Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-05-05 13:24:26 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
Fixed gitea runner
2026-05-05 13:24:26 +00:00 · 2026-05-05 14:23:31 +01:00 · 2026-05-05 14:01:46 +01:00 · 2026-05-05 13:46:52 +01:00 · 2026-05-05 12:42:45 +00:00 · 2026-05-05 12:41:57 +00:00
5 changed files with 40 additions and 18 deletions
@@ -17,9 +17,12 @@ ArgoCD homelab project
 | **cert-manager** | [![cert-manager](https://ag.hexor.cy/api/badge?name=cert-manager&revision=true)](https://ag.hexor.cy/applications/argocd/cert-manager) |
 | **external-secrets** | [![external-secrets](https://ag.hexor.cy/api/badge?name=external-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/external-secrets) |
 | **gpu** | [![gpu](https://ag.hexor.cy/api/badge?name=gpu&revision=true)](https://ag.hexor.cy/applications/argocd/gpu) |
+| **kanidm** | [![kanidm](https://ag.hexor.cy/api/badge?name=kanidm&revision=true)](https://ag.hexor.cy/applications/argocd/kanidm) |
+| **keycloak** | [![keycloak](https://ag.hexor.cy/api/badge?name=keycloak&revision=true)](https://ag.hexor.cy/applications/argocd/keycloak) |
 | **kube-system-custom** | [![kube-system-custom](https://ag.hexor.cy/api/badge?name=kube-system-custom&revision=true)](https://ag.hexor.cy/applications/argocd/kube-system-custom) |
 | **kubernetes-dashboard** | [![kubernetes-dashboard](https://ag.hexor.cy/api/badge?name=kubernetes-dashboard&revision=true)](https://ag.hexor.cy/applications/argocd/kubernetes-dashboard) |
 | **longhorn** | [![longhorn](https://ag.hexor.cy/api/badge?name=longhorn&revision=true)](https://ag.hexor.cy/applications/argocd/longhorn) |
+| **oauth2-proxy** | [![oauth2-proxy](https://ag.hexor.cy/api/badge?name=oauth2-proxy&revision=true)](https://ag.hexor.cy/applications/argocd/oauth2-proxy) |
 | **postgresql** | [![postgresql](https://ag.hexor.cy/api/badge?name=postgresql&revision=true)](https://ag.hexor.cy/applications/argocd/postgresql) |
 | **prom-stack** | [![prom-stack](https://ag.hexor.cy/api/badge?name=prom-stack&revision=true)](https://ag.hexor.cy/applications/argocd/prom-stack) |
 | **system-upgrade** | [![system-upgrade](https://ag.hexor.cy/api/badge?name=system-upgrade&revision=true)](https://ag.hexor.cy/applications/argocd/system-upgrade) |
@@ -62,9 +65,12 @@ ArgoCD homelab project
 | **sonarr-stack** | [![sonarr-stack](https://ag.hexor.cy/api/badge?name=sonarr-stack&revision=true)](https://ag.hexor.cy/applications/argocd/sonarr-stack) |
 | **stirling-pdf** | [![stirling-pdf](https://ag.hexor.cy/api/badge?name=stirling-pdf&revision=true)](https://ag.hexor.cy/applications/argocd/stirling-pdf) |
 | **syncthing** | [![syncthing](https://ag.hexor.cy/api/badge?name=syncthing&revision=true)](https://ag.hexor.cy/applications/argocd/syncthing) |
+| **teamspeak** | [![teamspeak](https://ag.hexor.cy/api/badge?name=teamspeak&revision=true)](https://ag.hexor.cy/applications/argocd/teamspeak) |
 | **tg-bots** | [![tg-bots](https://ag.hexor.cy/api/badge?name=tg-bots&revision=true)](https://ag.hexor.cy/applications/argocd/tg-bots) |
 | **vaultwarden** | [![vaultwarden](https://ag.hexor.cy/api/badge?name=vaultwarden&revision=true)](https://ag.hexor.cy/applications/argocd/vaultwarden) |
 | **vpn** | [![vpn](https://ag.hexor.cy/api/badge?name=vpn&revision=true)](https://ag.hexor.cy/applications/argocd/vpn) |
+| **web-petting** | [![web-petting](https://ag.hexor.cy/api/badge?name=web-petting&revision=true)](https://ag.hexor.cy/applications/argocd/web-petting) |
+| **wedding** | [![wedding](https://ag.hexor.cy/api/badge?name=wedding&revision=true)](https://ag.hexor.cy/applications/argocd/wedding) |
 | **xandikos** | [![xandikos](https://ag.hexor.cy/api/badge?name=xandikos&revision=true)](https://ag.hexor.cy/applications/argocd/xandikos) |

 </td>
@@ -70,7 +70,7 @@ kind: Deployment
 metadata:
  name: gitea-runner
 spec:
-  replicas: 1
+  replicas: 2
  selector:
    matchLabels:
      app: gitea-runner
@@ -79,6 +79,10 @@ spec:
      labels:
        app: gitea-runner
    spec:
+      dnsConfig:
+        options:
+          - name: ndots
+            value: "2"
      tolerations:
        - key: workload
          operator: Equal
@@ -102,6 +106,13 @@ spec:
                operator: In
                values:
                - uk-desktop.tail2fe2d.ts.net
+          - weight: 100
+            preference:
+              matchExpressions:
+              - key: kubernetes.io/hostname
+                operator: In
+                values:
+                - ai.tail2fe2d.ts.net
          - weight: 50
            preference:
              matchExpressions:
@@ -144,13 +155,18 @@ spec:
              mountPath: /data
          env:
            - name: GITEA_INSTANCE_URL
+              #value: "http://gitea.gitea.svc.cluster.local"
              value: "https://gt.hexor.cy"
            - name: GITEA_RUNNER_REGISTRATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: gitea-runner-act-runner-secrets
                  key: token
+            - name: NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
            - name: GITEA_RUNNER_NAME
-              value: "k8s-runner"
+              value: "$(NODE_NAME)"
            - name: GITEA_RUNNER_LABELS
              value: "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-20.04:docker://ghcr.io/catthehacker/ubuntu:act-20.04"
@@ -1,5 +1,18 @@
 ---
 apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: keycloak-auth
+spec:
+  forwardAuth:
+    address: http://oauth2-proxy.oauth2-proxy.svc:80
+    trustForwardHeader: true
+    authResponseHeaders:
+      - X-Auth-Request-User
+      - X-Auth-Request-Email
+      - X-Auth-Request-Groups
+---
+apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
  name: secret-reader
@@ -13,7 +26,6 @@ spec:
      kind: Rule
      middlewares:
        - name: keycloak-auth
-          namespace: oauth2-proxy
      services:
        - name: secret-reader
          port: 80
@@ -4,7 +4,6 @@ kind: Kustomization
 resources:
  - app.yaml
  - external-secrets.yaml
-  - middleware.yaml

 helmCharts:
  - name: oauth2-proxy
@@ -1,14 +1,3 @@
---
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: keycloak-auth
-spec:
-  forwardAuth:
-    address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-Auth-Request-User
-      - X-Auth-Request-Email
-      - X-Auth-Request-Groups
-      - Authorization
+# Middleware is deployed per-namespace alongside each IngressRoute
+# because Traefik does not allow cross-namespace middleware references.
+# See k8s/apps/mtproxy/secret-reader-ingress.yaml for example.
Author	SHA1	Message	Date
Gitea Actions Bot	325f458c0f	Auto-update README with current k8s applications Terraform / Terraform (pull_request) Successful in 38s Details Generated by CI/CD workflow on 2026-05-05 13:24:26 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.	2026-05-05 13:24:26 +00:00
Ultradesu	1746d210b1	Fixed gitea runner Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 9s Details Check with kubeconform / lint (push) Successful in 11s Details Auto-update README / Generate README and Create MR (push) Successful in 13s Details	2026-05-05 14:23:31 +01:00
Ultradesu	8ee4d7ebbf	Fixed gitea runner Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Failing after 31s Details Check with kubeconform / lint (push) Failing after 34s Details Auto-update README / Generate README and Create MR (push) Failing after 12m53s Details	2026-05-05 14:01:46 +01:00
Ultradesu	ad7fce508f	Fixed gitea runner Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Failing after 23s Details Auto-update README / Generate README and Create MR (push) Failing after 26s Details Check with kubeconform / lint (push) Failing after 34s Details	2026-05-05 13:46:52 +01:00
ab	204f794b5d	Update k8s/apps/gitea/deployment.yaml Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Failing after 31s Details Check with kubeconform / lint (push) Has been cancelled Details Auto-update README / Generate README and Create MR (push) Failing after 25s Details	2026-05-05 12:42:45 +00:00
ab	5a7e32336e	Update k8s/apps/gitea/deployment.yaml Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Failing after 30s Details Check with kubeconform / lint (push) Failing after 34s Details Auto-update README / Generate README and Create MR (push) Failing after 31s Details	2026-05-05 12:41:57 +00:00
Ultradesu	d3ee23c3de	Added oauth2 proxy Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 15s Details Check with kubeconform / lint (push) Successful in 16s Details Auto-update README / Generate README and Create MR (push) Successful in 13s Details	2026-05-04 18:25:42 +01:00
Ultradesu	0df274c0b2	Added oauth2 proxy Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 14s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 12s Details	2026-05-04 18:24:04 +01:00
Ultradesu	658ec19ff1	Added oauth2 proxy Check with kubeconform / lint (push) Successful in 14s Details Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 19s Details Auto-update README / Generate README and Create MR (push) Successful in 19s Details	2026-05-04 18:21:44 +01:00
Ultradesu	eb27dcf65b	Added oauth2 proxy Check with kubeconform / lint (push) Successful in 15s Details Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 24s Details Auto-update README / Generate README and Create MR (push) Successful in 35s Details	2026-05-04 18:19:41 +01:00