chore: Update manifests after change

clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml

@@ -11,11 +11,11 @@ metadata:
     helm.sh/chart: rclone-postgres-backups-external-0.7.0
   namespace: cloudnative-pg
 spec:
-  suspend: false
+  suspend: true
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "0 6 * * 1"
+  schedule: "0 6 * * 6"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:
@@ -40,7 +40,7 @@ spec:
           containers:
             - args:
                 - delete
-                - dest:postgres-backups-775957147abfbc73
+                - dest:postgres-backups-ecc1010276b61716
                 - --min-age
                 - 45d
                 - --verbose
@@ -48,29 +48,29 @@ spec:
                 - name: RCLONE_CONFIG_DEST_TYPE
                   value: s3
                 - name: RCLONE_CONFIG_DEST_PROVIDER
-                  value: Other
+                  value: DigitalOcean
                 - name: RCLONE_CONFIG_DEST_ENV_AUTH
                   value: "false"
                 - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_KEY_ID
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_SECRET_KEY
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_REGION
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_REGION
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_ENDPOINT
                   valueFrom:
                     secretKeyRef:
                       key: DEST_ENDPOINT
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
                   value: "true"
               image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
@@ -78,8 +78,8 @@ spec:
               name: prune
             - args:
                 - sync
-                - src:postgres-backups
+                - src:openbao-backups
-                - dest:postgres-backups-775957147abfbc73
+                - dest:postgres-backups-ecc1010276b61716
                 - --s3-no-check-bucket
                 - --max-age
                 - 45d
@@ -101,50 +101,50 @@ spec:
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_KEY_ID
-                      name: postgres-backups-rclone-source-config
+                      name: openbao-backups-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_SECRET_KEY
-                      name: postgres-backups-rclone-source-config
+                      name: openbao-backups-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_REGION
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_REGION
-                      name: postgres-backups-rclone-source-config
+                      name: openbao-backups-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_ENDPOINT
                   valueFrom:
                     secretKeyRef:
                       key: SRC_ENDPOINT
-                      name: postgres-backups-rclone-source-config
+                      name: openbao-backups-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
                   value: "true"
                 - name: RCLONE_CONFIG_DEST_TYPE
                   value: s3
                 - name: RCLONE_CONFIG_DEST_PROVIDER
-                  value: Other
+                  value: DigitalOcean
                 - name: RCLONE_CONFIG_DEST_ENV_AUTH
                   value: "false"
                 - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_KEY_ID
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_SECRET_KEY
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_REGION
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_REGION
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_ENDPOINT
                   valueFrom:
                     secretKeyRef:
                       key: DEST_ENDPOINT
-                      name: postgres-backups-775957147abfbc73-rclone-destination-config
+                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                 - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
                   value: "true"
               image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc

clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml

@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "30 6 * * 1"
+  schedule: "0 6 * * 6"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:

clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-openbao-backups-rclone-source-config.yaml

@@ -0,0 +1,33 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: openbao-backups-rclone-source-config
+  namespace: cloudnative-pg
+  labels:
+    helm.sh/chart: rclone-postgres-backups-external-0.7.0
+    app.kubernetes.io/instance: cloudnative-pg
+    app.kubernetes.io/part-of: cloudnative-pg
+    app.kubernetes.io/version: "0.7.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: openbao-backups-rclone-source-config
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        key: /garage/home-infra/postgres-backups
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        key: /garage/home-infra/postgres-backups
+        property: ACCESS_SECRET_KEY
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        key: /garage/home-infra/postgres-backups
+        property: ACCESS_REGION
+    - secretKey: SRC_ENDPOINT
+      remoteRef:
+        key: /garage/config
+        property: ENDPOINT_LOCAL

clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-ecc1010276b61716-rclone-destination-config.yaml

@@ -1,7 +1,7 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: postgres-backups-775957147abfbc73-rclone-destination-config
+  name: postgres-backups-ecc1010276b61716-rclone-destination-config
   namespace: cloudnative-pg
   labels:
     helm.sh/chart: rclone-postgres-backups-external-0.7.0
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/part-of: cloudnative-pg
     app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: postgres-backups-775957147abfbc73-rclone-destination-config
+    app.kubernetes.io/name: postgres-backups-ecc1010276b61716-rclone-destination-config
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -17,17 +17,17 @@ spec:
   data:
     - secretKey: ACCESS_KEY_ID
       remoteRef:
-        key: /backblaze/home-infra/postgres-backups
+        key: /digital-ocean/home-infra/postgres-backups
         property: AWS_ACCESS_KEY_ID
     - secretKey: ACCESS_SECRET_KEY
       remoteRef:
-        key: /backblaze/home-infra/postgres-backups
+        key: /digital-ocean/home-infra/postgres-backups
         property: AWS_SECRET_ACCESS_KEY
     - secretKey: ACCESS_REGION
       remoteRef:
-        key: /backblaze/home-infra/postgres-backups
+        key: /digital-ocean/home-infra/postgres-backups
         property: AWS_REGION
     - secretKey: DEST_ENDPOINT
       remoteRef:
-        key: /backblaze/config
+        key: /digital-ocean/config
         property: ENDPOINT

clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml

@@ -1,108 +0,0 @@
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: directus-directus-assets-external-rclone
-  labels:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: directus-assets-external-rclone
-    app.kubernetes.io/version: v1.74.0
-    helm.sh/chart: rclone-directus-assets-external-0.7.0
-  namespace: directus
-spec:
-  suspend: false
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 30
-  timeZone: America/Chicago
-  schedule: "0 6 * * 2"
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 1
-  jobTemplate:
-    spec:
-      parallelism: 1
-      backoffLimit: 3
-      template:
-        metadata:
-          labels:
-            app.kubernetes.io/controller: main
-            app.kubernetes.io/instance: directus
-            app.kubernetes.io/name: directus-assets-external-rclone
-        spec:
-          enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
-          hostIPC: false
-          hostNetwork: false
-          hostPID: false
-          dnsPolicy: ClusterFirst
-          restartPolicy: Never
-          containers:
-            - args:
-                - sync
-                - src:directus-assets
-                - dest:directus-assets-37363a16b71dc59b
-                - --s3-no-check-bucket
-                - --verbose
-              env:
-                - name: RCLONE_S3_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_SRC_TYPE
-                  value: s3
-                - name: RCLONE_CONFIG_SRC_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_SRC_ENV_AUTH
-                  value: "false"
-                - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_KEY_ID
-                      name: directus-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_SECRET_KEY
-                      name: directus-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_REGION
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_REGION
-                      name: directus-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_ENDPOINT
-                  valueFrom:
-                    secretKeyRef:
-                      key: SRC_ENDPOINT
-                      name: directus-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
-                  value: "true"
-                - name: RCLONE_CONFIG_DEST_TYPE
-                  value: s3
-                - name: RCLONE_CONFIG_DEST_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_DEST_ENV_AUTH
-                  value: "false"
-                - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_KEY_ID
-                      name: directus-assets-37363a16b71dc59b-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_SECRET_KEY
-                      name: directus-assets-37363a16b71dc59b-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_REGION
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_REGION
-                      name: directus-assets-37363a16b71dc59b-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_ENDPOINT
-                  valueFrom:
-                    secretKeyRef:
-                      key: DEST_ENDPOINT
-                      name: directus-assets-37363a16b71dc59b-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
-                  value: "true"
-              image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
-              imagePullPolicy: IfNotPresent
-              name: sync

clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-rclone.yaml

@@ -1,12 +1,12 @@
 apiVersion: batch/v1
 kind: CronJob
 metadata:
-  name: directus-directus-assets-remote-rclone
+  name: directus-directus-assets-rclone
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: directus
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: directus-assets-remote-rclone
+    app.kubernetes.io/name: directus-assets-rclone
     app.kubernetes.io/version: v1.74.0
     helm.sh/chart: rclone-directus-assets-remote-0.7.0
   namespace: directus
@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "30 6 * * 2"
+  schedule: "0 0 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:
@@ -27,7 +27,7 @@ spec:
           labels:
             app.kubernetes.io/controller: main
             app.kubernetes.io/instance: directus
-            app.kubernetes.io/name: directus-assets-remote-rclone
+            app.kubernetes.io/name: directus-assets-rclone
         spec:
           enableServiceLinks: false
           serviceAccountName: default

clusters/cl01tl/manifests/directus/ExternalSecret-directus-assets-37363a16b71dc59b-rclone-destination-config.yaml

@@ -1,33 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-assets-37363a16b71dc59b-rclone-destination-config
-  namespace: directus
-  labels:
-    helm.sh/chart: rclone-directus-assets-external-0.7.0
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "0.7.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: directus-assets-37363a16b71dc59b-rclone-destination-config
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        key: /backblaze/home-infra/directus-assets
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        key: /backblaze/home-infra/directus-assets
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        key: /backblaze/home-infra/directus-assets
-        property: ACCESS_REGION
-    - secretKey: DEST_ENDPOINT
-      remoteRef:
-        key: /backblaze/config
-        property: ENDPOINT

clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml

@@ -54,7 +54,7 @@ spec:
       terminationGracePeriodSeconds: 120
       containers:
         - name: registry
-          image: goharbor/registry-photon:v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
+          image: goharbor/registry-photon:v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
           imagePullPolicy: IfNotPresent
           livenessProbe:
             httpGet:

clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml

@@ -57,7 +57,7 @@ spec:
         - env:
             - name: TZ
               value: America/Chicago
-          image: ghcr.io/home-assistant/home-assistant:2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
+          image: ghcr.io/home-assistant/home-assistant:2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
           name: main
           resources:
             requests:

clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml

@@ -1,108 +0,0 @@
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: karakeep-karakeep-assets-external-rclone
-  labels:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: karakeep
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: karakeep-assets-external-rclone
-    app.kubernetes.io/version: v1.74.0
-    helm.sh/chart: rclone-karakeep-assets-external-0.7.0
-  namespace: karakeep
-spec:
-  suspend: false
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 30
-  timeZone: America/Chicago
-  schedule: "0 6 * * 3"
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 1
-  jobTemplate:
-    spec:
-      parallelism: 1
-      backoffLimit: 3
-      template:
-        metadata:
-          labels:
-            app.kubernetes.io/controller: main
-            app.kubernetes.io/instance: karakeep
-            app.kubernetes.io/name: karakeep-assets-external-rclone
-        spec:
-          enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
-          hostIPC: false
-          hostNetwork: false
-          hostPID: false
-          dnsPolicy: ClusterFirst
-          restartPolicy: Never
-          containers:
-            - args:
-                - sync
-                - src:karakeep-assets
-                - dest:karakeep-assets-bcb0bc04dac3e3fd
-                - --s3-no-check-bucket
-                - --verbose
-              env:
-                - name: RCLONE_S3_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_SRC_TYPE
-                  value: s3
-                - name: RCLONE_CONFIG_SRC_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_SRC_ENV_AUTH
-                  value: "false"
-                - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_KEY_ID
-                      name: karakeep-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_SECRET_KEY
-                      name: karakeep-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_REGION
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_REGION
-                      name: karakeep-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_ENDPOINT
-                  valueFrom:
-                    secretKeyRef:
-                      key: SRC_ENDPOINT
-                      name: karakeep-assets-rclone-source-config
-                - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
-                  value: "true"
-                - name: RCLONE_CONFIG_DEST_TYPE
-                  value: s3
-                - name: RCLONE_CONFIG_DEST_PROVIDER
-                  value: Other
-                - name: RCLONE_CONFIG_DEST_ENV_AUTH
-                  value: "false"
-                - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_KEY_ID
-                      name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_SECRET_KEY
-                      name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_REGION
-                  valueFrom:
-                    secretKeyRef:
-                      key: ACCESS_REGION
-                      name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_ENDPOINT
-                  valueFrom:
-                    secretKeyRef:
-                      key: DEST_ENDPOINT
-                      name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-                - name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
-                  value: "true"
-              image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
-              imagePullPolicy: IfNotPresent
-              name: sync

clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml

@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "30 6 * * 3"
+  schedule: "10 0 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config.yaml

@@ -1,33 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-  namespace: karakeep
-  labels:
-    helm.sh/chart: rclone-karakeep-assets-external-0.7.0
-    app.kubernetes.io/instance: karakeep
-    app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.7.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        key: /backblaze/home-infra/karakeep-assets
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        key: /backblaze/home-infra/karakeep-assets
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        key: /backblaze/home-infra/karakeep-assets
-        property: ACCESS_REGION
-    - secretKey: DEST_ENDPOINT
-      remoteRef:
-        key: /backblaze/config
-        property: ENDPOINT

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml

@@ -73,7 +73,7 @@ spec:
                 secretKeyRef:
                   name: matrix-synapse-valkey-config
                   key: password
-          image: "ghcr.io/element-hq/synapse:v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c"
+          image: "ghcr.io/element-hq/synapse:v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297"
           imagePullPolicy: IfNotPresent
           securityContext: {}
           ports:

clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml

@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "0 1 * * *"
+  schedule: "50 0 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:

clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml

@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "0 6 * * 4"
+  schedule: "10 1 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:

clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml

@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "30 6 * * 4"
+  schedule: "0 1 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:

clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-rclone.yaml

@@ -1,12 +1,12 @@
 apiVersion: batch/v1
 kind: CronJob
 metadata:
-  name: rclone-web-assets-770aef58c931fcf4-rclone
+  name: rclone-web-assets-rclone
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: rclone
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone
+    app.kubernetes.io/name: web-assets-rclone
     app.kubernetes.io/version: v1.74.0
     helm.sh/chart: rclone-web-assets-remote-0.7.0
   namespace: rclone
@@ -15,7 +15,7 @@ spec:
   concurrencyPolicy: Forbid
   startingDeadlineSeconds: 30
   timeZone: America/Chicago
-  schedule: "0 6 * * 6"
+  schedule: "30 0 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
   jobTemplate:
@@ -27,7 +27,7 @@ spec:
           labels:
             app.kubernetes.io/controller: main
             app.kubernetes.io/instance: rclone
-            app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone
+            app.kubernetes.io/name: web-assets-rclone
         spec:
           enableServiceLinks: false
           serviceAccountName: default
@@ -40,7 +40,7 @@ spec:
           containers:
             - args:
                 - sync
-                - src:web-assets-770aef58c931fcf4
+                - src:web-assets
                 - dest:web-assets
                 - --s3-no-check-bucket
                 - --verbose
@@ -57,22 +57,22 @@ spec:
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_KEY_ID
-                      name: web-assets-770aef58c931fcf4-rclone-source-config
+                      name: web-assets-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_SECRET_KEY
-                      name: web-assets-770aef58c931fcf4-rclone-source-config
+                      name: web-assets-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_REGION
                   valueFrom:
                     secretKeyRef:
                       key: ACCESS_REGION
-                      name: web-assets-770aef58c931fcf4-rclone-source-config
+                      name: web-assets-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_ENDPOINT
                   valueFrom:
                     secretKeyRef:
                       key: SRC_ENDPOINT
-                      name: web-assets-770aef58c931fcf4-rclone-source-config
+                      name: web-assets-rclone-source-config
                 - name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
                   value: "true"
                 - name: RCLONE_CONFIG_DEST_TYPE

clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-rclone-source-config.yaml

@@ -1,7 +1,7 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: web-assets-770aef58c931fcf4-rclone-source-config
+  name: web-assets-rclone-source-config
   namespace: rclone
   labels:
     helm.sh/chart: rclone-web-assets-remote-0.7.0
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/part-of: rclone
     app.kubernetes.io/version: "0.7.0"
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone-source-config
+    app.kubernetes.io/name: web-assets-rclone-source-config
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -17,17 +17,17 @@ spec:
   data:
     - secretKey: ACCESS_KEY_ID
       remoteRef:
-        key: /backblaze/home-infra/web-assets
+        key: /garage/home-infra/web-assets
-        property: AWS_ACCESS_KEY_ID
+        property: ACCESS_KEY_ID
     - secretKey: ACCESS_SECRET_KEY
       remoteRef:
-        key: /backblaze/home-infra/web-assets
+        key: /garage/home-infra/web-assets
-        property: AWS_SECRET_ACCESS_KEY
+        property: ACCESS_SECRET_KEY
     - secretKey: ACCESS_REGION
       remoteRef:
-        key: /backblaze/home-infra/web-assets
+        key: /garage/home-infra/web-assets
-        property: AWS_REGION
+        property: ACCESS_REGION
     - secretKey: SRC_ENDPOINT
       remoteRef:
-        key: /backblaze/config
+        key: /garage/config
-        property: ENDPOINT
+        property: ENDPOINT_LOCAL