Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-08-05 12:00:41

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/firefly-iii/kustomization.yaml

@@ -10,6 +10,7 @@ resources:
   - postgres.yaml
   - storage.yaml
   - storage-prep.yaml
+  - traefik-ai.yaml
   - network-policy.yaml
 
 helmCharts:

k8s/apps/firefly-iii/traefik-ai.yaml

@@ -9,13 +9,11 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: traefik-ai
-  namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 rules:
   - apiGroups:
       - ""
@@ -54,7 +52,6 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -62,65 +59,11 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - services
-      - secrets
-      - endpoints
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - discovery.k8s.io
-    resources:
-      - endpointslices
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses/status
-    verbs:
-      - update
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: traefik-ai
-subjects:
-  - kind: ServiceAccount
-    name: traefik-ai
-    namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 rules:
   - apiGroups:
       - ""
@@ -142,21 +85,20 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: traefik-ai
+  name: firefly-traefik-ai
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
+    namespace: firefly-iii
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik-ai
-  namespace: kube-system
   labels:
     app.kubernetes.io/name: traefik-ai
 spec:
@@ -188,7 +130,7 @@ spec:
           args:
             - --entrypoints.web.address=192.168.1.117:80
             - --providers.kubernetesingress=true
-            - --providers.kubernetesingress.namespaces=firefly-iii,lan-play
+            - --providers.kubernetesingress.namespaces=firefly-iii
             - --providers.kubernetesingress.ingressclass=traefik-ai
             - --providers.kubernetesingress.labelselector=firefly.hexor.cy/private-ai=true
             - --providers.kubernetescrd=false

k8s/apps/lan-play/ingress.yaml

@@ -45,11 +45,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: lan-play-local
-  labels:
-    firefly.hexor.cy/private-ai: "true"
-  annotations:
-    kubernetes.io/ingress.class: traefik-ai
 spec:
+  ingressClassName: traefik
   rules:
     - host: video.lan
       http:

k8s/apps/matrix/external-secrets.yaml

@@ -70,7 +70,6 @@ spec:
                     action: suggest
                     template: "{{ `{{ user.email }}` }}"
                     set_email_verification: always
-                    on_conflict: replace
   data:
     - secretKey: oauth_client_id
       sourceRef:
@@ -94,3 +93,4 @@ spec:
         metadataPolicy: None
         key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
         property: fields[1].value
+                    on_conflict: replace

k8s/apps/web-petting/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/os: linux
-#       kubernetes.io/hostname: master.tail2fe2d.ts.net
+        kubernetes.io/hostname: master.tail2fe2d.ts.net
       volumes:
         - name: data
           persistentVolumeClaim:

k8s/core/kube-system-custom/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - coredns-internal-resolve.yaml
   - https-middleware.yaml
   - node-external-ip-labeler.yaml
-  - traefik-ai.yaml
 
 helmCharts:
   - name: csi-driver-nfs

k8s/core/prom-stack/prom-values.yaml

@@ -75,10 +75,6 @@ prometheus:
         static_configs:
           - targets: ['prom-a2s-exporter.counter-strike.svc:9841']
             labels: {instance: master}
-      - job_name: macos_prom_exporter
-        static_configs:
-          - targets: ['macbook-pro.tail2fe2d.ts.net:9100']
-            labels: {instance: ultrabook-pro}
 
     retention: "380d"
     retentionSize: "0"