret for the CI deploy identity" >&2
-            exit 1
-          fi
-
-          kube_dir="$RUNNER_TEMP/buzz-sheet-kube"
-          mkdir -p "$kube_dir"
-          chmod 700 "$kube_dir"
-          export KUBECONFIG="$kube_dir/config"
-          printf '%s' "$KUBE_CONFIG_B64" | base64 --decode >"$KUBECONFIG"
-          chmod 600 "$KUBECONFIG"
-
-          env_file="${GITEA_ENV_FILE:-${GITHUB_ENV:-}}"
-          if [ -n "$env_file" ]; then
-            printf '%s\n' "KUBECONFIG=$KUBECONFIG" >> "$env_file"
-          fi
+          kubectl config set-cluster buzz --server=https://100.75.220.33:6443 --insecure-skip-tls-verify=true
+          kubectl config set-credentials ci-deployer --token=${{ secrets.KUBE_TOKEN }}
+          kubectl config set-context buzz --cluster=buzz --user=ci-deployer --namespace=buzz
+          kubectl config use-context buzz
 
       - name: Migrate, then roll out the immutable revision
         env: