Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 11:03:46

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/deployment.yaml

@@ -22,10 +22,7 @@ spec:
           imagePullPolicy: Always
           env:
             - name: FURUMI_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-token
-                  key: TOKEN
+              value: "f38387266e75effe891b7953eb9c06b4"
             - name: FURUMI_ROOT
               value: "/media"
           ports:

k8s/apps/furumi-server/external-secrets.yaml

@@ -1,23 +0,0 @@
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: furumi-ng-token
-spec:
-  target:
-    name: furumi-ng-token
-    deletionPolicy: Delete
-    template:
-      type: Opaque
-      data:
-        TOKEN: |-
-          {{ .token }}
-  data:
-    - secretKey: token
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
-        property: fields[0].value

k8s/apps/furumi-server/kustomization.yaml

@@ -6,4 +6,3 @@ resources:
   - deployment.yaml
   - service.yaml
   - servicemonitor.yaml
-  - external-secrets.yaml

k8s/apps/matrix/external-secrets.yaml

@@ -61,8 +61,8 @@ spec:
                 scope: "openid profile email"
                 claims_imports:
                   localpart:
-                    action: suggest
-                    template: "{{ `{{ user.preferred_username | split(\"@\") | first }}` }}"
+                    action: require
+                    template: "{{ `{{ user.preferred_username }}` }}"
                   displayname:
                     action: suggest
                     template: "{{ `{{ user.name }}` }}"

k8s/apps/matrix/matrix-stack-values.yaml

@@ -61,15 +61,9 @@ matrixAuthenticationService:
     password:
       secret: matrix-postgres-creds
       secretKey: mas_db_password
-  ## Admin policy
+  ## Authentik OIDC upstream provider
   additional:
-    0-admin-policy:
-      config: |
-        policy:
-          data:
-            admin_users:
-              - username: ultradesu
-    1-oidc:
+    0-oidc:
       configSecret: matrix-oidc-config
       configSecretKey: mas-oidc.yaml
   # nodeSelector:

terraform/authentik/oauth2-apps.auto.tfvars

@@ -195,7 +195,7 @@ oauth_applications = {
     meta_description = "Matrix Chat"
     meta_icon        = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
     redirect_uris = [
-      "https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A",
+      "https://matrix.hexor.cy/_matrix/client/unstable/org.matrix.msc2965/auth/upstream/callback",
     ]
     meta_launch_url            = "https://matrix.hexor.cy"
     client_type                = "confidential"