From 347bfb4df0668146e2973b455c09b266dd3452da Mon Sep 17 00:00:00 2001
From: Nathanial Lubitz <nate.lubitz@gmail.com>
Date: Mon, 29 Jun 2026 17:14:59 +1000
Subject: [PATCH] allow insecure piece

---
 entrypoint.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index 70417e3..b28294c 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -43,7 +43,7 @@ case "$COMMAND" in
     else
       kforge generate --output .kforge-out -c "$CONFIG"
     fi
-    kubectl apply -f .kforge-out/ --insecure-skip-tls-verify
+    kubectl apply -f .kforge-out/ --insecure-skip-tls-verify --validate=false
     NAMESPACE="${INPUT_NAMESPACE:-${INPUT_ENV}}"
     if [ -n "$NAMESPACE" ]; then
       kubectl rollout restart deployment -n "$NAMESPACE" --insecure-skip-tls-verify || true
@@ -55,7 +55,7 @@ case "$COMMAND" in
     setup_kube
     kforge secrets apply --pr-number "$INPUT_PR_NUMBER" -c "$CONFIG"
     kforge generate --pr-number "$INPUT_PR_NUMBER" --output .kforge-out -c "$CONFIG"
-    kubectl apply -f .kforge-out/ --insecure-skip-tls-verify
+    kubectl apply -f .kforge-out/ --insecure-skip-tls-verify --validate=false
     NS="${INPUT_NAMESPACE_PREFIX:-preview-pr}-${INPUT_PR_NUMBER}"
     kubectl rollout status deployment -n "$NS" --timeout=120s --insecure-skip-tls-verify || true
     ;;