Automated Manifest Update (#2894)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2894
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-external.yaml

@@ -1,15 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: backrest-data-backup-secret-remote
-  namespace: backrest
+  name: actual-data-backup-secret-external
+  namespace: actual
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
+    helm.sh/chart: volsync-target-data-0.7.0
+    app.kubernetes.io/instance: actual
+    app.kubernetes.io/part-of: actual
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-data-backup-secret-remote
+    app.kubernetes.io/name: actual-data-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -19,40 +19,40 @@ spec:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/actual/actual-data"
   data:
     - secretKey: BUCKET_ENDPOINT
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /volsync/restic/garage-remote
+        key: /volsync/restic/digital-ocean
         metadataPolicy: None
         property: BUCKET_ENDPOINT
     - secretKey: RESTIC_PASSWORD
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /volsync/restic/garage-remote
+        key: /volsync/restic/digital-ocean
         metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_REGION
+        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_KEY_ID
+        property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_SECRET_KEY
+        property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-external.yaml

@@ -1,22 +1,22 @@
 apiVersion: volsync.backube/v1alpha1
 kind: ReplicationSource
 metadata:
-  name: karakeep-backup-source-local
-  namespace: karakeep
+  name: actual-data-backup-source-external
+  namespace: actual
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
-    app.kubernetes.io/instance: karakeep
-    app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.6.0"
+    helm.sh/chart: volsync-target-data-0.7.0
+    app.kubernetes.io/instance: actual
+    app.kubernetes.io/part-of: actual
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: karakeep-backup
+    app.kubernetes.io/name: actual-data-backup
 spec:
-  sourcePVC: karakeep
+  sourcePVC: actual-data
   trigger:
-    schedule: 0 8 * * *
+    schedule: 0 9 * * *
   restic:
     pruneIntervalDays: 7
-    repository: karakeep-backup-secret-local
+    repository: actual-data-backup-secret-external
     retain:
       daily: 7
       hourly: 0

clusters/cl01tl/manifests/argo-workflows/Cluster-argo-workflows-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: argo-workflows-postgresql-18-cluster
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/argo-workflows/ExternalSecret-argo-workflows-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: argo-workflows-postgresql-18-backup-garage-local-secret
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: argo-workflows-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/argo-workflows/ExternalSecret-argo-workflows-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: argo-workflows-postgresql-18-recovery-secret
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: argo-workflows-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/argo-workflows/ObjectStore-argo-workflows-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: argo-workflows-postgresql-18-backup-garage-local
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: argo-workflows-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/argo-workflows/ObjectStore-argo-workflows-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "argo-workflows-postgresql-18-recovery"
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "argo-workflows-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/argo-workflows/PrometheusRule-argo-workflows-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: argo-workflows-postgresql-18-alert-rules
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="argo-workflows"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="argo-workflows"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="argo-workflows"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="argo-workflows"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="argo-workflows"} > cnpg_pg_replication_is_wal_receiver_up{namespace="argo-workflows"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/argo-workflows/ScheduledBackup-argo-workflows-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "argo-workflows-postgresql-18-scheduled-backup-live-backup"
   namespace: argo-workflows
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: argo-workflows-postgresql-18
     app.kubernetes.io/instance: argo-workflows
     app.kubernetes.io/part-of: argo-workflows
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "argo-workflows-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-config-backup-secret-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup-secret-external
 spec:

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: audiobookshelf-config-backup-secret-local
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-config-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: audiobookshelf-config-backup-secret-remote
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-config-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-metadata-backup-secret-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
+    helm.sh/chart: volsync-target-metadata-0.7.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-external
 spec:

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: audiobookshelf-metadata-backup-secret-local
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: audiobookshelf-metadata-backup-secret-remote
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: audiobookshelf-config-backup-source-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup
 spec:
   sourcePVC: audiobookshelf-config
   trigger:
-    schedule: 0 9 * * *
+    schedule: 2 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: audiobookshelf-config-backup-secret-external

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: audiobookshelf-config-backup-source-local
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-config-backup
-spec:
-  sourcePVC: audiobookshelf-config
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: audiobookshelf-config-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: audiobookshelf-config-backup-source-remote
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-config-backup
-spec:
-  sourcePVC: audiobookshelf-config
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: audiobookshelf-config-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: audiobookshelf-metadata-backup-source-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
+    helm.sh/chart: volsync-target-metadata-0.7.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup
 spec:
   sourcePVC: audiobookshelf-metadata
   trigger:
-    schedule: 0 9 * * *
+    schedule: 4 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: audiobookshelf-metadata-backup-secret-external

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: audiobookshelf-metadata-backup-source-local
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-metadata-backup
-spec:
-  sourcePVC: audiobookshelf-metadata
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: audiobookshelf-metadata-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: audiobookshelf-metadata-backup-source-remote
-  namespace: audiobookshelf
-  labels:
-    helm.sh/chart: volsync-target-metadata-0.6.0
-    app.kubernetes.io/instance: audiobookshelf
-    app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: audiobookshelf-metadata-backup
-spec:
-  sourcePVC: audiobookshelf-metadata
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: audiobookshelf-metadata-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/authentik/Cluster-authentik-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: authentik-postgresql-18-cluster
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: authentik-postgresql-18-backup-garage-local-secret
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: authentik-postgresql-18-recovery-secret
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/authentik/ObjectStore-authentik-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: authentik-postgresql-18-backup-garage-local
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/authentik/ObjectStore-authentik-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "authentik-postgresql-18-recovery"
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "authentik-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: authentik-postgresql-18-alert-rules
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="authentik"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="authentik"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="authentik"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="authentik"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="authentik"} > cnpg_pg_replication_is_wal_receiver_up{namespace="authentik"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/authentik/ScheduledBackup-authentik-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "authentik-postgresql-18-scheduled-backup-live-backup"
   namespace: authentik
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: authentik-postgresql-18
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "authentik-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-config-backup-secret-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup-secret-external
 spec:

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: backrest-config-backup-secret-local
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-config-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: backrest-config-backup-secret-remote
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-config-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-data-backup-secret-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup-secret-external
 spec:

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: backrest-data-backup-secret-local
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-data-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-data-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: backrest-config-backup-source-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup
 spec:
   sourcePVC: backrest-config
   trigger:
-    schedule: 0 9 * * *
+    schedule: 8 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: backrest-config-backup-secret-external

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: backrest-config-backup-source-local
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-config-backup
-spec:
-  sourcePVC: backrest-config
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: backrest-config-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: backrest-config-backup-source-remote
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-config-backup
-spec:
-  sourcePVC: backrest-config
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: backrest-config-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: backrest-data-backup-source-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup
 spec:
   sourcePVC: backrest-data
   trigger:
-    schedule: 0 9 * * *
+    schedule: 6 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: backrest-data-backup-secret-external

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: backrest-data-backup-source-local
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-data-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-data-backup
-spec:
-  sourcePVC: backrest-data
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: backrest-data-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: backrest-data-backup-source-remote
-  namespace: backrest
-  labels:
-    helm.sh/chart: volsync-target-data-0.6.0
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest-data-backup
-spec:
-  sourcePVC: backrest-data
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: backrest-data-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: bazarr-config-backup-secret-external
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup-secret-external
 spec:

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: bazarr-config-backup-secret-local
-  namespace: bazarr
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: bazarr
-    app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: bazarr-config-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: bazarr-config-backup-secret-remote
-  namespace: bazarr
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: bazarr
-    app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: bazarr-config-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: bazarr-config-backup-source-external
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup
 spec:
   sourcePVC: bazarr-config
   trigger:
-    schedule: 0 9 * * *
+    schedule: 10 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: bazarr-config-backup-secret-external

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-local.yaml

@@ -1,34 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: bazarr-config-backup-source-local
-  namespace: bazarr
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: bazarr
-    app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: bazarr-config-backup
-spec:
-  sourcePVC: bazarr-config
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: bazarr-config-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    moverSecurityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-      runAsGroup: 1000
-      runAsUser: 1000
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-remote.yaml

@@ -1,34 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: bazarr-config-backup-source-remote
-  namespace: bazarr
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: bazarr
-    app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: bazarr-config-backup
-spec:
-  sourcePVC: bazarr-config
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: bazarr-config-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    moverSecurityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-      runAsGroup: 1000
-      runAsUser: 1000
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-config-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: booklore-config-backup-secret-external
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-config-backup-secret-external
 spec:

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-config-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-config-backup-secret-local
-  namespace: booklore
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: booklore
-    app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: booklore-config-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/booklore/booklore-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-config-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-config-backup-secret-remote
-  namespace: booklore
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: booklore
-    app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: booklore-config-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/booklore/booklore-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-data-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: booklore-data-backup-secret-external
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup-secret-external
 spec:

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-data-backup-secret-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: booklore-data-backup-secret-local
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup-secret-local
 spec:

clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-data-backup-secret-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: booklore-data-backup-secret-remote
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup-secret-remote
 spec:

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-config-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: booklore-config-backup-source-external
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-config-backup
 spec:
   sourcePVC: booklore-config
   trigger:
-    schedule: 0 9 * * *
+    schedule: 12 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: booklore-config-backup-secret-external

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-config-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: booklore-config-backup-source-local
-  namespace: booklore
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: booklore
-    app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: booklore-config-backup
-spec:
-  sourcePVC: booklore-config
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: booklore-config-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-config-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: booklore-config-backup-source-remote
-  namespace: booklore
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: booklore
-    app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: booklore-config-backup
-spec:
-  sourcePVC: booklore-config
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: booklore-config-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-data-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: booklore-data-backup-source-external
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup
 spec:
   sourcePVC: booklore-data
   trigger:
-    schedule: 0 9 * * *
+    schedule: 14 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: booklore-data-backup-secret-external

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-data-backup-source-local.yaml

@@ -4,16 +4,16 @@ metadata:
   name: booklore-data-backup-source-local
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup
 spec:
   sourcePVC: booklore-data
   trigger:
-    schedule: 0 8 * * *
+    schedule: 14 8 * * *
   restic:
     pruneIntervalDays: 7
     repository: booklore-data-backup-secret-local

clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-data-backup-source-remote.yaml

@@ -4,16 +4,16 @@ metadata:
   name: booklore-data-backup-source-remote
   namespace: booklore
   labels:
-    helm.sh/chart: volsync-target-data-0.6.0
+    helm.sh/chart: volsync-target-data-0.7.0
     app.kubernetes.io/instance: booklore
     app.kubernetes.io/part-of: booklore
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: booklore-data-backup
 spec:
   sourcePVC: booklore-data
   trigger:
-    schedule: 0 10 * * *
+    schedule: 14 10 * * *
   restic:
     pruneIntervalDays: 7
     repository: booklore-data-backup-secret-remote

clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-config-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: code-server-config-backup-secret-external
   namespace: code-server
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: code-server
     app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: code-server-config-backup-secret-external
 spec:

clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-config-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: code-server-config-backup-secret-local
-  namespace: code-server
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: code-server
-    app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: code-server-config-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/code-server-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-config-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: code-server-config-backup-secret-remote
-  namespace: code-server
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: code-server
-    app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: code-server-config-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/code-server-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: code-server-config-backup-source-external
   namespace: code-server
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: code-server
     app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: code-server-config-backup
 spec:
   sourcePVC: code-server-config
   trigger:
-    schedule: 0 9 * * *
+    schedule: 16 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: code-server-config-backup-secret-external

clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml

@@ -1,34 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: code-server-config-backup-source-local
-  namespace: code-server
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: code-server
-    app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: code-server-config-backup
-spec:
-  sourcePVC: code-server-config
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: code-server-config-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    moverSecurityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-      runAsGroup: 1000
-      runAsUser: 1000
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-remote.yaml

@@ -1,34 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: code-server-config-backup-source-remote
-  namespace: code-server
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: code-server
-    app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: code-server-config-backup
-spec:
-  sourcePVC: code-server-config
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: code-server-config-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    moverSecurityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-      runAsGroup: 1000
-      runAsUser: 1000
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/directus/Cluster-directus-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: directus-postgresql-18-cluster
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: directus-postgresql-18-backup-garage-local-secret
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: directus-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: directus-postgresql-18-recovery-secret
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: directus-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/directus/ObjectStore-directus-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: directus-postgresql-18-backup-garage-local
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: directus-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/directus/ObjectStore-directus-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "directus-postgresql-18-recovery"
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "directus-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/directus/PrometheusRule-directus-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: directus-postgresql-18-alert-rules
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="directus"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="directus"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="directus"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="directus"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="directus"} > cnpg_pg_replication_is_wal_receiver_up{namespace="directus"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/directus/ScheduledBackup-directus-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "directus-postgresql-18-scheduled-backup-live-backup"
   namespace: directus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: directus-postgresql-18
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "directus-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: ephemera-backup-secret-external
   namespace: ephemera
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: ephemera
     app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ephemera-backup-secret-external
 spec:

clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-backup-secret-local
-  namespace: ephemera
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: ephemera
-    app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ephemera-backup-secret-local
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-remote.yaml

@@ -1,58 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-backup-secret-remote
-  namespace: ephemera
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: ephemera
-    app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ephemera-backup-secret-remote
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-external.yaml

@@ -4,16 +4,16 @@ metadata:
   name: ephemera-backup-source-external
   namespace: ephemera
   labels:
-    helm.sh/chart: volsync-target-config-0.6.0
+    helm.sh/chart: volsync-target-config-0.7.0
     app.kubernetes.io/instance: ephemera
     app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: ephemera-backup
 spec:
   sourcePVC: ephemera
   trigger:
-    schedule: 0 9 * * *
+    schedule: 16 9 * * *
   restic:
     pruneIntervalDays: 7
     repository: ephemera-backup-secret-external

clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: ephemera-backup-source-local
-  namespace: ephemera
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: ephemera
-    app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ephemera-backup
-spec:
-  sourcePVC: ephemera
-  trigger:
-    schedule: 0 8 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: ephemera-backup-secret-local
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-remote.yaml

@@ -1,29 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: ephemera-backup-source-remote
-  namespace: ephemera
-  labels:
-    helm.sh/chart: volsync-target-config-0.6.0
-    app.kubernetes.io/instance: ephemera
-    app.kubernetes.io/part-of: ephemera
-    app.kubernetes.io/version: "0.6.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ephemera-backup
-spec:
-  sourcePVC: ephemera
-  trigger:
-    schedule: 0 10 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: ephemera-backup-secret-remote
-    retain:
-      daily: 7
-      hourly: 0
-      monthly: 3
-      weekly: 4
-      yearly: 1
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 1Gi

clusters/cl01tl/manifests/freshrss/Cluster-freshrss-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: freshrss-postgresql-18-cluster
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: freshrss-postgresql-18-backup-garage-local-secret
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: freshrss-postgresql-18-recovery-secret
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/freshrss/ObjectStore-freshrss-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: freshrss-postgresql-18-backup-garage-local
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/freshrss/ObjectStore-freshrss-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "freshrss-postgresql-18-recovery"
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "freshrss-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/freshrss/PrometheusRule-freshrss-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: freshrss-postgresql-18-alert-rules
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="freshrss"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="freshrss"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="freshrss"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="freshrss"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="freshrss"} > cnpg_pg_replication_is_wal_receiver_up{namespace="freshrss"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/freshrss/ScheduledBackup-freshrss-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "freshrss-postgresql-18-scheduled-backup-live-backup"
   namespace: freshrss
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: freshrss-postgresql-18
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "freshrss-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/garage/ExternalSecret-garage-db-backup-secret-external.yaml

@@ -1,15 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: garage-db-backup-secret-remote
+  name: garage-db-backup-secret-external
   namespace: garage
   labels:
-    helm.sh/chart: volsync-target-db-0.6.0
+    helm.sh/chart: volsync-target-db-0.7.0
     app.kubernetes.io/instance: garage
     app.kubernetes.io/part-of: garage
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: garage-db-backup-secret-remote
+    app.kubernetes.io/name: garage-db-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -25,34 +25,34 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /volsync/restic/garage-remote
+        key: /volsync/restic/digital-ocean
         metadataPolicy: None
         property: BUCKET_ENDPOINT
     - secretKey: RESTIC_PASSWORD
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /volsync/restic/garage-remote
+        key: /volsync/restic/digital-ocean
         metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_REGION
+        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_KEY_ID
+        property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
+        key: /digital-ocean/home-infra/volsync-backups
         metadataPolicy: None
-        property: ACCESS_SECRET_KEY
+        property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/garage/ReplicationSource-garage-db-backup-source-external.yaml

@@ -1,22 +1,22 @@
 apiVersion: volsync.backube/v1alpha1
 kind: ReplicationSource
 metadata:
-  name: garage-db-backup-source-remote
+  name: garage-db-backup-source-external
   namespace: garage
   labels:
-    helm.sh/chart: volsync-target-db-0.6.0
+    helm.sh/chart: volsync-target-db-0.7.0
     app.kubernetes.io/instance: garage
     app.kubernetes.io/part-of: garage
-    app.kubernetes.io/version: "0.6.0"
+    app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: garage-db-backup
 spec:
   sourcePVC: garage-db
   trigger:
-    schedule: 0 10 * * *
+    schedule: 20 9 * * *
   restic:
     pruneIntervalDays: 7
-    repository: garage-db-backup-secret-remote
+    repository: garage-db-backup-secret-external
     retain:
       daily: 7
       hourly: 0
@@ -26,4 +26,4 @@ spec:
     copyMethod: Snapshot
     storageClassName: ceph-block
     volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 10Gi
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/gatus/Cluster-gatus-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gatus-postgresql-18-cluster
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gatus-postgresql-18-backup-garage-local-secret
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gatus-postgresql-18-recovery-secret
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/gatus/ObjectStore-gatus-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gatus-postgresql-18-backup-garage-local
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/gatus/ObjectStore-gatus-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "gatus-postgresql-18-recovery"
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "gatus-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/gatus/PrometheusRule-gatus-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gatus-postgresql-18-alert-rules
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="gatus"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="gatus"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="gatus"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="gatus"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="gatus"} > cnpg_pg_replication_is_wal_receiver_up{namespace="gatus"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/gatus/ScheduledBackup-gatus-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "gatus-postgresql-18-scheduled-backup-live-backup"
   namespace: gatus
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gatus-postgresql-18
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "gatus-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/gitea/Cluster-gitea-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gitea-postgresql-18-cluster
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-postgresql-18-backup-garage-local-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gitea-postgresql-18-backup-garage-local-secret
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local-secret
 spec:

clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-postgresql-18-recovery-secret.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gitea-postgresql-18-recovery-secret
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/gitea/ObjectStore-gitea-postgresql-18-backup-garage-local.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gitea-postgresql-18-backup-garage-local
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local
 spec:

clusters/cl01tl/manifests/gitea/ObjectStore-gitea-postgresql-18-recovery.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "gitea-postgresql-18-recovery"
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "gitea-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: gitea-postgresql-18-alert-rules
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:
@@ -21,7 +21,7 @@ spec:
               Pod {{ $labels.pod }}
               has been waiting for longer than 5 minutes
           expr: |
-            cnpg_backends_waiting_total{namespace="gitea"} > 300
+            cnpg_backends_waiting_total > 300
           for: 1m
           labels:
             severity: warning
@@ -34,7 +34,7 @@ spec:
               There are over 10 deadlock conflicts in
               {{ $labels.pod }}
           expr: |
-            cnpg_pg_stat_database_deadlocks{namespace="gitea"} > 10
+            cnpg_pg_stat_database_deadlocks > 10
           for: 1m
           labels:
             severity: warning
@@ -151,7 +151,7 @@ spec:
               CloudNativePG Cluster Pod {{ $labels.pod }}
               is taking more than 5 minutes (300 seconds) for a query.
           expr: |-
-            cnpg_backends_max_tx_duration_seconds{namespace="gitea"} > 300
+            cnpg_backends_max_tx_duration_seconds > 300
           for: 1m
           labels:
             severity: warning
@@ -222,7 +222,7 @@ spec:
               Over 300,000,000 transactions from frozen xid
               on pod {{ $labels.pod }}
           expr: |
-            cnpg_pg_database_xid_age{namespace="gitea"} > 300000000
+            cnpg_pg_database_xid_age > 300000000
           for: 1m
           labels:
             severity: warning
@@ -247,7 +247,7 @@ spec:
               Replica {{ $labels.pod }}
               is failing to replicate
           expr: |
-            cnpg_pg_replication_in_recovery{namespace="gitea"} > cnpg_pg_replication_is_wal_receiver_up{namespace="gitea"}
+            cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
           for: 1m
           labels:
             severity: warning

clusters/cl01tl/manifests/gitea/ScheduledBackup-gitea-postgresql-18-scheduled-backup-live-backup.yaml

@@ -4,11 +4,11 @@ metadata:
   name: "gitea-postgresql-18-scheduled-backup-live-backup"
   namespace: gitea
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: gitea-postgresql-18
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "gitea-postgresql-18-scheduled-backup-live-backup"
 spec:

clusters/cl01tl/manifests/grafana-operator/Cluster-grafana-operator-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: grafana-operator-postgresql-18-cluster
   namespace: grafana-operator
   labels:
-    helm.sh/chart: postgres-18-cluster-7.4.5
+    helm.sh/chart: postgres-18-cluster-7.4.4
     app.kubernetes.io/name: grafana-operator-postgresql-18
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/part-of: grafana-operator
-    app.kubernetes.io/version: "7.4.5"
+    app.kubernetes.io/version: "7.4.4"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3