chore: Update manifests after change

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-config-backup-secret-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-config-backup-secret-local
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-config-backup-secret-remote
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-data-backup-secret-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-data-backup-secret-local
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: backrest-data-backup-secret-remote
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/backrest/backrest-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-config-backup-source-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup
 spec:

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-config-backup-source-local
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup
 spec:

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-config-backup-source-remote
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-config-backup
 spec:

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-data-backup-source-external
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup
 spec:

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-data-backup-source-local
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup
 spec:

clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: backrest-data-backup-source-remote
   namespace: backrest
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: backrest
     app.kubernetes.io/part-of: backrest
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: backrest-data-backup
 spec:

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: bazarr-config-backup-secret-external
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/bazarr/bazarr-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: bazarr-config-backup-secret-local
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/bazarr/bazarr-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: bazarr-config-backup-secret-remote
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/bazarr/bazarr-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: bazarr-config-backup-source-external
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup
 spec:

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: bazarr-config-backup-source-local
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup
 spec:

clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: bazarr-config-backup-source-remote
   namespace: bazarr
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: bazarr
     app.kubernetes.io/part-of: bazarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: bazarr-config-backup
 spec:

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-public-backup-secret-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-public"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-public-backup-secret-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-public"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-public-backup-secret-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-public"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-storage-backup-secret-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-storage"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-storage-backup-secret-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-storage"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-storage-backup-secret-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-storage"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-watched-backup-secret-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-watched"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-watched-backup-secret-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-watched"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: dawarich-watched-backup-secret-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/dawarich/dawarich-watched"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-public-backup-source-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-public-backup-source-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-public-backup-source-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-public-0.8.0
+    helm.sh/chart: volsync-target-public-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-public-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-storage-backup-source-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-storage-backup-source-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-storage-backup-source-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-storage-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-watched-backup-source-external
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-watched-backup-source-local
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup
 spec:

clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: dawarich-watched-backup-source-remote
   namespace: dawarich
   labels:
-    helm.sh/chart: volsync-target-watched-0.8.0
+    helm.sh/chart: volsync-target-watched-1.0.0
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-watched-backup
 spec:

clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-db-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: foldergram-db-backup-secret-external
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/foldergram/foldergram-db"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/foldergram/foldergram-db"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-db-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: foldergram-db-backup-secret-local
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/foldergram/foldergram-db"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/foldergram/foldergram-db"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-db-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: foldergram-db-backup-secret-remote
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/foldergram/foldergram-db"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/foldergram/foldergram-db"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/foldergram/ReplicationSource-foldergram-db-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: foldergram-db-backup-source-external
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup
 spec:

clusters/cl01tl/manifests/foldergram/ReplicationSource-foldergram-db-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: foldergram-db-backup-source-local
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup
 spec:

clusters/cl01tl/manifests/foldergram/ReplicationSource-foldergram-db-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: foldergram-db-backup-source-remote
   namespace: foldergram
   labels:
-    helm.sh/chart: volsync-target-db-0.8.0
+    helm.sh/chart: volsync-target-db-1.0.0
     app.kubernetes.io/instance: foldergram
     app.kubernetes.io/part-of: foldergram
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: foldergram-db-backup
 spec:

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: freshrss-data-backup-secret-external
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/freshrss/freshrss-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: freshrss-data-backup-secret-local
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/freshrss/freshrss-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: freshrss-data-backup-secret-remote
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/freshrss/freshrss-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: freshrss-data-backup-source-external
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup
 spec:

clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: freshrss-data-backup-source-local
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup
 spec:

clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: freshrss-data-backup-source-remote
   namespace: freshrss
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-data-backup
 spec:

clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: gatus-backup-secret-external
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gatus/gatus"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/gatus/gatus"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: gatus-backup-secret-local
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gatus/gatus"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/gatus/gatus"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: gatus-backup-secret-remote
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gatus/gatus"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/gatus/gatus"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/gatus/ReplicationSource-gatus-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: gatus-backup-source-external
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup
 spec:

clusters/cl01tl/manifests/gatus/ReplicationSource-gatus-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: gatus-backup-source-local
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup
 spec:

clusters/cl01tl/manifests/gatus/ReplicationSource-gatus-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: gatus-backup-source-remote
   namespace: gatus
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: gatus
     app.kubernetes.io/part-of: gatus
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gatus-backup
 spec:

clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-shared-storage-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: gitea-shared-storage-backup-secret-local
   namespace: gitea
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-shared-storage-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gitea/gitea-shared-storage"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/gitea/gitea-shared-storage"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/gitea/ReplicationSource-gitea-shared-storage-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: gitea-shared-storage-backup-source-local
   namespace: gitea
   labels:
-    helm.sh/chart: volsync-target-storage-0.8.0
+    helm.sh/chart: volsync-target-storage-1.0.0
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-shared-storage-backup
 spec:

clusters/cl01tl/manifests/grimmory/ExternalSecret-grimmory-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: grimmory-config-backup-secret-external
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/grimmory/grimmory-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/grimmory/grimmory-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/grimmory/ExternalSecret-grimmory-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: grimmory-config-backup-secret-local
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/grimmory/grimmory-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/grimmory/grimmory-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/grimmory/ExternalSecret-grimmory-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: grimmory-config-backup-secret-remote
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/grimmory/grimmory-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/grimmory/grimmory-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/grimmory/ReplicationSource-grimmory-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: grimmory-config-backup-source-external
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup
 spec:

clusters/cl01tl/manifests/grimmory/ReplicationSource-grimmory-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: grimmory-config-backup-source-local
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup
 spec:

clusters/cl01tl/manifests/grimmory/ReplicationSource-grimmory-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: grimmory-config-backup-source-remote
   namespace: grimmory
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: grimmory
     app.kubernetes.io/part-of: grimmory
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: grimmory-config-backup
 spec:

clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: home-assistant-config-backup-secret-external
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/home-assistant/home-assistant-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: home-assistant-config-backup-secret-local
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/home-assistant/home-assistant-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: home-assistant-config-backup-secret-remote
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/home-assistant/home-assistant-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: home-assistant-config-backup-source-external
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup
 spec:

clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: home-assistant-config-backup-source-local
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup
 spec:

clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: home-assistant-config-backup-source-remote
   namespace: home-assistant
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: home-assistant
     app.kubernetes.io/part-of: home-assistant
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: home-assistant-config-backup
 spec:

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: houndarr-data-backup-secret-external
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/houndarr/houndarr-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: houndarr-data-backup-secret-local
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/houndarr/houndarr-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: houndarr-data-backup-secret-remote
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/houndarr/houndarr-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: houndarr-data-backup-source-external
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup
 spec:

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: houndarr-data-backup-source-local
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup
 spec:

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: houndarr-data-backup-source-remote
   namespace: houndarr
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: houndarr
     app.kubernetes.io/part-of: houndarr
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: houndarr-data-backup
 spec:

clusters/cl01tl/manifests/immich/ExternalSecret-immich-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: immich-backup-secret-external
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/immich/immich"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/immich/ExternalSecret-immich-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: immich-backup-secret-local
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/immich/immich"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/immich/ExternalSecret-immich-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: immich-backup-secret-remote
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/immich/immich"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: immich-backup-source-external
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup
 spec:

clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: immich-backup-source-local
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup
 spec:

clusters/cl01tl/manifests/immich/ReplicationSource-immich-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: immich-backup-source-remote
   namespace: immich
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: immich
     app.kubernetes.io/part-of: immich
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: immich-backup
 spec:

clusters/cl01tl/manifests/jellyfin/ExternalSecret-jellyfin-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellyfin-config-backup-secret-external
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellyfin/jellyfin-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/jellyfin/ExternalSecret-jellyfin-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellyfin-config-backup-secret-local
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellyfin/jellyfin-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/jellyfin/ExternalSecret-jellyfin-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellyfin-config-backup-secret-remote
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellyfin/jellyfin-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellyfin-config-backup-source-external
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup
 spec:

clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellyfin-config-backup-source-local
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup
 spec:

clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellyfin-config-backup-source-remote
   namespace: jellyfin
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: jellyfin
     app.kubernetes.io/part-of: jellyfin
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellyfin-config-backup
 spec:

clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-data-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellystat-data-backup-secret-external
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellystat/jellystat-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-data-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellystat-data-backup-secret-local
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellystat/jellystat-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-data-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: jellystat-data-backup-secret-remote
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/jellystat/jellystat-data"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellystat-data-backup-source-external
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup
 spec:

clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellystat-data-backup-source-local
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup
 spec:

clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: jellystat-data-backup-source-remote
   namespace: jellystat
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: jellystat
     app.kubernetes.io/part-of: jellystat
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: jellystat-data-backup
 spec:

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: karakeep-backup-secret-external
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/karakeep/karakeep"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: karakeep-backup-secret-local
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/karakeep/karakeep"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: karakeep-backup-secret-remote
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/karakeep/karakeep"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: karakeep-backup-source-external
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup
 spec:

clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: karakeep-backup-source-local
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup
 spec:

clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: karakeep-backup-source-remote
   namespace: karakeep
   labels:
-    helm.sh/chart: volsync-target-data-0.8.0
+    helm.sh/chart: volsync-target-data-1.0.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-backup
 spec:

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-keys-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: komodo-keys-backup-secret-external
   namespace: komodo
   labels:
-    helm.sh/chart: volsync-target-keys-0.8.0
+    helm.sh/chart: volsync-target-keys-1.0.0
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo-keys-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/komodo/komodo-keys"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/komodo/komodo-keys"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-keys-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: komodo-keys-backup-secret-local
   namespace: komodo
   labels:
-    helm.sh/chart: volsync-target-keys-0.8.0
+    helm.sh/chart: volsync-target-keys-1.0.0
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo-keys-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/komodo/komodo-keys"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/komodo/komodo-keys"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY