Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-07-30 22:17:14

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/firefly-iii/data-importer-sync.yaml

@@ -1,106 +0,0 @@
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: firefly-data-importer-sync
-  labels:
-    app.kubernetes.io/name: firefly-data-importer-sync
-spec:
-  schedule: "17 */6 * * *"
-  timeZone: Europe/London
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 1800
-  successfulJobsHistoryLimit: 2
-  failedJobsHistoryLimit: 5
-  jobTemplate:
-    spec:
-      backoffLimit: 1
-      activeDeadlineSeconds: 1200
-      template:
-        metadata:
-          labels:
-            app.kubernetes.io/name: firefly-data-importer-sync
-        spec:
-          automountServiceAccountToken: false
-          restartPolicy: Never
-          nodeSelector:
-            kubernetes.io/hostname: ai.tail2fe2d.ts.net
-          tolerations:
-            - key: workload
-              operator: Equal
-              value: ai
-              effect: NoSchedule
-          containers:
-            - name: data-importer-sync
-              image: fireflyiii/data-importer:version-2.3.4
-              imagePullPolicy: IfNotPresent
-              command:
-                - /bin/sh
-                - -c
-                - |-
-                  php artisan importer:import /import/import.json
-                  status=$?
-                  if [ "${status}" -eq 73 ]; then
-                    echo "No new transactions; considering the sync successful."
-                    exit 0
-                  fi
-                  exit "${status}"
-              env:
-                - name: FIREFLY_III_URL
-                  value: http://firefly-iii
-                - name: VANITY_URL
-                  value: http://ff.lan
-                - name: FIREFLY_III_ACCESS_TOKEN
-                  valueFrom:
-                    secretKeyRef:
-                      name: firefly-data-importer-secrets
-                      key: FIREFLY_III_ACCESS_TOKEN
-                - name: ENABLE_BANKING_APP_ID
-                  valueFrom:
-                    secretKeyRef:
-                      name: firefly-data-importer-secrets
-                      key: ENABLE_BANKING_APP_ID
-                - name: ENABLE_BANKING_PRIVATE_KEY
-                  valueFrom:
-                    secretKeyRef:
-                      name: firefly-data-importer-secrets
-                      key: ENABLE_BANKING_PRIVATE_KEY
-                - name: IMPORT_DIR_ALLOWLIST
-                  value: /import
-                # Recurring imports intentionally overlap their date range.
-                # Keep rejecting duplicates, but do not fail the Job for them.
-                - name: IGNORE_DUPLICATE_ERRORS
-                  value: "true"
-                - name: TZ
-                  value: Europe/London
-                - name: APP_ENV
-                  value: production
-                - name: APP_DEBUG
-                  value: "false"
-                - name: LOG_LEVEL
-                  value: notice
-              volumeMounts:
-                - name: import-config
-                  mountPath: /import
-                  readOnly: true
-              resources:
-                requests:
-                  cpu: 50m
-                  memory: 128Mi
-                limits:
-                  cpu: "1"
-                  memory: 512Mi
-              securityContext:
-                allowPrivilegeEscalation: false
-                capabilities:
-                  drop:
-                    - ALL
-          volumes:
-            - name: import-config
-              secret:
-                secretName: firefly-data-importer-secrets
-                items:
-                  - key: import.json
-                    path: import.json
-          securityContext:
-            seccompProfile:
-              type: RuntimeDefault

k8s/apps/firefly-iii/external-secrets.yaml

@@ -66,10 +66,6 @@ spec:
           -----BEGIN PRIVATE KEY-----
           {{ .private_key | replace "-----BEGIN PRIVATE KEY-----" "" | replace "-----END PRIVATE KEY-----" "" | replace " " "" | trim }}
           -----END PRIVATE KEY-----
-        FIREFLY_III_ACCESS_TOKEN: |-
-          {{ .firefly_access_token }}
-        import.json: |-
-          {{ .import_config }}
   data:
     - secretKey: app_id
       sourceRef:
@@ -87,19 +83,3 @@ spec:
       remoteRef:
         key: a1867c81-715c-47cd-978d-14ea5bcedea9
         property: fields[4].value
-    - secretKey: firefly_access_token
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: a1867c81-715c-47cd-978d-14ea5bcedea9
-        property: fields[6].value
-    - secretKey: import_config
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: a1867c81-715c-47cd-978d-14ea5bcedea9
-        property: fields[5].value

k8s/apps/firefly-iii/kustomization.yaml

@@ -4,7 +4,6 @@ kind: Kustomization
 resources:
   - app.yaml
   - data-importer.yaml
-  - data-importer-sync.yaml
   - data-importer-ingress.yaml
   - external-secrets.yaml
   - postgres.yaml

k8s/apps/firefly-iii/network-policy.yaml

@@ -22,9 +22,6 @@ spec:
         - podSelector:
             matchLabels:
               app.kubernetes.io/name: firefly-data-importer
-        - podSelector:
-            matchLabels:
-              app.kubernetes.io/name: firefly-data-importer-sync
         # hostNetwork traffic is seen as node traffic rather than Pod traffic.
         - ipBlock:
             cidr: 192.168.1.117/32