Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-04-28 23:12:53

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/matrix/matrix-stack-values.yaml

@@ -60,8 +60,8 @@ synapse:
     storage:
       size: 20Gi
     maxUploadSize: 100M
-  # nodeSelector:
+    nodeSelector:
-  #   kubernetes.io/hostname: nas.homenet
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Matrix Authentication Service
 matrixAuthenticationService:
@@ -88,24 +88,24 @@ matrixAuthenticationService:
     1-oidc:
       configSecret: matrix-oidc-config
       configSecretKey: mas-oidc.yaml
-  # nodeSelector:
+    nodeSelector:
-  #   kubernetes.io/hostname: nas.homenet
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Element Web client
 elementWeb:
   enabled: true
   ingress:
     host: chat.matrix.hexor.cy
-  # nodeSelector:
+  nodeSelector:
-  #   kubernetes.io/hostname: nas.homenet
+    kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Element Admin panel
 elementAdmin:
   enabled: true
   ingress:
     host: admin.matrix.hexor.cy
-  # nodeSelector:
+  nodeSelector:
-  #   kubernetes.io/hostname: nas.homenet
+    kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Well-known delegation on the base domain (host is derived from serverName)
 wellKnownDelegation:

k8s/apps/pasarguard/deployment.yaml

@@ -34,7 +34,7 @@ spec:
               mountPath: /templates/subscription
       containers:
         - name: pasarguard-web
-          image: 'pasarguard/panel:v3.0.2'
+          image: 'pasarguard/panel:v3.0.1'
           imagePullPolicy: Always
           envFrom:
             - secretRef:
@@ -75,6 +75,9 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pasarguard
+  annotations:
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serverstransport: pasarguard-pasarguard-transport@kubernetescrd
 spec:
   selector:
     app: pasarguard

k8s/apps/pasarguard/ingress.yaml

@@ -0,0 +1,31 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: pasarguard-transport
+spec:
+  insecureSkipVerify: true
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pasarguard-ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: ps.hexor.cy
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: pasarguard
+                port:
+                  number: 80
+  tls:
+    - secretName: pasarguard-tls
+      hosts:
+        - ps.hexor.cy

k8s/apps/pasarguard/kustomization.yaml

@@ -9,3 +9,4 @@ resources:
   - ./certificate.yaml
   - ./configmap-scripts.yaml
   - ./servicemonitor.yaml
+  - ./ingress.yaml

k8s/core/system-upgrade/plan.yaml

@@ -7,6 +7,8 @@ metadata:
 spec:
   concurrency: 1
   cordon: true
+  tolerations:
+  - operator: Exists
   nodeSelector:
     matchExpressions:
     - key: node-role.kubernetes.io/control-plane
@@ -16,7 +18,7 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.35.2+k3s1
+  version: v1.35.4+k3s1
 ---
 # Agent plan
 apiVersion: upgrade.cattle.io/v1
@@ -27,6 +29,8 @@ metadata:
 spec:
   concurrency: 1
   cordon: true
+  tolerations:
+  - operator: Exists
   nodeSelector:
     matchExpressions:
     - key: node-role.kubernetes.io/control-plane
@@ -39,4 +43,4 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.35.2+k3s1
+  version: v1.35.4+k3s1