Automated Manifest Update (#2809)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2809
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/seerr/HTTPRoute-seerr.yaml

@@ -1,10 +1,10 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-seerr
+  name: seerr
   namespace: seerr
   labels:
-    app.kubernetes.io/name: http-route-seerr
+    app.kubernetes.io/name: seerr
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/part-of: seerr
 spec:

clusters/cl01tl/manifests/shelly-plug/ServiceMonitor-shelly-plug.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: shelly-plug
-  namespace: shelly-plug
   labels:
-    app.kubernetes.io/name: shelly-plug
     app.kubernetes.io/instance: shelly-plug
-    app.kubernetes.io/part-of: shelly-plug
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: shelly-plug
+    helm.sh/chart: shelly-plug-4.5.0
+  namespace: shelly-plug
 spec:
+  jobLabel: "shelly-plug"
+  namespaceSelector:
+    matchNames:
+      - shelly-plug
   selector:
     matchLabels:
-      app.kubernetes.io/name: shelly-plug
       app.kubernetes.io/instance: shelly-plug
+      app.kubernetes.io/name: shelly-plug
   endpoints:
-    - port: metrics
-      interval: 30s
-      scrapeTimeout: 10s
+    - interval: 30s
       path: /metrics
+      port: metrics
+      scrapeTimeout: 10s

clusters/cl01tl/manifests/slskd/HTTPRoute-slskd.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-slskd
-  namespace: slskd
+  name: slskd
   labels:
-    app.kubernetes.io/name: http-route-slskd
     app.kubernetes.io/instance: slskd
-    app.kubernetes.io/part-of: slskd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: slskd
+    helm.sh/chart: slskd-4.5.0
+  namespace: slskd
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - slskd.alexlebens.net
+    - "slskd.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: slskd
+          namespace: slskd
+          port: 5030
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: slskd
-          port: 5030
-          weight: 100

clusters/cl01tl/manifests/slskd/ServiceMonitor-slskd.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: slskd
-  namespace: slskd
   labels:
-    app.kubernetes.io/name: slskd
     app.kubernetes.io/instance: slskd
-    app.kubernetes.io/part-of: slskd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: slskd
+    helm.sh/chart: slskd-4.5.0
+  namespace: slskd
 spec:
+  jobLabel: "slskd"
+  namespaceSelector:
+    matchNames:
+      - slskd
   selector:
     matchLabels:
-      app.kubernetes.io/name: slskd
       app.kubernetes.io/instance: slskd
+      app.kubernetes.io/name: slskd
   endpoints:
-    - port: http
-      interval: 3m
-      scrapeTimeout: 1m
+    - interval: 3m
       path: /metrics
+      port: http
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/sonarr-4k/Cluster-sonarr-4k-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-4k-postgresql-18-cluster
   namespace: sonarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/sonarr-4k/ExternalSecret-sonarr-4k-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: sonarr-4k-postgresql-18-backup-garage-local-secret
+  namespace: sonarr-4k
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-4k-postgresql-18
+    app.kubernetes.io/instance: sonarr-4k
+    app.kubernetes.io/part-of: sonarr-4k
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-4k-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/sonarr-4k/ExternalSecret-sonarr-4k-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: sonarr-4k-postgresql-18-cluster-backup-secret
-  namespace: sonarr-4k
-  labels:
-    app.kubernetes.io/name: sonarr-4k-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: sonarr-4k
-    app.kubernetes.io/part-of: sonarr-4k
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/sonarr-4k/ExternalSecret-sonarr-4k-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+  name: sonarr-4k-postgresql-18-recovery-secret
   namespace: sonarr-4k
   labels:
-    app.kubernetes.io/name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-4k-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-4k/HTTPRoute-sonarr-4k.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-sonarr-4k
-  namespace: sonarr-4k
+  name: sonarr-4k
   labels:
-    app.kubernetes.io/name: http-route-sonarr-4k
     app.kubernetes.io/instance: sonarr-4k
-    app.kubernetes.io/part-of: sonarr-4k
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-4k
+    helm.sh/chart: sonarr-4k-4.5.0
+  namespace: sonarr-4k
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - sonarr-4k.alexlebens.net
+    - "sonarr-4k.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: sonarr-4k
+          namespace: sonarr-4k
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: sonarr-4k
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/sonarr-4k/ObjectStore-sonarr-4k-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "sonarr-4k-postgresql-18-garage-local-backup"
+  name: sonarr-4k-postgresql-18-backup-garage-local
   namespace: sonarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-4k-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr-4k-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-4k/ObjectStore-sonarr-4k-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "sonarr-4k-postgresql-18-recovery"
   namespace: sonarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-4k-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr-4k-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-4k-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-4k-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: sonarr-4k-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-4k/PrometheusRule-sonarr-4k-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-4k-postgresql-18-alert-rules
   namespace: sonarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/sonarr-4k/ScheduledBackup-sonarr-4k-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "sonarr-4k-postgresql-18-live-backup-scheduled-backup"
+  name: "sonarr-4k-postgresql-18-scheduled-backup-live-backup"
   namespace: sonarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-4k-postgresql-18
     app.kubernetes.io/instance: sonarr-4k
     app.kubernetes.io/part-of: sonarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-4k-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "sonarr-4k-postgresql-18-garage-local-backup"
+      barmanObjectName: "sonarr-4k-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/sonarr-4k/ServiceMonitor-sonarr-4k.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: sonarr-4k
-  namespace: sonarr-4k
   labels:
-    app.kubernetes.io/name: sonarr-4k
     app.kubernetes.io/instance: sonarr-4k
-    app.kubernetes.io/part-of: sonarr-4k
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-4k
+    helm.sh/chart: sonarr-4k-4.5.0
+  namespace: sonarr-4k
 spec:
+  jobLabel: "sonarr-4k"
+  namespaceSelector:
+    matchNames:
+      - sonarr-4k
   selector:
     matchLabels:
-      app.kubernetes.io/name: sonarr-4k
       app.kubernetes.io/instance: sonarr-4k
+      app.kubernetes.io/name: sonarr-4k
   endpoints:
-    - port: metrics
-      interval: 3m
-      scrapeTimeout: 1m
+    - interval: 3m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/sonarr-anime/Cluster-sonarr-anime-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-anime-postgresql-18-cluster
   namespace: sonarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/sonarr-anime/ExternalSecret-sonarr-anime-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: sonarr-anime-postgresql-18-backup-garage-local-secret
+  namespace: sonarr-anime
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-anime-postgresql-18
+    app.kubernetes.io/instance: sonarr-anime
+    app.kubernetes.io/part-of: sonarr-anime
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-anime-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/sonarr-anime/ExternalSecret-sonarr-anime-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: sonarr-anime-postgresql-18-cluster-backup-secret
-  namespace: sonarr-anime
-  labels:
-    app.kubernetes.io/name: sonarr-anime-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: sonarr-anime
-    app.kubernetes.io/part-of: sonarr-anime
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/sonarr-anime/ExternalSecret-sonarr-anime-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+  name: sonarr-anime-postgresql-18-recovery-secret
   namespace: sonarr-anime
   labels:
-    app.kubernetes.io/name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-anime-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-anime/HTTPRoute-sonarr-anime.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-sonarr-anime
-  namespace: sonarr-anime
+  name: sonarr-anime
   labels:
-    app.kubernetes.io/name: http-route-sonarr-anime
     app.kubernetes.io/instance: sonarr-anime
-    app.kubernetes.io/part-of: sonarr-anime
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-anime
+    helm.sh/chart: sonarr-anime-4.5.0
+  namespace: sonarr-anime
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - sonarr-anime.alexlebens.net
+    - "sonarr-anime.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: sonarr-anime
+          namespace: sonarr-anime
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: sonarr-anime
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/sonarr-anime/ObjectStore-sonarr-anime-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "sonarr-anime-postgresql-18-garage-local-backup"
+  name: sonarr-anime-postgresql-18-backup-garage-local
   namespace: sonarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-anime-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr-anime-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-anime/ObjectStore-sonarr-anime-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "sonarr-anime-postgresql-18-recovery"
   namespace: sonarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-anime-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr-anime-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-anime-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-anime-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: sonarr-anime-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr-anime/PrometheusRule-sonarr-anime-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-anime-postgresql-18-alert-rules
   namespace: sonarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/sonarr-anime/ScheduledBackup-sonarr-anime-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "sonarr-anime-postgresql-18-live-backup-scheduled-backup"
+  name: "sonarr-anime-postgresql-18-scheduled-backup-live-backup"
   namespace: sonarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-anime-postgresql-18
     app.kubernetes.io/instance: sonarr-anime
     app.kubernetes.io/part-of: sonarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-anime-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "sonarr-anime-postgresql-18-garage-local-backup"
+      barmanObjectName: "sonarr-anime-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/sonarr-anime/ServiceMonitor-sonarr-anime.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: sonarr-anime
-  namespace: sonarr-anime
   labels:
-    app.kubernetes.io/name: sonarr-anime
     app.kubernetes.io/instance: sonarr-anime
-    app.kubernetes.io/part-of: sonarr-anime
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-anime
+    helm.sh/chart: sonarr-anime-4.5.0
+  namespace: sonarr-anime
 spec:
+  jobLabel: "sonarr-anime"
+  namespaceSelector:
+    matchNames:
+      - sonarr-anime
   selector:
     matchLabels:
-      app.kubernetes.io/name: sonarr-anime
       app.kubernetes.io/instance: sonarr-anime
+      app.kubernetes.io/name: sonarr-anime
   endpoints:
-    - port: metrics
-      interval: 3m
-      scrapeTimeout: 1m
+    - interval: 3m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/sonarr/Cluster-sonarr-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-postgresql-18-cluster
   namespace: sonarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/sonarr/ExternalSecret-sonarr-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: sonarr-postgresql-18-backup-garage-local-secret
+  namespace: sonarr
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-postgresql-18
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/part-of: sonarr
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/sonarr/ExternalSecret-sonarr-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: sonarr-postgresql-18-cluster-backup-secret
-  namespace: sonarr
-  labels:
-    app.kubernetes.io/name: sonarr-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: sonarr
-    app.kubernetes.io/part-of: sonarr
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/sonarr/ExternalSecret-sonarr-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: sonarr-postgresql-18-cluster-backup-secret-garage
+  name: sonarr-postgresql-18-recovery-secret
   namespace: sonarr
   labels:
-    app.kubernetes.io/name: sonarr-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/sonarr/HTTPRoute-sonarr.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-sonarr
-  namespace: sonarr
+  name: sonarr
   labels:
-    app.kubernetes.io/name: http-route-sonarr
     app.kubernetes.io/instance: sonarr
-    app.kubernetes.io/part-of: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+    helm.sh/chart: sonarr-4.5.0
+  namespace: sonarr
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - sonarr.alexlebens.net
+    - "sonarr.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: sonarr
+          namespace: sonarr
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: sonarr
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/sonarr/ObjectStore-sonarr-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "sonarr-postgresql-18-garage-local-backup"
+  name: sonarr-postgresql-18-backup-garage-local
   namespace: sonarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: sonarr-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: sonarr-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr/ObjectStore-sonarr-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "sonarr-postgresql-18-recovery"
   namespace: sonarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: sonarr-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: sonarr-postgresql-18-cluster-backup-secret-garage
+        name: sonarr-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: sonarr-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/sonarr/PrometheusRule-sonarr-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: sonarr-postgresql-18-alert-rules
   namespace: sonarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/sonarr/ScheduledBackup-sonarr-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "sonarr-postgresql-18-live-backup-scheduled-backup"
+  name: "sonarr-postgresql-18-scheduled-backup-live-backup"
   namespace: sonarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: sonarr-postgresql-18
     app.kubernetes.io/instance: sonarr
     app.kubernetes.io/part-of: sonarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "sonarr-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "sonarr-postgresql-18-garage-local-backup"
+      barmanObjectName: "sonarr-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/sonarr/ServiceMonitor-sonarr.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: sonarr
-  namespace: sonarr
   labels:
-    app.kubernetes.io/name: sonarr
     app.kubernetes.io/instance: sonarr
-    app.kubernetes.io/part-of: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+    helm.sh/chart: sonarr-4.5.0
+  namespace: sonarr
 spec:
+  jobLabel: "sonarr"
+  namespaceSelector:
+    matchNames:
+      - sonarr
   selector:
     matchLabels:
-      app.kubernetes.io/name: sonarr
       app.kubernetes.io/instance: sonarr
+      app.kubernetes.io/name: sonarr
   endpoints:
-    - port: metrics
-      interval: 3m
-      scrapeTimeout: 1m
+    - interval: 3m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/stalwart/Cluster-stalwart-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: stalwart-postgresql-18-cluster
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: stalwart-postgresql-18-backup-garage-local-secret
+  namespace: stalwart
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: stalwart-postgresql-18
+    app.kubernetes.io/instance: stalwart
+    app.kubernetes.io/part-of: stalwart
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stalwart-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-postgresql-18-cluster-backup-secret.yaml

@@ -1,30 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: stalwart-postgresql-18-cluster-backup-secret
-  namespace: stalwart
-  labels:
-    app.kubernetes.io/name: stalwart-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: stalwart
-    app.kubernetes.io/version: v0.14.1
-    app.kubernetes.io/component: database
-    app.kubernetes.io/part-of: stalwart
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: stalwart-postgresql-18-cluster-backup-secret-garage
+  name: stalwart-postgresql-18-recovery-secret
   namespace: stalwart
   labels:
-    app.kubernetes.io/name: stalwart-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stalwart-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/stalwart/HTTPRoute-stalwart.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-stalwart
-  namespace: stalwart
+  name: stalwart
   labels:
-    app.kubernetes.io/name: http-route-stalwart
     app.kubernetes.io/instance: stalwart
-    app.kubernetes.io/part-of: stalwart
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stalwart
+    helm.sh/chart: stalwart-4.5.0
+  namespace: stalwart
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - stalwart.alexlebens.net
+    - "stalwart.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: stalwart
+          namespace: stalwart
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: stalwart
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/stalwart/ObjectStore-stalwart-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "stalwart-postgresql-18-garage-local-backup"
+  name: stalwart-postgresql-18-backup-garage-local
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stalwart-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: stalwart-postgresql-18-cluster-backup-secret-garage
+        name: stalwart-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: stalwart-postgresql-18-cluster-backup-secret-garage
+        name: stalwart-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: stalwart-postgresql-18-cluster-backup-secret-garage
+        name: stalwart-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/stalwart/ObjectStore-stalwart-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "stalwart-postgresql-18-recovery"
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "stalwart-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: stalwart-postgresql-18-cluster-backup-secret-garage
+        name: stalwart-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: stalwart-postgresql-18-cluster-backup-secret-garage
+        name: stalwart-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: stalwart-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/stalwart/PrometheusRule-stalwart-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: stalwart-postgresql-18-alert-rules
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/stalwart/ScheduledBackup-stalwart-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "stalwart-postgresql-18-live-backup-scheduled-backup"
+  name: "stalwart-postgresql-18-scheduled-backup-live-backup"
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: stalwart-postgresql-18
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "stalwart-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "stalwart-postgresql-18-garage-local-backup"
+      barmanObjectName: "stalwart-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/tautulli/HTTPRoute-tautulli.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-tautulli
-  namespace: tautulli
+  name: tautulli
   labels:
-    app.kubernetes.io/name: http-route-tautulli
     app.kubernetes.io/instance: tautulli
-    app.kubernetes.io/part-of: tautulli
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tautulli
+    helm.sh/chart: tautulli-4.5.0
+  namespace: tautulli
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - tautulli.alexlebens.net
+    - "tautulli.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: tautulli
+          namespace: tautulli
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: tautulli
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/tdarr/HTTPRoute-tdarr.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-tdarr
-  namespace: tdarr
+  name: tdarr
   labels:
-    app.kubernetes.io/name: http-route-tdarr
     app.kubernetes.io/instance: tdarr
-    app.kubernetes.io/part-of: tdarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tdarr
+    helm.sh/chart: tdarr-4.5.0
+  namespace: tdarr
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - tdarr.alexlebens.net
+    - "tdarr.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: tdarr-web
+          namespace: tdarr
+          port: 8265
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: tdarr-web
-          port: 8265
-          weight: 100

clusters/cl01tl/manifests/tubearchivist/HTTPRoute-tubearchivist.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-tubearchivist
-  namespace: tubearchivist
+  name: tubearchivist
   labels:
-    app.kubernetes.io/name: http-route-tubearchivist
     app.kubernetes.io/instance: tubearchivist
-    app.kubernetes.io/part-of: tubearchivist
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tubearchivist
+    helm.sh/chart: tubearchivist-4.5.0
+  namespace: tubearchivist
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - tubearchivist.alexlebens.net
+    - "tubearchivist.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: tubearchivist
+          namespace: tubearchivist
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: tubearchivist
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/unpoller/ServiceMonitor-unpoller.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: unpoller
-  namespace: unpoller
   labels:
-    app.kubernetes.io/name: unpoller
     app.kubernetes.io/instance: unpoller
-    app.kubernetes.io/part-of: unpoller
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: unpoller
+    helm.sh/chart: unpoller-4.5.0
+  namespace: unpoller
 spec:
+  jobLabel: "unpoller"
+  namespaceSelector:
+    matchNames:
+      - unpoller
   selector:
     matchLabels:
-      app.kubernetes.io/name: unpoller
       app.kubernetes.io/instance: unpoller
+      app.kubernetes.io/name: unpoller
   endpoints:
-    - port: metrics
-      interval: 30s
-      scrapeTimeout: 10s
+    - interval: 30s
       path: /metrics
+      port: metrics
+      scrapeTimeout: 10s

clusters/cl01tl/manifests/vault/HTTPRoute-vault.yaml

@@ -1,10 +1,10 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-vault
+  name: vault
   namespace: vault
   labels:
-    app.kubernetes.io/name: http-route-vault
+    app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/part-of: vault
 spec:

clusters/cl01tl/manifests/vaultwarden/Cluster-vaultwarden-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: vaultwarden-postgresql-18-cluster
   namespace: vaultwarden
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: vaultwarden-postgresql-18-backup-garage-local-secret
+  namespace: vaultwarden
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: vaultwarden-postgresql-18
+    app.kubernetes.io/instance: vaultwarden
+    app.kubernetes.io/part-of: vaultwarden
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vaultwarden-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: vaultwarden-postgresql-18-cluster-backup-secret
-  namespace: vaultwarden
-  labels:
-    app.kubernetes.io/name: vaultwarden-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: vaultwarden
-    app.kubernetes.io/part-of: vaultwarden
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+  name: vaultwarden-postgresql-18-recovery-secret
   namespace: vaultwarden
   labels:
-    app.kubernetes.io/name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vaultwarden-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/vaultwarden/ObjectStore-vaultwarden-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "vaultwarden-postgresql-18-garage-local-backup"
+  name: vaultwarden-postgresql-18-backup-garage-local
   namespace: vaultwarden
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vaultwarden-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+        name: vaultwarden-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+        name: vaultwarden-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+        name: vaultwarden-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/vaultwarden/ObjectStore-vaultwarden-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "vaultwarden-postgresql-18-recovery"
   namespace: vaultwarden
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "vaultwarden-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+        name: vaultwarden-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: vaultwarden-postgresql-18-cluster-backup-secret-garage
+        name: vaultwarden-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: vaultwarden-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/vaultwarden/PrometheusRule-vaultwarden-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: vaultwarden-postgresql-18-alert-rules
   namespace: vaultwarden
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/vaultwarden/ScheduledBackup-vaultwarden-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "vaultwarden-postgresql-18-live-backup-scheduled-backup"
+  name: "vaultwarden-postgresql-18-scheduled-backup-live-backup"
   namespace: vaultwarden
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: vaultwarden-postgresql-18
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "vaultwarden-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "vaultwarden-postgresql-18-garage-local-backup"
+      barmanObjectName: "vaultwarden-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/whodb/HTTPRoute-whodb.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-whodb
-  namespace: whodb
+  name: whodb
   labels:
-    app.kubernetes.io/name: http-route-whodb
     app.kubernetes.io/instance: whodb
-    app.kubernetes.io/part-of: whodb
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: whodb
+    helm.sh/chart: whodb-4.5.0
+  namespace: whodb
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - whodb.alexlebens.net
+    - "whodb.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: whodb
+          namespace: whodb
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: whodb
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/yamtrack/Cluster-yamtrack-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: yamtrack-postgresql-18-cluster
   namespace: yamtrack
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/yamtrack/ExternalSecret-yamtrack-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: yamtrack-postgresql-18-backup-garage-local-secret
+  namespace: yamtrack
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: yamtrack-postgresql-18
+    app.kubernetes.io/instance: yamtrack
+    app.kubernetes.io/part-of: yamtrack
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: yamtrack-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/yamtrack/ExternalSecret-yamtrack-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: yamtrack-postgresql-18-cluster-backup-secret
-  namespace: yamtrack
-  labels:
-    app.kubernetes.io/name: yamtrack-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: yamtrack
-    app.kubernetes.io/part-of: yamtrack
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/yamtrack/ExternalSecret-yamtrack-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: yamtrack-postgresql-18-cluster-backup-secret-garage
+  name: yamtrack-postgresql-18-recovery-secret
   namespace: yamtrack
   labels:
-    app.kubernetes.io/name: yamtrack-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: yamtrack-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/yamtrack/HTTPRoute-yamtrack.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-yamtrack
-  namespace: yamtrack
+  name: yamtrack
   labels:
-    app.kubernetes.io/name: http-route-yamtrack
     app.kubernetes.io/instance: yamtrack
-    app.kubernetes.io/part-of: yamtrack
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: yamtrack
+    helm.sh/chart: yamtrack-4.5.0
+  namespace: yamtrack
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - yamtrack.alexlebens.net
+    - "yamtrack.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: yamtrack
+          namespace: yamtrack
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: yamtrack
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/yamtrack/ObjectStore-yamtrack-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "yamtrack-postgresql-18-garage-local-backup"
+  name: yamtrack-postgresql-18-backup-garage-local
   namespace: yamtrack
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: yamtrack-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: yamtrack-postgresql-18-cluster-backup-secret-garage
+        name: yamtrack-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: yamtrack-postgresql-18-cluster-backup-secret-garage
+        name: yamtrack-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: yamtrack-postgresql-18-cluster-backup-secret-garage
+        name: yamtrack-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/yamtrack/ObjectStore-yamtrack-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "yamtrack-postgresql-18-recovery"
   namespace: yamtrack
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "yamtrack-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: yamtrack-postgresql-18-cluster-backup-secret-garage
+        name: yamtrack-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: yamtrack-postgresql-18-cluster-backup-secret-garage
+        name: yamtrack-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: yamtrack-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/yamtrack/PrometheusRule-yamtrack-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: yamtrack-postgresql-18-alert-rules
   namespace: yamtrack
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/yamtrack/ScheduledBackup-yamtrack-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "yamtrack-postgresql-18-live-backup-scheduled-backup"
+  name: "yamtrack-postgresql-18-scheduled-backup-live-backup"
   namespace: yamtrack
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: yamtrack-postgresql-18
     app.kubernetes.io/instance: yamtrack
     app.kubernetes.io/part-of: yamtrack
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "yamtrack-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "yamtrack-postgresql-18-garage-local-backup"
+      barmanObjectName: "yamtrack-postgresql-18-backup-garage-local"