Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-05-04 15:53:25

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/core/kanidm/configmap.yaml

@@ -5,6 +5,7 @@ metadata:
   name: kanidm-config
 data:
   server.toml: |
+    version = "2"
     bindaddress = "[::]:443"
     db_path = "/data/kanidm.db"
     tls_chain = "/certs/tls.crt"

k8s/core/kanidm/ingress.yaml

@@ -1,20 +1,25 @@
 ---
-apiVersion: traefik.io/v1alpha1
+apiVersion: networking.k8s.io/v1
-kind: IngressRoute
+kind: Ingress
 metadata:
   name: kanidm
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
+    traefik.ingress.kubernetes.io/service.serversscheme: https
 spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`auth.hexor.cy`)
-      kind: Rule
-      services:
-        - name: kanidm
-          port: 443
-          scheme: https
-          serversTransport: kanidm-transport
   tls:
+    - hosts:
+        - auth.hexor.cy
       secretName: kanidm-ingress-tls
+  rules:
+    - host: auth.hexor.cy
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: kanidm
+                port:
+                  number: 443

k8s/core/kanidm/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   - statefulset.yaml
   - service.yaml
   - ingress.yaml
-  - servers-transport.yaml

k8s/core/kanidm/servers-transport.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: traefik.io/v1alpha1
-kind: ServersTransport
-metadata:
-  name: kanidm-transport
-spec:
-  insecureSkipVerify: true

k8s/core/kanidm/statefulset.yaml

@@ -16,13 +16,9 @@ spec:
       labels:
         app: kanidm
     spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-        fsGroup: 1000
       containers:
         - name: kanidm
-          image: kanidm/server:1.9.3
+          image: kanidm/server:1.5.0
           ports:
             - containerPort: 443
               name: https

k8s/core/postgresql/external-secrets.yaml

@@ -135,8 +135,6 @@ spec:
           {{ .furumi }}
         USER_furumi_dev: |-
           {{ .furumi_dev }}
-        USER_keycloak: |-
-          {{ .keycloak }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -325,14 +323,4 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[17].value
-    - secretKey: keycloak
+
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[18].value