From f729de411101ef707103436d425bc9bf906e0ec4 Mon Sep 17 00:00:00 2001
From: admin <admin@cat-shark.xyz>
Date: Wed, 26 Aug 2026 21:13:18 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=20KUBECONFIG=5FB64=20?=
 =?UTF-8?q?=E8=A7=A3=E7=A0=81=E6=A0=A1=E9=AA=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/deploy.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 4ef3e7c..8742b15 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -34,12 +34,16 @@ jobs:
           curl -sLO "https://dl.k8s.io/release/$KUBECTL_VERSION/bin/linux/amd64/kubectl"
           chmod +x kubectl
           mv kubectl /usr/local/bin/
-          echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
+          echo "${{ secrets.KUBECONFIG_B64 }}" | tr -d '[:space:]' | base64 -d > /tmp/kubeconfig
           chmod 600 /tmp/kubeconfig
           if [ ! -s /tmp/kubeconfig ]; then
             echo "ERROR: KUBECONFIG_B64 secret 为空，请先在 lpt-infra 仓库配置 Secret"
             exit 1
           fi
+          if ! grep -q '^apiVersion:' /tmp/kubeconfig; then
+            echo "ERROR: KUBECONFIG_B64 解码后不是有效 kubeconfig，请重新生成并配置 Secret"
+            exit 1
+          fi
           kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
 
       - name: Apply manifests