Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-19 13:41:59

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/core/authentik/values.yaml

@@ -54,7 +54,6 @@ server:
         traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
       hosts:
         - idm.hexor.cy
-        - ollama.hexor.cy
       tls:
         - secretName: idm-tls
           hosts:

k8s/core/postgresql/external-secrets.yaml

@@ -133,6 +133,8 @@ spec:
           {{ .mas }}
         USER_furumi: |-
           {{ .furumi }}
+        USER_furumi_dev: |-
+          {{ .furumi_dev }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -310,4 +312,15 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[16].value
+    - secretKey: furumi_dev
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[17].value
 

terraform/authentik/main.tf

@@ -292,7 +292,60 @@ resource "authentik_outpost" "outposts" {
     authentik_host_browser         = ""
     object_naming_template         = "ak-outpost-%(name)s"
     authentik_host_insecure        = false
-    kubernetes_json_patches        = null
+    kubernetes_json_patches = {
+      deployment = [
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__HOST"
+            value = "psql.psql.svc"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__PORT"
+            value = "5432"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name  = "AUTHENTIK_POSTGRESQL__NAME"
+            value = "authentik"
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name = "AUTHENTIK_POSTGRESQL__USER"
+            valueFrom = {
+              secretKeyRef = {
+                name = "authentik-creds"
+                key  = "AUTHENTIK_POSTGRESQL__USER"
+              }
+            }
+          }
+        },
+        {
+          op   = "add"
+          path = "/spec/template/spec/containers/0/env/-"
+          value = {
+            name = "AUTHENTIK_POSTGRESQL__PASSWORD"
+            valueFrom = {
+              secretKeyRef = {
+                name = "authentik-creds"
+                key  = "AUTHENTIK_POSTGRESQL__PASSWORD"
+              }
+            }
+          }
+        }
+      ]
+    }
     kubernetes_service_type        = "ClusterIP"
     kubernetes_image_pull_secrets  = []
     kubernetes_ingress_class_name  = null

terraform/authentik/proxy-apps.auto.tfvars

@@ -202,7 +202,7 @@ EOT
     meta_icon                    = "https://img.icons8.com/external-icongeek26-outline-icongeek26/64/external-llama-animal-head-icongeek26-outline-icongeek26.png"
     mode                         = "proxy"
     outpost                      = "kubernetes-outpost"
-    access_groups                = ["admins"]
+    intercept_header_auth        = true
     create_group                 = true
     access_groups                = ["admins"]
   }