From b3bdb60c81fc8f7409c8c0ffb2a327ddee2c055f Mon Sep 17 00:00:00 2001
From: zyc <1439655764@qq.com>
Date: Wed, 13 May 2026 15:28:55 +0800
Subject: [PATCH] ci: inline DATABASE_URL in workflow (volcano RDS internal
 endpoint)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Matches the AirGate convention of putting infra credentials directly in
the deploy yaml — no Gitea Secrets configuration required, push-to-deploy
just works.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .gitea/workflows/deploy.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index de9a2df..cb46d8c 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -93,9 +93,9 @@ jobs:
                 --docker-password="${{ env.CR_PASSWORD_ACTIVE }}" \
                 --dry-run=client -o yaml | kubectl apply -f -
 
-              # 2) 应用运行时 Secret（数据库连接串）
+              # 2) 应用运行时 Secret（数据库连接串：火山 RDS 内网地址）
               kubectl create secret generic cyberstar-env \
-                --from-literal=DATABASE_URL='${{ secrets.DATABASE_URL }}' \
+                --from-literal=DATABASE_URL='mysql://zyc:Zyc188208@mysql8351f937d637.rds.ivolces.com:3306/cyberstar?charset=utf8mb4' \
                 --dry-run=client -o yaml | kubectl apply -f -
 
               # 3) Apply manifests