Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-07-30 15:07:19

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/firefly-iii/external-secrets.yaml

@@ -63,22 +63,23 @@ spec:
         ENABLE_BANKING_APP_ID: |-
           {{ .app_id }}
         ENABLE_BANKING_PRIVATE_KEY: |-
-          {{ .private_key }}
+          -----BEGIN PRIVATE KEY-----
+          {{ .private_key | replace "-----BEGIN PRIVATE KEY-----" "" | replace "-----END PRIVATE KEY-----" "" | replace " " "" | trim }}
+          -----END PRIVATE KEY-----
   data:
-    # fields[0]: application UUID; fields[1]: complete PEM private key.
     - secretKey: app_id
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: REPLACE_WITH_ENABLE_BANKING_BITWARDEN_ITEM_ID
-        property: fields[0].value
+        key: a1867c81-715c-47cd-978d-14ea5bcedea9
+        property: fields[3].value
     - secretKey: private_key
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        key: REPLACE_WITH_ENABLE_BANKING_BITWARDEN_ITEM_ID
-        property: fields[1].value
+        key: a1867c81-715c-47cd-978d-14ea5bcedea9
+        property: fields[4].value

k8s/apps/firefly-iii/kustomization.yaml

@@ -50,6 +50,15 @@ patches:
       kind: CronJob
       name: firefly-iii-cron
     patch: |-
+      - op: add
+        path: /spec/concurrencyPolicy
+        value: Forbid
+      - op: add
+        path: /spec/jobTemplate/spec/backoffLimit
+        value: 1
+      - op: add
+        path: /spec/jobTemplate/spec/activeDeadlineSeconds
+        value: 600
       - op: add
         path: /spec/jobTemplate/spec/template/spec/nodeSelector
         value:
@@ -61,6 +70,16 @@ patches:
             operator: Equal
             value: ai
             effect: NoSchedule
+      - op: replace
+        path: /spec/jobTemplate/spec/template/spec/containers/0/command
+        value:
+          - /bin/sh
+          - -ec
+          - >-
+            curl --fail --silent --show-error
+            --retry 30 --retry-delay 10 --retry-all-errors
+            --connect-timeout 5 --max-time 30
+            "http://firefly-iii:80/api/v1/cron/${STATIC_CRON_TOKEN}"
   # A second independent filter in addition to ingressClassName.
   - target:
       group: networking.k8s.io

k8s/apps/firefly-iii/network-policy.yaml

@@ -19,6 +19,9 @@ spec:
             matchLabels:
               app.kubernetes.io/instance: firefly-iii
               app.kubernetes.io/name: firefly-iii
+        - podSelector:
+            matchLabels:
+              app.kubernetes.io/name: firefly-data-importer
         # hostNetwork traffic is seen as node traffic rather than Pod traffic.
         - ipBlock:
             cidr: 192.168.1.117/32