Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-19 13:41:59

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/web-player.yaml

@@ -21,27 +21,27 @@ spec:
           image: ultradesu/furumi-web-player:trunk
           imagePullPolicy: Always
           env:
-            - name: FURUMI_OIDC_CLIENT_ID
+            - name: FURUMI_PLAYER_OIDC_CLIENT_ID
               valueFrom:
                 secretKeyRef:
                   name: furumi-ng-creds
                   key: OIDC_CLIENT_ID
-            - name: FURUMI_OIDC_CLIENT_SECRET
+            - name: FURUMI_PLAYER_OIDC_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
                   name: furumi-ng-creds
                   key: OIDC_CLIENT_SECRET
-            - name: FURUMI_OIDC_ISSUER_URL
+            - name: FURUMI_PLAYER_OIDC_ISSUER_URL
               valueFrom:
                 secretKeyRef:
                   name: furumi-ng-creds
                   key: OIDC_ISSUER_URL
-            - name: FURUMI_OIDC_REDIRECT_URL
+            - name: FURUMI_PLAYER_OIDC_REDIRECT_URL
               valueFrom:
                 secretKeyRef:
                   name: furumi-ng-creds
                   key: OIDC_REDIRECT_URL
-            - name: FURUMI_OIDC_SESSION_SECRET
+            - name: FURUMI_PLAYER_OIDC_SESSION_SECRET
               valueFrom:
                 secretKeyRef:
                   name: furumi-ng-creds

k8s/core/postgresql/external-secrets.yaml

@@ -133,6 +133,8 @@ spec:
           {{ .mas }}
         USER_furumi: |-
           {{ .furumi }}
+        USER_furumi_dev: |-
+          {{ .furumi_dev }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -310,4 +312,15 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[16].value
+    - secretKey: furumi_dev
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[17].value
 

terraform/authentik/main.tf

@@ -292,7 +292,60 @@ resource "authentik_outpost" "outposts" {
     authentik_host_browser         = ""
     object_naming_template         = "ak-outpost-%(name)s"
     authentik_host_insecure        = false
-    kubernetes_json_patches        = null
+    kubernetes_json_patches = {
+      deployment = [
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__HOST"
+            value = "psql.psql.svc"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__PORT"
+            value = "5432"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__NAME"
+            value = "authentik"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name = "AUTHENTIK_POSTGRESQL__USER"
+            valueFrom = {
+              secretKeyRef = {
+                name = "authentik-creds"
+                key  = "AUTHENTIK_POSTGRESQL__USER"
+              }
+            }
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name = "AUTHENTIK_POSTGRESQL__PASSWORD"
+            valueFrom = {
+              secretKeyRef = {
+                name = "authentik-creds"
+                key  = "AUTHENTIK_POSTGRESQL__PASSWORD"
+              }
+            }
+          }
+        }
+      ]
+    }
     kubernetes_service_type        = "ClusterIP"
     kubernetes_image_pull_secrets  = []
     kubernetes_ingress_class_name  = null

terraform/authentik/proxy-apps.auto.tfvars

@@ -151,7 +151,7 @@ EOT
     meta_icon                    = "https://img.icons8.com/liquid-glass/48/key.png"
     mode                         = "proxy"
     outpost                      = "kubernetes-outpost"
-    access_groups                = ["admins", "khm"] # Используем существующие группы
+    access_groups                = ["admins", "khm"]
     create_group                 = true
     access_groups                = ["admins"]
   }
@@ -191,5 +191,20 @@ EOT
     create_group                 = true
     access_groups                = ["admins"]
   }
+  "ollama-public" = {
+    name                         = "Ollama Public"
+    slug                         = "ollama-public"
+    group                        = "AI"
+    external_host                = "https://ollama.hexor.cy"
+    internal_host                = "http://ollama.ollama.svc:11434"
+    internal_host_ssl_validation = false
+    meta_description             = ""
+    meta_icon                    = "https://img.icons8.com/external-icongeek26-outline-icongeek26/64/external-llama-animal-head-icongeek26-outline-icongeek26.png"
+    mode                         = "proxy"
+    outpost                      = "kubernetes-outpost"
+    intercept_header_auth        = true
+    create_group                 = true
+    access_groups                = ["admins"]
+  }
 }