Merge pull request 'Automated Manifest Update' (#6235) from auto/update-manifests into manifests

Reviewed-on: #6235

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-config-backup-secret-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-config-backup-secret-local
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-config-backup-secret-remote
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-config"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-external.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-metadata-backup-secret-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-external
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-metadata"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/config
-        decodingStrategy: None
+        property: ENDPOINT
-        key: /volsync/restic/digital-ocean
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /digital-ocean/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /digital-ocean/home-infra/volsync-backups
-        decodingStrategy: None
-        key: /volsync/restic/digital-ocean
-        metadataPolicy: None
         property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
+        property: AWS_REGION
-        property: AWS_DEFAULT_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-local.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-metadata-backup-secret-local
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-local
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-metadata"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_LOCAL
-        key: /volsync/restic/garage-local
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_LOCAL
-        key: /volsync/restic/garage-local
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-remote.yaml

@@ -4,55 +4,44 @@ metadata:
   name: audiobookshelf-metadata-backup-secret-remote
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-remote
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   target:
     template:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
+        RESTIC_REPOSITORY: "s3:{{ .ENDPOINT }}/{{ .BUCKET }}/cl01tl/audiobookshelf/audiobookshelf-metadata"
   data:
-    - secretKey: BUCKET_ENDPOINT
+    - secretKey: ENDPOINT
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/config
-        decodingStrategy: None
+        property: ENDPOINT_REMOTE
-        key: /volsync/restic/garage-remote
+    - secretKey: BUCKET
-        metadataPolicy: None
+      remoteRef:
-        property: BUCKET_ENDPOINT
+        key: /garage/home-infra/volsync-backups
+        property: BUCKET
     - secretKey: RESTIC_PASSWORD
       remoteRef:
-        conversionStrategy: Default
+        key: /garage/home-infra/volsync-backups
-        decodingStrategy: None
+        property: RESTIC_PASSWORD_REMOTE
-        key: /volsync/restic/garage-remote
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
     - secretKey: AWS_DEFAULT_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/volsync-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-config-backup-source-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup
 spec:

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-config-backup-source-local
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup
 spec:

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-config-backup-source-remote
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-config-0.8.0
+    helm.sh/chart: volsync-target-config-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-config-backup
 spec:

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-external.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-metadata-backup-source-external
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup
 spec:

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-local.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-metadata-backup-source-local
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup
 spec:

clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-remote.yaml

@@ -4,10 +4,10 @@ metadata:
   name: audiobookshelf-metadata-backup-source-remote
   namespace: audiobookshelf
   labels:
-    helm.sh/chart: volsync-target-metadata-0.8.0
+    helm.sh/chart: volsync-target-metadata-1.0.0
     app.kubernetes.io/instance: audiobookshelf
     app.kubernetes.io/part-of: audiobookshelf
-    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/version: "1.0.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: audiobookshelf-metadata-backup
 spec:

clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.5.0
+    helm.sh/chart: cloudflared-2.6.0
   namespace: authentik
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml

@@ -4,21 +4,18 @@ metadata:
   name: authentik-cloudflared-secret
   namespace: authentik
   labels:
-    helm.sh/chart: cloudflared-2.5.0
+    helm.sh/chart: cloudflared-2.6.0
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "2.5.0"
+    app.kubernetes.io/version: "2.6.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   data:
     - secretKey: cf-tunnel-token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/tunnels/authentik
-        metadataPolicy: None
         property: token

clusters/cl01tl/manifests/dawarich/Cluster-dawarich-postgresql-18-cluster.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: dawarich
   labels:
     app.kubernetes.io/name: dawarich-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-postgresql-18-backup-garage-local-secret.yaml

@@ -5,34 +5,25 @@ metadata:
   namespace: dawarich
   labels:
     app.kubernetes.io/name: dawarich-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   data:
     - secretKey: ACCESS_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: ACCESS_SECRET_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-postgresql-18-recovery-secret.yaml

@@ -4,35 +4,26 @@ metadata:
   name: dawarich-postgresql-18-recovery-secret
   namespace: dawarich
   labels:
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dawarich-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   data:
     - secretKey: ACCESS_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: ACCESS_SECRET_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/dawarich/ObjectStore-dawarich-postgresql-18-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: dawarich
   labels:
     app.kubernetes.io/name: dawarich-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/dawarich/ObjectStore-dawarich-postgresql-18-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "dawarich-postgresql-18-recovery"
   namespace: dawarich
   labels:
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "dawarich-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/dawarich/PrometheusRule-dawarich-postgresql-18-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: dawarich
   labels:
     app.kubernetes.io/name: dawarich-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/dawarich/ScheduledBackup-dawarich-postgresql-18-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: dawarich
   labels:
     app.kubernetes.io/name: "dawarich-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.11.2
+    helm.sh/chart: postgres-18-cluster-7.12.1
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/part-of: dawarich
-    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/version: "7.12.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true