Migrate deployment from Volcengine VKE to K3s

- Switch CI/CD target from KUBE_CONFIG_VKE to KUBE_CONFIG_K3S
- Change ingress class from ALB to traefik (K3S built-in)
- Remove VCI annotations from deployments
- Restore imagePullSecrets for SWR registry access

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -54,10 +54,10 @@ jobs:
           chmod +x kubectl
           mv kubectl /usr/local/bin/
 
-      - name: Deploy to Volcengine VKE
+      - name: Deploy to K3s
         run: |
           mkdir -p ~/.kube
-          echo "${{ secrets.KUBE_CONFIG_VKE }}" > ~/.kube/config
+          echo "${{ secrets.KUBE_CONFIG_K3S }}" > ~/.kube/config
 
       - name: Create or Update Secrets
         run: |

k8s/backend-deployment.yaml

@@ -13,9 +13,9 @@ spec:
     metadata:
       labels:
         app: video-backend
-      annotations:
-        vke.volcengine.com/burst-to-vci: "enforce"
     spec:
+      imagePullSecrets:
+      - name: swr-secret
       containers:
       - name: video-backend
         image: ${CI_REGISTRY_IMAGE}/video-backend:latest

k8s/ingress.yaml

@@ -3,9 +3,7 @@ kind: Ingress
 metadata:
   name: video-huoshan-ingress
   annotations:
-    kubernetes.io/ingress.class: "alb"
-    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
-    alb.ingress.kubernetes.io/ssl-redirect: "true"
+    kubernetes.io/ingress.class: "traefik"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   tls:

k8s/web-deployment.yaml

@@ -13,9 +13,9 @@ spec:
     metadata:
       labels:
         app: video-web
-      annotations:
-        vke.volcengine.com/burst-to-vci: "enforce"
     spec:
+      imagePullSecrets:
+      - name: swr-secret
       containers:
       - name: video-web
         image: ${CI_REGISTRY_IMAGE}/video-web:latest