Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-02-05 16:16:12

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/n8n/external-secrets.yaml

@@ -13,6 +13,7 @@ spec:
         password: "{{ .psql | trim }}"
         username: "n8n"
         encryptionkey: "{{ .enc_pass | trim }}"
+        runnertoken: "{{ .runner_token | trim }}"
   data:
     - secretKey: psql
       sourceRef:
@@ -36,3 +37,14 @@ spec:
         metadataPolicy: None
         key: 18c92d73-9637-4419-8642-7f7b308460cb
         property: fields[0].value
+    - secretKey: runner_token
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 18c92d73-9637-4419-8642-7f7b308460cb
+        property: fields[1].value

k8s/apps/n8n/plain/deployment-main.yaml

@@ -25,6 +25,8 @@ spec:
         - containerPort: 5678
           name: http
         env:
+        - name: HOME
+          value: "/home/node"
         - name: N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
           value: "true"
         - name: N8N_HOST
@@ -70,6 +72,11 @@ spec:
             secretKeyRef:
               name: credentials
               key: encryptionkey
+        - name: N8N_RUNNERS_AUTH_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: runnertoken
         volumeMounts:
         - name: n8n-data
           mountPath: /home/node/.n8n
@@ -101,7 +108,7 @@ spec:
         persistentVolumeClaim:
           claimName: n8n-data
       securityContext:
-        runAsUser: 3000
+        runAsUser: 1000
-        runAsGroup: 3000
+        runAsGroup: 1000
         runAsNonRoot: true
-        fsGroup: 3000
+        fsGroup: 1000

k8s/apps/n8n/plain/deployment-worker.yaml

@@ -7,7 +7,7 @@ metadata:
     app: n8n
     component: worker
 spec:
-  replicas: 2
+  replicas: 1
   selector:
     matchLabels:
       app: n8n
@@ -23,6 +23,8 @@ spec:
         image: docker.n8n.io/n8nio/n8n:latest
         command: ["n8n", "worker"]
         env:
+        - name: HOME
+          value: "/home/node"
         - name: N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
           value: "true"
         - name: N8N_RUNNERS_ENABLED
@@ -62,6 +64,11 @@ spec:
             secretKeyRef:
               name: credentials
               key: encryptionkey
+        - name: N8N_RUNNERS_AUTH_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: runnertoken
         volumeMounts:
         - name: n8n-data
           mountPath: /home/node/.n8n
@@ -87,7 +94,7 @@ spec:
         persistentVolumeClaim:
           claimName: n8n-data
       securityContext:
-        runAsUser: 3000
+        runAsUser: 1000
-        runAsGroup: 3000
+        runAsGroup: 1000
         runAsNonRoot: true
-        fsGroup: 3000
+        fsGroup: 1000