Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-06-01 10:32:56

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/pasarguard/daemonset.yaml

@@ -1,4 +1,5 @@
 ---
+image: &image 'pasarguard/node:v0.4.0'
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
@@ -46,7 +47,7 @@ spec:
               mountPath: /scripts
       containers:
         - name: pasarguard-node
-          image: pasarguard/node:v0.4.0
+          image: *image
           imagePullPolicy: Always
           command:
             - /bin/sh
@@ -219,4 +220,4 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: pasarguard-node
-    namespace: pasarguard
+    namespace: pasarguard

k8s/apps/pasarguard/deployment.yaml

@@ -1,4 +1,5 @@
 ---
+image: &image 'pasarguard/panel:v4.0.2'
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -34,7 +35,7 @@ spec:
               mountPath: /templates/subscription
       containers:
         - name: pasarguard-web
-          image: pasarguard/panel:v4.0.2
+          image: *image
           imagePullPolicy: Always
           envFrom:
             - secretRef:
@@ -46,6 +47,10 @@ spec:
               value: "8000"
             - name: DOCS
               value: "true"
+            - name: UVICORN_SSL_CERTFILE
+              value: "/app/tls/tls.crt"
+            - name: UVICORN_SSL_KEYFILE
+              value: "/app/tls/tls.key"
             - name: CUSTOM_TEMPLATES_DIRECTORY
               value: "/code/app/templates/"
             - name: SUBSCRIPTION_PAGE_TEMPLATE
@@ -55,9 +60,15 @@ spec:
               containerPort: 8000
               protocol: TCP
           volumeMounts:
+            - name: tls
+              mountPath: /app/tls
+              readOnly: true
             - name: subscription-template
               mountPath: /code/app/templates/subscription
       volumes:
+        - name: tls
+          secret:
+            secretName: pasarguard-tls
         - name: subscription-template
           emptyDir: {}
 ---
@@ -65,6 +76,9 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pasarguard
+  annotations:
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serverstransport: pasarguard-pasarguard-transport@kubernetescrd
 spec:
   selector:
     app: pasarguard

k8s/apps/pasarguard/ingress.yaml

@@ -1,15 +1,31 @@
+---
 apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
+kind: ServersTransport
 metadata:
-  name: pasarguard
+  name: pasarguard-transport
 spec:
-  entryPoints:
+  insecureSkipVerify: true
-    - websecure
+---
-  routes:
+apiVersion: networking.k8s.io/v1
-    - match: Host(`ps.hexor.cy`)
+kind: Ingress
-      kind: Rule
+metadata:
-      services:
+  name: pasarguard-ingress
-        - name: pasarguard
+  annotations:
-          port: 80
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: ps.hexor.cy
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: pasarguard
+                port:
+                  number: 80
   tls:
-    secretName: pasarguard-tls
+    - secretName: pasarguard-tls
+      hosts:
+        - ps.hexor.cy

terraform/keycloak/terraform.tfvars

@@ -41,11 +41,6 @@ oauth2_applications = {
     post_logout_redirect_uris = ["https://gf.hexor.cy/*"]
   }
   FuruMusic = {
-    redirect_uris             = ["https://music.hexor.cy/auth/oidc/callback"]
-    web_origins               = ["https://music.hexor.cy"]
-    post_logout_redirect_uris = ["https://music.hexor.cy/*"]
-  }
-  FuruMusic-dev = {
     redirect_uris             = ["https://music-dev.hexor.cy/auth/oidc/callback", "http://127.0.0.1:3000/auth/oidc/callback", "http://10.0.5.103:3000/auth/oidc/callback"]
     web_origins               = ["https://music-dev.hexor.cy", "http://127.0.0.1:3000", "http://10.0.5.103:3000"]
     post_logout_redirect_uris = ["https://music-dev.hexor.cy/*", "http://127.0.0.1:3000/*", "http://10.0.5.103:3000/*"]