diff --git a/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml b/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml index 6ed1f7643..209903fae 100644 --- a/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml +++ b/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml @@ -11,11 +11,11 @@ metadata: helm.sh/chart: rclone-postgres-backups-external-0.7.0 namespace: cloudnative-pg spec: - suspend: false + suspend: true concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "0 6 * * 1" + schedule: "0 6 * * 6" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: @@ -40,7 +40,7 @@ spec: containers: - args: - delete - - dest:postgres-backups-775957147abfbc73 + - dest:postgres-backups-ecc1010276b61716 - --min-age - 45d - --verbose @@ -48,29 +48,29 @@ spec: - name: RCLONE_CONFIG_DEST_TYPE value: s3 - name: RCLONE_CONFIG_DEST_PROVIDER - value: Other + value: DigitalOcean - name: RCLONE_CONFIG_DEST_ENV_AUTH value: "false" - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID valueFrom: secretKeyRef: key: ACCESS_KEY_ID - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: ACCESS_SECRET_KEY - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_REGION valueFrom: secretKeyRef: key: ACCESS_REGION - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_ENDPOINT valueFrom: secretKeyRef: key: DEST_ENDPOINT - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE value: "true" image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc @@ -78,8 +78,8 @@ spec: name: prune - args: - sync - - src:postgres-backups - - dest:postgres-backups-775957147abfbc73 + - src:openbao-backups + - dest:postgres-backups-ecc1010276b61716 - --s3-no-check-bucket - --max-age - 45d @@ -101,50 +101,50 @@ spec: valueFrom: secretKeyRef: key: ACCESS_KEY_ID - name: postgres-backups-rclone-source-config + name: openbao-backups-rclone-source-config - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: ACCESS_SECRET_KEY - name: postgres-backups-rclone-source-config + name: openbao-backups-rclone-source-config - name: RCLONE_CONFIG_SRC_REGION valueFrom: secretKeyRef: key: ACCESS_REGION - name: postgres-backups-rclone-source-config + name: openbao-backups-rclone-source-config - name: RCLONE_CONFIG_SRC_ENDPOINT valueFrom: secretKeyRef: key: SRC_ENDPOINT - name: postgres-backups-rclone-source-config + name: openbao-backups-rclone-source-config - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE value: "true" - name: RCLONE_CONFIG_DEST_TYPE value: s3 - name: RCLONE_CONFIG_DEST_PROVIDER - value: Other + value: DigitalOcean - name: RCLONE_CONFIG_DEST_ENV_AUTH value: "false" - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID valueFrom: secretKeyRef: key: ACCESS_KEY_ID - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: ACCESS_SECRET_KEY - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_REGION valueFrom: secretKeyRef: key: ACCESS_REGION - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_ENDPOINT valueFrom: secretKeyRef: key: DEST_ENDPOINT - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE value: "true" image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc diff --git a/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml b/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml index 9fd3fe92d..76b0a9cb8 100644 --- a/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml +++ b/clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "30 6 * * 1" + schedule: "0 6 * * 6" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: diff --git a/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-openbao-backups-rclone-source-config.yaml b/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-openbao-backups-rclone-source-config.yaml new file mode 100644 index 000000000..5c91ed664 --- /dev/null +++ b/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-openbao-backups-rclone-source-config.yaml @@ -0,0 +1,33 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: openbao-backups-rclone-source-config + namespace: cloudnative-pg + labels: + helm.sh/chart: rclone-postgres-backups-external-0.7.0 + app.kubernetes.io/instance: cloudnative-pg + app.kubernetes.io/part-of: cloudnative-pg + app.kubernetes.io/version: "0.7.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: openbao-backups-rclone-source-config +spec: + secretStoreRef: + kind: ClusterSecretStore + name: openbao + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + key: /garage/home-infra/postgres-backups + property: ACCESS_KEY_ID + - secretKey: ACCESS_SECRET_KEY + remoteRef: + key: /garage/home-infra/postgres-backups + property: ACCESS_SECRET_KEY + - secretKey: ACCESS_REGION + remoteRef: + key: /garage/home-infra/postgres-backups + property: ACCESS_REGION + - secretKey: SRC_ENDPOINT + remoteRef: + key: /garage/config + property: ENDPOINT_LOCAL diff --git a/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-775957147abfbc73-rclone-destination-config.yaml b/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-ecc1010276b61716-rclone-destination-config.yaml similarity index 69% rename from clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-775957147abfbc73-rclone-destination-config.yaml rename to clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-ecc1010276b61716-rclone-destination-config.yaml index e0e668c56..25e7779d7 100644 --- a/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-775957147abfbc73-rclone-destination-config.yaml +++ b/clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-ecc1010276b61716-rclone-destination-config.yaml @@ -1,7 +1,7 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: postgres-backups-775957147abfbc73-rclone-destination-config + name: postgres-backups-ecc1010276b61716-rclone-destination-config namespace: cloudnative-pg labels: helm.sh/chart: rclone-postgres-backups-external-0.7.0 @@ -9,7 +9,7 @@ metadata: app.kubernetes.io/part-of: cloudnative-pg app.kubernetes.io/version: "0.7.0" app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: postgres-backups-775957147abfbc73-rclone-destination-config + app.kubernetes.io/name: postgres-backups-ecc1010276b61716-rclone-destination-config spec: secretStoreRef: kind: ClusterSecretStore @@ -17,17 +17,17 @@ spec: data: - secretKey: ACCESS_KEY_ID remoteRef: - key: /backblaze/home-infra/postgres-backups + key: /digital-ocean/home-infra/postgres-backups property: AWS_ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: - key: /backblaze/home-infra/postgres-backups + key: /digital-ocean/home-infra/postgres-backups property: AWS_SECRET_ACCESS_KEY - secretKey: ACCESS_REGION remoteRef: - key: /backblaze/home-infra/postgres-backups + key: /digital-ocean/home-infra/postgres-backups property: AWS_REGION - secretKey: DEST_ENDPOINT remoteRef: - key: /backblaze/config + key: /digital-ocean/config property: ENDPOINT diff --git a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml b/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml deleted file mode 100644 index 866c37427..000000000 --- a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml +++ /dev/null @@ -1,108 +0,0 @@ -apiVersion: batch/v1 -kind: CronJob -metadata: - name: directus-directus-assets-external-rclone - labels: - app.kubernetes.io/controller: main - app.kubernetes.io/instance: directus - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: directus-assets-external-rclone - app.kubernetes.io/version: v1.74.0 - helm.sh/chart: rclone-directus-assets-external-0.7.0 - namespace: directus -spec: - suspend: false - concurrencyPolicy: Forbid - startingDeadlineSeconds: 30 - timeZone: America/Chicago - schedule: "0 6 * * 2" - successfulJobsHistoryLimit: 1 - failedJobsHistoryLimit: 1 - jobTemplate: - spec: - parallelism: 1 - backoffLimit: 3 - template: - metadata: - labels: - app.kubernetes.io/controller: main - app.kubernetes.io/instance: directus - app.kubernetes.io/name: directus-assets-external-rclone - spec: - enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true - hostIPC: false - hostNetwork: false - hostPID: false - dnsPolicy: ClusterFirst - restartPolicy: Never - containers: - - args: - - sync - - src:directus-assets - - dest:directus-assets-37363a16b71dc59b - - --s3-no-check-bucket - - --verbose - env: - - name: RCLONE_S3_PROVIDER - value: Other - - name: RCLONE_CONFIG_SRC_TYPE - value: s3 - - name: RCLONE_CONFIG_SRC_PROVIDER - value: Other - - name: RCLONE_CONFIG_SRC_ENV_AUTH - value: "false" - - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - key: ACCESS_KEY_ID - name: directus-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - key: ACCESS_SECRET_KEY - name: directus-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_REGION - valueFrom: - secretKeyRef: - key: ACCESS_REGION - name: directus-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_ENDPOINT - valueFrom: - secretKeyRef: - key: SRC_ENDPOINT - name: directus-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE - value: "true" - - name: RCLONE_CONFIG_DEST_TYPE - value: s3 - - name: RCLONE_CONFIG_DEST_PROVIDER - value: Other - - name: RCLONE_CONFIG_DEST_ENV_AUTH - value: "false" - - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - key: ACCESS_KEY_ID - name: directus-assets-37363a16b71dc59b-rclone-destination-config - - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - key: ACCESS_SECRET_KEY - name: directus-assets-37363a16b71dc59b-rclone-destination-config - - name: RCLONE_CONFIG_DEST_REGION - valueFrom: - secretKeyRef: - key: ACCESS_REGION - name: directus-assets-37363a16b71dc59b-rclone-destination-config - - name: RCLONE_CONFIG_DEST_ENDPOINT - valueFrom: - secretKeyRef: - key: DEST_ENDPOINT - name: directus-assets-37363a16b71dc59b-rclone-destination-config - - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE - value: "true" - image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc - imagePullPolicy: IfNotPresent - name: sync diff --git a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml b/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-rclone.yaml similarity index 95% rename from clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml rename to clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-rclone.yaml index 01118ab8c..35a249efa 100644 --- a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml +++ b/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-rclone.yaml @@ -1,12 +1,12 @@ apiVersion: batch/v1 kind: CronJob metadata: - name: directus-directus-assets-remote-rclone + name: directus-directus-assets-rclone labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: directus app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: directus-assets-remote-rclone + app.kubernetes.io/name: directus-assets-rclone app.kubernetes.io/version: v1.74.0 helm.sh/chart: rclone-directus-assets-remote-0.7.0 namespace: directus @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "30 6 * * 2" + schedule: "0 0 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: @@ -27,7 +27,7 @@ spec: labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: directus - app.kubernetes.io/name: directus-assets-remote-rclone + app.kubernetes.io/name: directus-assets-rclone spec: enableServiceLinks: false serviceAccountName: default diff --git a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-assets-37363a16b71dc59b-rclone-destination-config.yaml b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-assets-37363a16b71dc59b-rclone-destination-config.yaml deleted file mode 100644 index 42df14c31..000000000 --- a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-assets-37363a16b71dc59b-rclone-destination-config.yaml +++ /dev/null @@ -1,33 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: directus-assets-37363a16b71dc59b-rclone-destination-config - namespace: directus - labels: - helm.sh/chart: rclone-directus-assets-external-0.7.0 - app.kubernetes.io/instance: directus - app.kubernetes.io/part-of: directus - app.kubernetes.io/version: "0.7.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: directus-assets-37363a16b71dc59b-rclone-destination-config -spec: - secretStoreRef: - kind: ClusterSecretStore - name: openbao - data: - - secretKey: ACCESS_KEY_ID - remoteRef: - key: /backblaze/home-infra/directus-assets - property: ACCESS_KEY_ID - - secretKey: ACCESS_SECRET_KEY - remoteRef: - key: /backblaze/home-infra/directus-assets - property: ACCESS_SECRET_KEY - - secretKey: ACCESS_REGION - remoteRef: - key: /backblaze/home-infra/directus-assets - property: ACCESS_REGION - - secretKey: DEST_ENDPOINT - remoteRef: - key: /backblaze/config - property: ENDPOINT diff --git a/clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml b/clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml index 3244cb3e5..6af17820c 100644 --- a/clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml +++ b/clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml @@ -54,7 +54,7 @@ spec: terminationGracePeriodSeconds: 120 containers: - name: registry - image: goharbor/registry-photon:v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e + image: goharbor/registry-photon:v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6 imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml index c15b0233a..6f293f1f1 100644 --- a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml +++ b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml @@ -57,7 +57,7 @@ spec: - env: - name: TZ value: America/Chicago - image: ghcr.io/home-assistant/home-assistant:2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2 + image: ghcr.io/home-assistant/home-assistant:2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a name: main resources: requests: diff --git a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml deleted file mode 100644 index e97ed8a95..000000000 --- a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml +++ /dev/null @@ -1,108 +0,0 @@ -apiVersion: batch/v1 -kind: CronJob -metadata: - name: karakeep-karakeep-assets-external-rclone - labels: - app.kubernetes.io/controller: main - app.kubernetes.io/instance: karakeep - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: karakeep-assets-external-rclone - app.kubernetes.io/version: v1.74.0 - helm.sh/chart: rclone-karakeep-assets-external-0.7.0 - namespace: karakeep -spec: - suspend: false - concurrencyPolicy: Forbid - startingDeadlineSeconds: 30 - timeZone: America/Chicago - schedule: "0 6 * * 3" - successfulJobsHistoryLimit: 1 - failedJobsHistoryLimit: 1 - jobTemplate: - spec: - parallelism: 1 - backoffLimit: 3 - template: - metadata: - labels: - app.kubernetes.io/controller: main - app.kubernetes.io/instance: karakeep - app.kubernetes.io/name: karakeep-assets-external-rclone - spec: - enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true - hostIPC: false - hostNetwork: false - hostPID: false - dnsPolicy: ClusterFirst - restartPolicy: Never - containers: - - args: - - sync - - src:karakeep-assets - - dest:karakeep-assets-bcb0bc04dac3e3fd - - --s3-no-check-bucket - - --verbose - env: - - name: RCLONE_S3_PROVIDER - value: Other - - name: RCLONE_CONFIG_SRC_TYPE - value: s3 - - name: RCLONE_CONFIG_SRC_PROVIDER - value: Other - - name: RCLONE_CONFIG_SRC_ENV_AUTH - value: "false" - - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - key: ACCESS_KEY_ID - name: karakeep-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - key: ACCESS_SECRET_KEY - name: karakeep-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_REGION - valueFrom: - secretKeyRef: - key: ACCESS_REGION - name: karakeep-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_ENDPOINT - valueFrom: - secretKeyRef: - key: SRC_ENDPOINT - name: karakeep-assets-rclone-source-config - - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE - value: "true" - - name: RCLONE_CONFIG_DEST_TYPE - value: s3 - - name: RCLONE_CONFIG_DEST_PROVIDER - value: Other - - name: RCLONE_CONFIG_DEST_ENV_AUTH - value: "false" - - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - key: ACCESS_KEY_ID - name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config - - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - key: ACCESS_SECRET_KEY - name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config - - name: RCLONE_CONFIG_DEST_REGION - valueFrom: - secretKeyRef: - key: ACCESS_REGION - name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config - - name: RCLONE_CONFIG_DEST_ENDPOINT - valueFrom: - secretKeyRef: - key: DEST_ENDPOINT - name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config - - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE - value: "true" - image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc - imagePullPolicy: IfNotPresent - name: sync diff --git a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml index a35870137..028942dd8 100644 --- a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml +++ b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "30 6 * * 3" + schedule: "10 0 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: diff --git a/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config.yaml b/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config.yaml deleted file mode 100644 index bfbc24d14..000000000 --- a/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config.yaml +++ /dev/null @@ -1,33 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config - namespace: karakeep - labels: - helm.sh/chart: rclone-karakeep-assets-external-0.7.0 - app.kubernetes.io/instance: karakeep - app.kubernetes.io/part-of: karakeep - app.kubernetes.io/version: "0.7.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config -spec: - secretStoreRef: - kind: ClusterSecretStore - name: openbao - data: - - secretKey: ACCESS_KEY_ID - remoteRef: - key: /backblaze/home-infra/karakeep-assets - property: ACCESS_KEY_ID - - secretKey: ACCESS_SECRET_KEY - remoteRef: - key: /backblaze/home-infra/karakeep-assets - property: ACCESS_SECRET_KEY - - secretKey: ACCESS_REGION - remoteRef: - key: /backblaze/home-infra/karakeep-assets - property: ACCESS_REGION - - secretKey: DEST_ENDPOINT - remoteRef: - key: /backblaze/config - property: ENDPOINT diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml index 5aa68b231..6dd5be442 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml @@ -73,7 +73,7 @@ spec: secretKeyRef: name: matrix-synapse-valkey-config key: password - image: "ghcr.io/element-hq/synapse:v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c" + image: "ghcr.io/element-hq/synapse:v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297" imagePullPolicy: IfNotPresent securityContext: {} ports: diff --git a/clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml b/clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml index da5174979..6d7251dc2 100644 --- a/clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml +++ b/clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "0 1 * * *" + schedule: "50 0 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: diff --git a/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml b/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml index 44018fdea..d45be809a 100644 --- a/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml +++ b/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "0 6 * * 4" + schedule: "10 1 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: diff --git a/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml b/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml index 6e1de331e..74c897509 100644 --- a/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml +++ b/clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "30 6 * * 4" + schedule: "0 1 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: diff --git a/clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-770aef58c931fcf4-rclone.yaml b/clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-rclone.yaml similarity index 86% rename from clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-770aef58c931fcf4-rclone.yaml rename to clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-rclone.yaml index ae76247a5..355e03fe5 100644 --- a/clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-770aef58c931fcf4-rclone.yaml +++ b/clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-rclone.yaml @@ -1,12 +1,12 @@ apiVersion: batch/v1 kind: CronJob metadata: - name: rclone-web-assets-770aef58c931fcf4-rclone + name: rclone-web-assets-rclone labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: rclone app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone + app.kubernetes.io/name: web-assets-rclone app.kubernetes.io/version: v1.74.0 helm.sh/chart: rclone-web-assets-remote-0.7.0 namespace: rclone @@ -15,7 +15,7 @@ spec: concurrencyPolicy: Forbid startingDeadlineSeconds: 30 timeZone: America/Chicago - schedule: "0 6 * * 6" + schedule: "30 0 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 jobTemplate: @@ -27,7 +27,7 @@ spec: labels: app.kubernetes.io/controller: main app.kubernetes.io/instance: rclone - app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone + app.kubernetes.io/name: web-assets-rclone spec: enableServiceLinks: false serviceAccountName: default @@ -40,7 +40,7 @@ spec: containers: - args: - sync - - src:web-assets-770aef58c931fcf4 + - src:web-assets - dest:web-assets - --s3-no-check-bucket - --verbose @@ -57,22 +57,22 @@ spec: valueFrom: secretKeyRef: key: ACCESS_KEY_ID - name: web-assets-770aef58c931fcf4-rclone-source-config + name: web-assets-rclone-source-config - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: ACCESS_SECRET_KEY - name: web-assets-770aef58c931fcf4-rclone-source-config + name: web-assets-rclone-source-config - name: RCLONE_CONFIG_SRC_REGION valueFrom: secretKeyRef: key: ACCESS_REGION - name: web-assets-770aef58c931fcf4-rclone-source-config + name: web-assets-rclone-source-config - name: RCLONE_CONFIG_SRC_ENDPOINT valueFrom: secretKeyRef: key: SRC_ENDPOINT - name: web-assets-770aef58c931fcf4-rclone-source-config + name: web-assets-rclone-source-config - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE value: "true" - name: RCLONE_CONFIG_DEST_TYPE diff --git a/clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-770aef58c931fcf4-rclone-source-config.yaml b/clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-rclone-source-config.yaml similarity index 56% rename from clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-770aef58c931fcf4-rclone-source-config.yaml rename to clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-rclone-source-config.yaml index ef1289dc8..2443228ca 100644 --- a/clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-770aef58c931fcf4-rclone-source-config.yaml +++ b/clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-rclone-source-config.yaml @@ -1,7 +1,7 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: web-assets-770aef58c931fcf4-rclone-source-config + name: web-assets-rclone-source-config namespace: rclone labels: helm.sh/chart: rclone-web-assets-remote-0.7.0 @@ -9,7 +9,7 @@ metadata: app.kubernetes.io/part-of: rclone app.kubernetes.io/version: "0.7.0" app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone-source-config + app.kubernetes.io/name: web-assets-rclone-source-config spec: secretStoreRef: kind: ClusterSecretStore @@ -17,17 +17,17 @@ spec: data: - secretKey: ACCESS_KEY_ID remoteRef: - key: /backblaze/home-infra/web-assets - property: AWS_ACCESS_KEY_ID + key: /garage/home-infra/web-assets + property: ACCESS_KEY_ID - secretKey: ACCESS_SECRET_KEY remoteRef: - key: /backblaze/home-infra/web-assets - property: AWS_SECRET_ACCESS_KEY + key: /garage/home-infra/web-assets + property: ACCESS_SECRET_KEY - secretKey: ACCESS_REGION remoteRef: - key: /backblaze/home-infra/web-assets - property: AWS_REGION + key: /garage/home-infra/web-assets + property: ACCESS_REGION - secretKey: SRC_ENDPOINT remoteRef: - key: /backblaze/config - property: ENDPOINT + key: /garage/config + property: ENDPOINT_LOCAL