From b3621fb4ea08f3ae2c0c22ac418e124cbd7ea52b Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Fri, 8 May 2026 22:15:15 +0000
Subject: [PATCH] chore: Update manifests after change

---
 ...ass-talos-etcd-backup-external-config.yaml |  2 +-
 .../vault/CronJob-vault-snapshot.yaml         | 29 -------------------
 ...alSecret-vault-backup-external-config.yaml | 18 ------------
 ...derClass-vault-backup-external-config.yaml | 19 ------------
 4 files changed, 1 insertion(+), 67 deletions(-)
 delete mode 100644 clusters/cl01tl/manifests/vault/ExternalSecret-vault-backup-external-config.yaml
 delete mode 100644 clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml

diff --git a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml
index b5ef44fe9..899b5a9e8 100644
--- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml
+++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml
@@ -15,5 +15,5 @@ spec:
     objects: |
       - objectName: .s3cfg
         fileName: .s3cfg
-        secretPath: secret/data/digital-ocean/home-infra/talos-backups
+        secretPath: secret/data/backblaze/home-infra/talos-backups
         secretKey: s3cfg
diff --git a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml
index b1559a7b3..c1125f9b1 100644
--- a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml
+++ b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml
@@ -57,35 +57,6 @@ spec:
                   name: snapshot-script
                   subPath: snapshot.sh
           containers:
-            - args:
-                - -ec
-                - /scripts/backup.sh
-              command:
-                - /bin/sh
-              env:
-                - name: BUCKET
-                  valueFrom:
-                    secretKeyRef:
-                      key: BUCKET
-                      name: vault-backup-external-config
-                - name: TARGET
-                  value: External
-              envFrom:
-                - secretRef:
-                    name: vault-ntfy-config
-              image: d3fk/s3cmd:latest@sha256:d66cc5677b30b31a7981f9fde0af064a9072e8b8a57d5e9b4cc02f44f02acbf2
-              name: s3-backup-external
-              volumeMounts:
-                - mountPath: /opt/backup
-                  name: backup
-                - mountPath: /root/.s3cfg
-                  mountPropagation: None
-                  name: backup-external-config
-                  readOnly: true
-                  subPath: .s3cfg
-                - mountPath: /scripts/backup.sh
-                  name: backup-script
-                  subPath: backup.sh
             - args:
                 - -ec
                 - /scripts/backup.sh
diff --git a/clusters/cl01tl/manifests/vault/ExternalSecret-vault-backup-external-config.yaml b/clusters/cl01tl/manifests/vault/ExternalSecret-vault-backup-external-config.yaml
deleted file mode 100644
index 73379fd8f..000000000
--- a/clusters/cl01tl/manifests/vault/ExternalSecret-vault-backup-external-config.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: vault-backup-external-config
-  namespace: vault
-  labels:
-    app.kubernetes.io/name: vault-backup-external-config
-    app.kubernetes.io/instance: vault
-    app.kubernetes.io/part-of: vault
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: BUCKET
-      remoteRef:
-        key: /digital-ocean/home-infra/vault-backups
-        property: BUCKET_PATH
diff --git a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml
deleted file mode 100644
index b8823b566..000000000
--- a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: secrets-store.csi.x-k8s.io/v1
-kind: SecretProviderClass
-metadata:
-  name: vault-backup-external-config
-  namespace: vault
-  labels:
-    app.kubernetes.io/name: vault-backup-external-config
-    app.kubernetes.io/instance: vault
-    app.kubernetes.io/part-of: vault
-spec:
-  provider: openbao
-  parameters:
-    baoAddress: "http://openbao-internal.openbao:8200"
-    roleName: vault
-    objects: |
-      - objectName: .s3cfg
-        fileName: .s3cfg
-        secretPath: secret/data/digital-ocean/home-infra/vault-backups
-        secretKey: s3cfg