From 43ed4c9dbb312e659214a6c785cd32621334196d Mon Sep 17 00:00:00 2001
From: stevef <stevef@example.com>
Date: Sun, 19 Apr 2026 14:54:33 +0200
Subject: [PATCH] fix(k3s): restore missing env vars and correct secret key
 casing in deployment.yaml

---
 k3s/deployment.yaml | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/k3s/deployment.yaml b/k3s/deployment.yaml
index 23acfeb07..32ed055dc 100644
--- a/k3s/deployment.yaml
+++ b/k3s/deployment.yaml
@@ -14,7 +14,6 @@ spec:
         app: picoclaw-agent
     spec:
       # Init container to bootstrap the configuration from the ConfigMap into the Persistent Volume
-      # This answers "how will I copy the config file": the config is copied into the volume on the first run.
       initContainers:
       - name: init-config
         image: busybox:latest
@@ -47,11 +46,6 @@ spec:
           value: /home/picoclaw/.picoclaw
         - name: PICOCLAW_GATEWAY_HOST
           value: "0.0.0.0"
-        - name: PICOCLAW_GOOGLE_API_KEY
-          valueFrom:
-            secretKeyRef:
-              name: picoclaw-secrets
-              key: GOOGLE_API_KEY
         - name: PICOCLAW_TELEGRAM_TOKEN
           valueFrom:
             secretKeyRef:
@@ -61,7 +55,17 @@ spec:
           valueFrom:
             secretKeyRef:
               name: picoclaw-secrets
-              key: openrouter-api-key
+              key: OPENROUTER_API_KEY
+        - name: NVIDIA_API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: picoclaw-secrets
+              key: nvidia-api-key
+        - name: AZURE_API_KEY
+          valueFrom:
+            secretKeyRef:
+              name: picoclaw-secrets
+              key: azure-api-key
         volumeMounts:
         - name: picoclaw-data
           mountPath: /home/picoclaw/.picoclaw
@@ -78,3 +82,4 @@ spec:
       - name: picoclaw-secrets
         secret:
           secretName: picoclaw-secrets
+      restartPolicy: Always