From 7af22f9de4e7c215de201b0c71bcfbf0e8c479e9 Mon Sep 17 00:00:00 2001
From: Timo Behrendt <t.behrendt@t00n.de>
Date: Sun, 25 Jan 2026 17:16:51 +0100
Subject: [PATCH] correctly create the secret

---
 .gitea/workflows/deploy.yaml | 20 ++++++++------------
 1 file changed, 8 insertions(+), 12 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 12472af..7a6a80e 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -148,18 +148,14 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set docker registry credentials
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5
-        with:
-          namespace: default
-          secret-name: regcred-dockerhub
-          secret-type: generic
-          data: |
-            {
-              "docker-server": "https://hub.docker.com"
-              "docker-username": "${{ secrets.DOCKER_USERNAME }}"
-              "docker-password": "${{ secrets.DOCKER_PASSWORD }}"
-              "docker-email": "${{ secrets.DOCKER_EMAIL }}"
-            }
+        run: |
+          kubectl create secret docker-registry regcred-dockerhub \
+            --docker-server=https://index.docker.io/v1/ \
+            --docker-username="${{ secrets.DOCKER_USERNAME }}" \
+            --docker-password="${{ secrets.DOCKER_PASSWORD }}" \
+            --docker-email="${{ secrets.DOCKER_EMAIL }}" \
+            --namespace=default \
+            --dry-run=client -o yaml | kubectl apply -f -
       - name: Configure image pull secret globally
         run: |
           kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regcred-dockerhub"}]}'