Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-12-28 20:30:37

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/k8s-secrets/deployment.yaml

@@ -19,7 +19,7 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: secret-reader
-        image: ultradesu/k8s-secrets:0.2.0
+        image: ultradesu/k8s-secrets:0.1.1
         imagePullPolicy: Always
         args:
           - "--secrets"
@@ -28,7 +28,6 @@ spec:
           - "k8s-secret"
           - "--port"
           - "3000"
-          - "--webhook"
         ports:
         - containerPort: 3000
           name: http

k8s/desktop/jellyfin/app.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: apps
   destination:
-    namespace: jellyfin-uk
+    namespace: jellyfin
     server: https://kubernetes.default.svc
   source:
     repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git

k8s/desktop/jellyfin/qbittorent.yaml

@@ -47,11 +47,6 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/hostname: uk-desktop.tail2fe2d.ts.net
-      tolerations:
-        - key: workload
-          operator: Equal
-          value: desktop
-          effect: NoSchedule
       volumes:
         - name: config
           hostPath:
@@ -102,22 +97,3 @@ spec:
       port: 80
       targetPort: 8080
 
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: jf-local-ingress
-  annotations:
-    ingressClassName: traefik
-spec:
-  rules:
-    - host: tr.uk
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: qbittorrent
-                port:
-                  number: 80

k8s/desktop/jellyfin/values.yaml

@@ -9,11 +9,6 @@ resources:
     cpu: "6000m"
 nodeSelector:
   kubernetes.io/hostname: uk-desktop.tail2fe2d.ts.net
-tolerations:
-  - key: workload
-    operator: Equal
-    value: desktop
-    effect: NoSchedule
 persistence:
   config:
     enabled: true
@@ -33,8 +28,11 @@ persistence:
 ingress:
     enabled: true
     className: traefik
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt
+      traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
     hosts:
-      - host: jf.uk
+      - host: uk-desktop.uk
         paths:
           - path: /
             pathType: Prefix

terraform/authentik/proxy-apps.tfvars

@@ -51,9 +51,6 @@ proxy_applications = {
     internal_host                = "http://secret-reader.k8s-secret.svc:80"
     internal_host_ssl_validation = false
     meta_description             = ""
-    skip_path_regex              = <<-EOT
-/webhook/
-EOT
     meta_icon                    = "https://img.icons8.com/ios-filled/50/password.png"
     mode                         = "proxy"
     outpost                      = "kubernetes-outpost"