From d75d35dfc06ea6a0a958ff9f9b5921657cc686f3 Mon Sep 17 00:00:00 2001
From: zyc <1439655764@qq.com>
Date: Thu, 19 Mar 2026 14:46:33 +0800
Subject: [PATCH] Migrate deployment from Volcengine VKE to K3s

- Switch CI/CD target from KUBE_CONFIG_VKE to KUBE_CONFIG_K3S
- Change ingress class from ALB to traefik (K3S built-in)
- Remove VCI annotations from deployments
- Restore imagePullSecrets for SWR registry access

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitea/workflows/deploy.yaml | 4 ++--
 k8s/backend-deployment.yaml  | 4 ++--
 k8s/ingress.yaml             | 4 +---
 k8s/web-deployment.yaml      | 4 ++--
 4 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 6b499ce..fdf43cb 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -54,10 +54,10 @@ jobs:
           chmod +x kubectl
           mv kubectl /usr/local/bin/
 
-      - name: Deploy to Volcengine VKE
+      - name: Deploy to K3s
         run: |
           mkdir -p ~/.kube
-          echo "${{ secrets.KUBE_CONFIG_VKE }}" > ~/.kube/config
+          echo "${{ secrets.KUBE_CONFIG_K3S }}" > ~/.kube/config
 
       - name: Create or Update Secrets
         run: |
diff --git a/k8s/backend-deployment.yaml b/k8s/backend-deployment.yaml
index dfc03f9..73b1bf6 100644
--- a/k8s/backend-deployment.yaml
+++ b/k8s/backend-deployment.yaml
@@ -13,9 +13,9 @@ spec:
     metadata:
       labels:
         app: video-backend
-      annotations:
-        vke.volcengine.com/burst-to-vci: "enforce"
     spec:
+      imagePullSecrets:
+      - name: swr-secret
       containers:
       - name: video-backend
         image: ${CI_REGISTRY_IMAGE}/video-backend:latest
diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
index 071f433..28c2890 100644
--- a/k8s/ingress.yaml
+++ b/k8s/ingress.yaml
@@ -3,9 +3,7 @@ kind: Ingress
 metadata:
   name: video-huoshan-ingress
   annotations:
-    kubernetes.io/ingress.class: "alb"
-    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
-    alb.ingress.kubernetes.io/ssl-redirect: "true"
+    kubernetes.io/ingress.class: "traefik"
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   tls:
diff --git a/k8s/web-deployment.yaml b/k8s/web-deployment.yaml
index a8b2bdb..572da96 100644
--- a/k8s/web-deployment.yaml
+++ b/k8s/web-deployment.yaml
@@ -13,9 +13,9 @@ spec:
     metadata:
       labels:
         app: video-web
-      annotations:
-        vke.volcengine.com/burst-to-vci: "enforce"
     spec:
+      imagePullSecrets:
+      - name: swr-secret
       containers:
       - name: video-web
         image: ${CI_REGISTRY_IMAGE}/video-web:latest