Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-07-30 11:22:23 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-07-30 11:22:23 +00:00
5 changed files with 13 additions and 26 deletions
@@ -21,7 +21,7 @@ helmCharts:

 patches:
  # Chart 0.1.2 requires postgres.enabled=true. Remove its StatefulSet and
-  # make the generated database Service select the CloudNativePG instance.
+  # redirect the generated database Service to the CloudNativePG primary.
  - target:
      group: apps
      version: v1
@@ -38,10 +38,14 @@ patches:
      kind: Service
      name: firefly-iii-postgres
    patch: |-
-      - op: replace
+      - op: remove
        path: /spec/selector
-        value:
-          cnpg.io/cluster: firefly-postgres
+      - op: replace
+        path: /spec/type
+        value: ExternalName
+      - op: add
+        path: /spec/externalName
+        value: firefly-postgres-rw.firefly-iii.svc.cluster.local
  # The upstream chart does not expose scheduling settings for its CronJob.
  - target:
      group: batch
@@ -70,11 +74,3 @@ patches:
      - op: add
        path: /metadata/labels/firefly.hexor.cy~1private-ai
        value: "true"
-      # The shared Traefik has the same controller identifier and can discover
-      # IngressClass objects. The explicit annotation partitions this Ingress
-      # so only the instance configured with ingressclass=traefik-ai accepts it.
-      - op: add
-        path: /metadata/annotations/kubernetes.io~1ingress.class
-        value: traefik-ai
-      - op: remove
-        path: /spec/ingressClassName
@@ -19,11 +19,6 @@ spec:
            matchLabels:
              app.kubernetes.io/instance: firefly-iii
              app.kubernetes.io/name: firefly-iii
-        # hostNetwork traffic is seen as node traffic rather than Pod traffic.
-        - ipBlock:
-            cidr: 192.168.1.117/32
-        - ipBlock:
-            cidr: 100.77.155.120/32
      ports:
        - protocol: TCP
          port: 8080
@@ -61,3 +56,4 @@ spec:
      ports:
        - protocol: TCP
          port: 8000
+
@@ -41,7 +41,6 @@ spec:
              add:
                - CHOWN
                - DAC_OVERRIDE
-                - FOWNER
          volumeMounts:
            - name: host-root
              mountPath: /host/k8s/firefly-iii
@@ -114,8 +114,6 @@ spec:
        app.kubernetes.io/name: traefik-ai
    spec:
      serviceAccountName: traefik-ai
-      hostNetwork: true
-      dnsPolicy: ClusterFirstWithHostNet
      nodeSelector:
        kubernetes.io/hostname: ai.tail2fe2d.ts.net
      tolerations:
@@ -128,7 +126,7 @@ spec:
          image: rancher/mirrored-library-traefik:3.6.13
          imagePullPolicy: IfNotPresent
          args:
-            - --entrypoints.web.address=192.168.1.117:80
+            - --entrypoints.web.address=:8000
            - --providers.kubernetesingress=true
            - --providers.kubernetesingress.namespaces=firefly-iii
            - --providers.kubernetesingress.ingressclass=traefik-ai
@@ -138,9 +136,8 @@ spec:
            - --log.level=INFO
          ports:
            - name: web
-              containerPort: 80
+              containerPort: 8000
              hostPort: 80
-              hostIP: 192.168.1.117
              protocol: TCP
          readinessProbe:
            tcpSocket:
@@ -162,8 +159,6 @@ spec:
            capabilities:
              drop:
                - ALL
-              add:
-                - NET_BIND_SERVICE
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 65532
@@ -25,7 +25,7 @@ persistence:
    existingClaim: firefly-uploads

 # Must remain true because chart 0.1.2 validates it. Kustomize removes the
-# generated StatefulSet and makes this Service select the CloudNativePG Pod.
+# generated StatefulSet and redirects this Service to CloudNativePG.
 postgres:
  enabled: true
  auth:
@@ -66,3 +66,4 @@ firefly:
    limits:
      cpu: "2"
      memory: 1Gi
+