Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-07-30 12:58:31 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-07-30 12:58:31 +00:00
2 changed files with 5 additions and 14 deletions
@@ -19,11 +19,6 @@ spec:
            matchLabels:
              app.kubernetes.io/instance: firefly-iii
              app.kubernetes.io/name: firefly-iii
-        # hostNetwork traffic is seen as node traffic rather than Pod traffic.
-        - ipBlock:
-            cidr: 192.168.1.117/32
-        - ipBlock:
-            cidr: 100.77.155.120/32
      ports:
        - protocol: TCP
          port: 8080
@@ -61,3 +56,4 @@ spec:
      ports:
        - protocol: TCP
          port: 8000
+
@@ -114,8 +114,6 @@ spec:
        app.kubernetes.io/name: traefik-ai
    spec:
      serviceAccountName: traefik-ai
-      hostNetwork: true
-      dnsPolicy: ClusterFirstWithHostNet
      nodeSelector:
        kubernetes.io/hostname: ai.tail2fe2d.ts.net
      tolerations:
@@ -128,7 +126,7 @@ spec:
          image: rancher/mirrored-library-traefik:3.6.13
          imagePullPolicy: IfNotPresent
          args:
-            - --entrypoints.web.address=192.168.1.117:80
+            - --entrypoints.web.address=:8000
            - --providers.kubernetesingress=true
            - --providers.kubernetesingress.namespaces=firefly-iii
            - --providers.kubernetesingress.ingressclass=traefik-ai
@@ -138,7 +136,7 @@ spec:
            - --log.level=INFO
          ports:
            - name: web
-              containerPort: 80
+              containerPort: 8000
              hostPort: 80
              hostIP: 192.168.1.117
              protocol: TCP
@@ -162,12 +160,9 @@ spec:
            capabilities:
              drop:
                - ALL
-              add:
-                - NET_BIND_SERVICE
            readOnlyRootFilesystem: true
-            runAsNonRoot: false
-            runAsUser: 0
-            runAsGroup: 0
+            runAsNonRoot: true
+            runAsUser: 65532
      securityContext:
        seccompProfile:
          type: RuntimeDefault