From f6adaed6c97f07455dd0c6c49e1f21e07d94475d Mon Sep 17 00:00:00 2001
From: admin <admin@cat-shark.xyz>
Date: Sun, 2 Aug 2026 11:05:54 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E6=B5=81=E6=B0=B4=E7=BA=BF=E6=98=BE?=
 =?UTF-8?q?=E5=BC=8F=E6=8C=87=E5=AE=9Akubeconfig=E5=B9=B6=E6=A0=A1?=
 =?UTF-8?q?=E9=AA=8CSecret?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/deploy.yml | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 7ed8e50..4ef3e7c 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -36,6 +36,11 @@ jobs:
           mv kubectl /usr/local/bin/
           echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
           chmod 600 /tmp/kubeconfig
+          if [ ! -s /tmp/kubeconfig ]; then
+            echo "ERROR: KUBECONFIG_B64 secret 为空，请先在 lpt-infra 仓库配置 Secret"
+            exit 1
+          fi
+          kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
 
       - name: Apply manifests
         run: |
@@ -44,17 +49,17 @@ jobs:
           case "$ENV" in
             all)
               echo "Applying dev/ ..."
-              kubectl apply -f dev/
+              kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
               echo "Applying prod/ ..."
-              kubectl apply -f prod/
+              kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
               ;;
             dev)
               echo "Applying dev/ ..."
-              kubectl apply -f dev/
+              kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
               ;;
             prod)
               echo "Applying prod/ ..."
-              kubectl apply -f prod/
+              kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
               ;;
             *)
               echo "ERROR: unknown environment=$ENV"
@@ -68,13 +73,13 @@ jobs:
           ENV="${{ inputs.environment }}"
           case "$ENV" in
             all)
-              kubectl get deploy,pods -n lpt-dev
-              kubectl get deploy,pods -n lpt-prod
+              kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
+              kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
               ;;
             dev)
-              kubectl get deploy,pods -n lpt-dev
+              kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
               ;;
             prod)
-              kubectl get deploy,pods -n lpt-prod
+              kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
               ;;
           esac