From 567fe3d0436f9e5ceb4712ed1822f74b2ce88593 Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Sat, 27 Dec 2025 22:43:27 +0000
Subject: [PATCH] Automated Manifest Update (#2909)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2909
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
---
 .../garage/Deployment-garage-main.yaml        |  7 +++
 ...Secret-garage-db-backup-secret-remote.yaml | 51 -------------------
 .../PersistentVolumeClaim-garage-db.yaml      | 15 ++++--
 .../ReplicationDestination-garage-db.yaml     | 16 ------
 4 files changed, 18 insertions(+), 71 deletions(-)
 delete mode 100644 clusters/cl01tl/manifests/garage/ExternalSecret-garage-db-backup-secret-remote.yaml
 delete mode 100644 clusters/cl01tl/manifests/garage/ReplicationDestination-garage-db.yaml

diff --git a/clusters/cl01tl/manifests/garage/Deployment-garage-main.yaml b/clusters/cl01tl/manifests/garage/Deployment-garage-main.yaml
index 6c5b95951..29743a868 100644
--- a/clusters/cl01tl/manifests/garage/Deployment-garage-main.yaml
+++ b/clusters/cl01tl/manifests/garage/Deployment-garage-main.yaml
@@ -54,6 +54,8 @@ spec:
               subPath: garage.toml
             - mountPath: /var/lib/garage/data
               name: data
+            - mountPath: /var/lib/garage/meta
+              name: db
             - mountPath: /var/lib/garage/snapshots
               name: snapshots
         - envFrom:
@@ -74,6 +76,8 @@ spec:
               subPath: garage.toml
             - mountPath: /var/lib/garage/data
               name: data
+            - mountPath: /var/lib/garage/meta
+              name: db
             - mountPath: /var/lib/garage/snapshots
               name: snapshots
       volumes:
@@ -83,6 +87,9 @@ spec:
         - name: data
           persistentVolumeClaim:
             claimName: garage-data
+        - name: db
+          persistentVolumeClaim:
+            claimName: garage-db
         - name: snapshots
           persistentVolumeClaim:
             claimName: garage-snapshots
diff --git a/clusters/cl01tl/manifests/garage/ExternalSecret-garage-db-backup-secret-remote.yaml b/clusters/cl01tl/manifests/garage/ExternalSecret-garage-db-backup-secret-remote.yaml
deleted file mode 100644
index b34b67acd..000000000
--- a/clusters/cl01tl/manifests/garage/ExternalSecret-garage-db-backup-secret-remote.yaml
+++ /dev/null
@@ -1,51 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: garage-db-backup-secret-remote
-  namespace: garage
-spec:
-  data:
-    - remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: BUCKET_ENDPOINT
-      secretKey: BUCKET_ENDPOINT
-    - remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-      secretKey: RESTIC_PASSWORD
-    - remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_REGION
-      secretKey: AWS_DEFAULT_REGION
-    - remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-      secretKey: AWS_ACCESS_KEY_ID
-    - remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-      secretKey: AWS_SECRET_ACCESS_KEY
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/garage/garage-db"
-      engineVersion: v2
-      mergePolicy: Merge
diff --git a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db.yaml b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db.yaml
index 8cdfd078a..b19f4c0b4 100644
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db.yaml
@@ -1,12 +1,19 @@
-apiVersion: v1
 kind: PersistentVolumeClaim
+apiVersion: v1
 metadata:
   name: garage-db
+  labels:
+    app.kubernetes.io/instance: garage
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: garage
+    helm.sh/chart: garage-4.5.0
+  annotations:
+    helm.sh/resource-policy: keep
   namespace: garage
 spec:
   accessModes:
-    - ReadWriteOnce
+    - "ReadWriteOnce"
   resources:
     requests:
-      storage: 50Gi
-  storageClassName: ceph-block
+      storage: "50Gi"
+  storageClassName: "ceph-block"
diff --git a/clusters/cl01tl/manifests/garage/ReplicationDestination-garage-db.yaml b/clusters/cl01tl/manifests/garage/ReplicationDestination-garage-db.yaml
deleted file mode 100644
index 3c0dcecc8..000000000
--- a/clusters/cl01tl/manifests/garage/ReplicationDestination-garage-db.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationDestination
-metadata:
-  name: garage-db
-  namespace: garage
-  labels:
-    app.kubernetes.io/name: garage-db
-    app.kubernetes.io/instance: garage
-    app.kubernetes.io/part-of: garage
-spec:
-  trigger:
-    manual: restore-once
-  restic:
-    repository: garage-db-backup-secret-remote
-    destinationPVC: garage-db
-    copyMethod: Direct