Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-05-04 17:24:32

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/gitea/deployment.yaml

@@ -70,7 +70,7 @@ kind: Deployment
 metadata:
   name: gitea-runner
 spec:
-  replicas: 2
+  replicas: 1
   selector:
     matchLabels:
       app: gitea-runner
@@ -79,10 +79,6 @@ spec:
       labels:
         app: gitea-runner
     spec:
-      dnsConfig:
-        options:
-          - name: ndots
-            value: "2"
       tolerations:
         - key: workload
           operator: Equal
@@ -97,30 +93,38 @@ spec:
           emptyDir:
             sizeLimit: 30Gi
       affinity:
-        podAntiAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchLabels:
-                  app: gitea-runner
-              topologyKey: kubernetes.io/hostname
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 5
+          - weight: 100
             preference:
               matchExpressions:
               - key: kubernetes.io/hostname
                 operator: In
                 values:
                 - uk-desktop.tail2fe2d.ts.net
-                - ai.tail2fe2d.ts.net
-          - weight: 10
+          - weight: 50
             preference:
               matchExpressions:
               - key: kubernetes.io/hostname
                 operator: In
                 values:
                 - home.homenet
+          - weight: 30
+            preference:
+              matchExpressions:
+              - key: kubernetes.io/hostname
+                operator: In
+                values:
+                - master.tail2fe2d.ts.net
+          - weight: 10
+            preference:
+              matchExpressions:
+              - key: kubernetes.io/hostname
+                operator: In
+                values:
+                - it.tail2fe2d.ts.net
                 - ch.tail2fe2d.ts.net
+                - us.tail2fe2d.ts.net
       containers:
         - name: gitea-runner
           image: gitea/act_runner:nightly
@@ -140,18 +144,13 @@ spec:
               mountPath: /data
           env:
             - name: GITEA_INSTANCE_URL
-              #value: "http://gitea.gitea.svc.cluster.local"
               value: "https://gt.hexor.cy"
             - name: GITEA_RUNNER_REGISTRATION_TOKEN
               valueFrom:
                 secretKeyRef:
                   name: gitea-runner-act-runner-secrets
                   key: token
-            - name: NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
             - name: GITEA_RUNNER_NAME
-              value: "$(NODE_NAME)"
+              value: "k8s-runner"
             - name: GITEA_RUNNER_LABELS
               value: "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-20.04:docker://ghcr.io/catthehacker/ubuntu:act-20.04"

k8s/apps/mtproxy/secret-reader-ingress.yaml

@@ -5,7 +5,7 @@ metadata:
   name: keycloak-auth
 spec:
   forwardAuth:
-    address: http://oauth2-proxy.oauth2-proxy.svc:80
+    address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
     trustForwardHeader: true
     authResponseHeaders:
       - X-Auth-Request-User
@@ -13,6 +13,29 @@ spec:
       - X-Auth-Request-Groups
 ---
 apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: keycloak-auth-redirect
+spec:
+  errors:
+    status:
+      - "401"
+    service:
+      name: oauth2-proxy-redirect
+      port: 80
+    query: /oauth2/sign_in?rd={url}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: oauth2-proxy-redirect
+spec:
+  type: ExternalName
+  externalName: oauth2-proxy.oauth2-proxy.svc.cluster.local
+  ports:
+    - port: 80
+---
+apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
   name: secret-reader
@@ -22,10 +45,16 @@ spec:
   entryPoints:
     - websecure
   routes:
+    - match: Host(`secret-reader.hexor.cy`) && PathPrefix(`/oauth2/`)
+      kind: Rule
+      services:
+        - name: oauth2-proxy-redirect
+          port: 80
     - match: Host(`secret-reader.hexor.cy`)
       kind: Rule
       middlewares:
         - name: keycloak-auth
+        - name: keycloak-auth-redirect
       services:
         - name: secret-reader
           port: 80