diff --git a/deploy/k3s/README.md b/deploy/k3s/README.md
index 9115bee..a9194ed 100644
--- a/deploy/k3s/README.md
+++ b/deploy/k3s/README.md
@@ -33,11 +33,10 @@ sudo k3s ctr images import images.tar
 - `JWT_SECRET`
 - `OPS_JWT_SECRET`
 - `OPS_DEFAULT_ADMIN_PASSWORD`
-- `LLM_API_KEY`
-- `SILICONFLOW_API_KEY`
 - `SCHEDULER_INTERNAL_METRICS_TOKEN`
 - `POSTGRES_PASSWORD` / `RABBITMQ_DEFAULT_PASS` / `MINIO_ROOT_*`
-- `config.local.yaml` 里对应的数据库、RabbitMQ、MinIO、JWT、LLM 配置
+- `config/config.yaml` 里的 LLM / SiliconFlow API key
+- `config.local.yaml` 里对应的数据库、RabbitMQ、MinIO、JWT 配置
 
 注意：`ops-api` 目前从 `deploy/k3s/config/ops-config.yaml` 读取数据库连接信息；如果改了 Postgres 密码，也同步改这个文件。
 
diff --git a/deploy/k3s/apps.yaml b/deploy/k3s/apps.yaml
index 667e2b3..336e505 100644
--- a/deploy/k3s/apps.yaml
+++ b/deploy/k3s/apps.yaml
@@ -45,18 +45,6 @@ spec:
                 secretKeyRef:
                   name: geo-rankly-app-secret
                   key: JWT_SECRET
-            - name: LLM_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: LLM_API_KEY
-                  optional: true
-            - name: SILICONFLOW_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: SILICONFLOW_API_KEY
-                  optional: true
             - name: OBJECT_STORAGE_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
@@ -144,18 +132,6 @@ spec:
                 secretKeyRef:
                   name: geo-rankly-app-secret
                   key: JWT_SECRET
-            - name: LLM_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: LLM_API_KEY
-                  optional: true
-            - name: SILICONFLOW_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: SILICONFLOW_API_KEY
-                  optional: true
             - name: OBJECT_STORAGE_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
@@ -224,18 +200,6 @@ spec:
                 secretKeyRef:
                   name: geo-rankly-app-secret
                   key: JWT_SECRET
-            - name: LLM_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: LLM_API_KEY
-                  optional: true
-            - name: SILICONFLOW_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: SILICONFLOW_API_KEY
-                  optional: true
             - name: OBJECT_STORAGE_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
@@ -323,18 +287,6 @@ spec:
                 secretKeyRef:
                   name: geo-rankly-app-secret
                   key: JWT_SECRET
-            - name: LLM_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: LLM_API_KEY
-                  optional: true
-            - name: SILICONFLOW_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: geo-rankly-app-secret
-                  key: SILICONFLOW_API_KEY
-                  optional: true
             - name: SCHEDULER_INTERNAL_METRICS_TOKEN
               valueFrom:
                 secretKeyRef:
diff --git a/deploy/k3s/config/config.yaml b/deploy/k3s/config/config.yaml
index b75ffa9..f45126c 100644
--- a/deploy/k3s/config/config.yaml
+++ b/deploy/k3s/config/config.yaml
@@ -116,7 +116,6 @@ log:
 llm:
   provider: ark
   base_url: https://ark.cn-beijing.volces.com/api/v3
-  # api_key is injected via LLM_API_KEY env var
   api_key: "7fb6c66b-129c-4935-9617-709236c4205a"
   model: doubao-seed-2-0-lite-260215
   knowledge_url_model: doubao-seed-2-0-mini-260215
@@ -129,7 +128,6 @@ llm:
 retrieval:
   provider: siliconflow
   base_url: https://api.siliconflow.cn/v1
-  # api_key is injected via SILICONFLOW_API_KEY env var
   api_key: "sk-dikvcafrdcbajjpfgjjephqcggpdxwxdkighllieijlehwsf"
   embedding_model: BAAI/bge-m3
   reranker_model: BAAI/bge-reranker-v2-m3