DigitalOcean
Cloud Personal access tokenCreate and manage Droplets, Kubernetes clusters, databases, load balancers and DNS from any Windmill script, flow or app.
Set up in 3 steps
Create a personal access token
In the DigitalOcean control panel, open API, then Tokens. Create one with write scope if your scripts create anything, and copy it — it is shown only once.
Add the resource in Windmill
Open Resources, add a resource of type digitalocean, and paste the token.
Run your first script
Fork any script below and read before writing anything. There are hundreds here, so search by the verb you need.
Scripts
Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.
Validate a Container Registry Name
Validate App Rollback
Upgrade a Kubernetes Cluster
Upgrade Major Version for a Database
Update the Default Project
Update the Database Configuration for an Existing Database
Update destinations for alerts
Update an SSH Key's Name
Update an Image
Update an App
Update an Alert Policy
Update an Alert
Update a VPC peering
Update a VPC
Update a Project
Update a Node Pool in a Kubernetes Cluster
Update a Load Balancer
Update a Kubernetes Cluster
Update a Firewall
Update a Domain Record
Update a Database User
Update a Check
Update a CDN Endpoint
Update Trigger
Update Topic for a Kafka Cluster
Update Subscription Tier
Update SQL Mode for a Cluster
Update Logsink for a Database Cluster
Update Logging Destination
Update Garbage Collection
Resource type
digitalocean — the shape of the credential every script on this page expects.
| Field | Type | Required | What it is |
|---|---|---|---|
| token | string | Yes |
Questions
Creating things costs money
Droplets, clusters and load balancers bill from the moment they exist. Scripts that create them should have a matching path that destroys them.
Every write returns 403
The token is read-only. Scope is fixed when a token is created, so make a new one with write access.
Is my token stored on the hub?
Never. It lives only in your own Windmill workspace, encrypted at rest.