update validation

2026-06-29 16:58:52 +10:00
parent 1881ea2e99
commit 565a91e235
2 changed files with 9 additions and 8 deletions
@@ -141,9 +141,8 @@ type requiredSecret struct {
 // kforge.yml requires, based on what's enabled.
 func buildRequiredSecrets(cfg *config.KforgeConfig) []requiredSecret {
 	secrets := []requiredSecret{
-		// Always required — org level
-		{Name: "DOCKER_USERNAME", Location: "Gitea org secret", Required: true},
-		{Name: "DOCKER_PASSWORD", Location: "Gitea org secret", Required: true},
+		// kforge only needs these — DOCKER_USERNAME/PASSWORD are used by
+		// docker/login-action and docker/build-push-action, not by kforge itself.
 		{Name: "KFORGE_NODE_IP", Location: "Gitea org secret", Description: "Node IP written as the external-dns annotation target"},

 		// Always required — repo level