Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-02-16 11:37:45

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/n8n/deployment-main.yaml

@@ -50,7 +50,7 @@ spec:
           runAsNonRoot: true
       containers:
       - name: n8n
-        image: n8nio/n8n:latest
+        image: docker.n8n.io/n8nio/n8n:latest
         ports:
         - containerPort: 5678
           name: http

k8s/apps/n8n/deployment-runner.yaml

@@ -21,21 +21,26 @@ spec:
       serviceAccountName: n8n
       containers:
       - name: n8n-runner
-        image: n8nio/runners:latest
+        image: docker.n8n.io/n8nio/n8n:latest
-        ports:
+        command:
-        - containerPort: 5680
+        - /bin/sh
-          name: health
+        - -c
+        - /usr/local/bin/task-runner-launcher javascript
         env:
         - name: PATH
           value: "/opt/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
         - name: HOME
           value: "/home/node"
         - name: N8N_RUNNERS_TASK_BROKER_URI
-          value: "http://n8n:5679"
+          value: "n8n:5679"
-        - name: N8N_RUNNERS_LAUNCHER_LOG_LEVEL
+        - name: N8N_RUNNERS_MODE
-          value: "info"
+          value: "external"
         - name: N8N_RUNNERS_MAX_CONCURRENCY
           value: "10"
+        - name: N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT
+          value: "30"
+        - name: NODE_OPTIONS
+          value: "--max-old-space-size=1024"
         - name: GENERIC_TIMEZONE
           value: "Europe/Moscow"
         - name: TZ

k8s/apps/n8n/deployment-worker.yaml

@@ -0,0 +1,116 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: n8n-worker
+  labels:
+    app: n8n
+    component: worker
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: n8n
+      component: worker
+  template:
+    metadata:
+      labels:
+        app: n8n
+        component: worker
+    spec:
+      serviceAccountName: n8n
+      containers:
+      - name: n8n-worker
+        image: docker.n8n.io/n8nio/n8n:latest
+        command: ["n8n", "worker"]
+        env:
+        - name: PATH
+          value: "/opt/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+        - name: HOME
+          value: "/home/node"
+        - name: NODES_EXCLUDE
+          value: "[]"
+        - name: N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
+          value: "true"
+        - name: N8N_RUNNERS_ENABLED
+          value: "true"
+        - name: N8N_RUNNERS_MODE
+          value: "external"
+        - name: N8N_RUNNERS_BROKER_LISTEN_ADDRESS
+          value: "0.0.0.0"
+        - name: N8N_RUNNERS_BROKER_PORT
+          value: "5679"
+        - name: N8N_PORT
+          value: "80"
+        - name: EXECUTIONS_MODE
+          value: "queue"
+        - name: QUEUE_BULL_REDIS_HOST
+          value: "n8n-redis"
+        - name: N8N_RUNNERS_TASK_BROKER_URI
+          value: "http://n8n:80"
+        - name: NODE_ENV
+          value: "production"
+        - name: GENERIC_TIMEZONE
+          value: "Europe/Moscow"
+        - name: TZ
+          value: "Europe/Moscow"
+        - name: DB_TYPE
+          value: "postgresdb"
+        - name: DB_POSTGRESDB_HOST
+          value: "psql.psql.svc"
+        - name: DB_POSTGRESDB_DATABASE
+          value: "n8n"
+        - name: DB_POSTGRESDB_USER
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: username
+        - name: DB_POSTGRESDB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: password
+        - name: N8N_ENCRYPTION_KEY
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: encryptionkey
+        - name: N8N_RUNNERS_AUTH_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: credentials
+              key: runnertoken
+        volumeMounts:
+        - name: n8n-data
+          mountPath: /home/node/.n8n
+        - name: tools
+          mountPath: /opt/tools
+        resources:
+          requests:
+            cpu: 2000m
+            memory: 512Mi
+          limits:
+            cpu: 4000m
+            memory: 2048Gi
+        livenessProbe:
+          exec:
+            command:
+            - /bin/sh
+            - -c
+            - "ps aux | grep '[n]8n worker' || exit 1"
+          initialDelaySeconds: 30
+          periodSeconds: 30
+          timeoutSeconds: 5
+          failureThreshold: 3
+      volumes:
+      - name: n8n-data
+        persistentVolumeClaim:
+          claimName: n8n-data
+      - name: tools
+        persistentVolumeClaim:
+          claimName: n8n-tools
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        runAsNonRoot: true
+        fsGroup: 1000

k8s/apps/paperless/paperless-values.yaml

@@ -1,5 +1,5 @@
 image:
-  tag: latest
+  tag: 2.20.3
 resources:
   requests:
     memory: "1Gi"
@@ -9,7 +9,7 @@ resources:
     cpu: "3000m"
 initContainers:
   install-tesseract-langs:
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2
     resources:
       requests:
         memory: "256Mi"

k8s/core/authentik/external-secrets.yaml

@@ -19,14 +19,6 @@ spec:
           {{ .password }}
         AUTHENTIK_SECRET_KEY: |-
           {{ .secret_key }}
-        POSTGRES_PASSWORD: |-
-          {{ .password }}
-        POSTGRES_USER: |-
-          {{ .username }}
-        username: |-
-          {{ .password }}
-        password: |-
-          {{ .username }}
   data:
     - secretKey: password
       sourceRef:

k8s/core/authentik/kustomization.yaml

@@ -5,12 +5,12 @@ resources:
   - app.yaml
   - external-secrets.yaml
   - https-middleware.yaml
-# - worker-restart.yaml
+  - worker-restart.yaml
 
 helmCharts:
   - name: authentik
     repo: https://charts.goauthentik.io
-    version: 2026.2.0
+    version: 2025.10.1
     releaseName: authentik
     namespace: authentik
     valuesFile: values.yaml