chore: Update manifests after change

clusters/cl01tl/manifests/prowlarr/HTTPRoute-prowlarr.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-prowlarr
+  name: prowlarr
-  namespace: prowlarr
   labels:
-    app.kubernetes.io/name: http-route-prowlarr
     app.kubernetes.io/instance: prowlarr
-    app.kubernetes.io/part-of: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+    helm.sh/chart: prowlarr-4.5.0
+  namespace: prowlarr
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - prowlarr.alexlebens.net
+    - "prowlarr.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: prowlarr
+          namespace: prowlarr
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: prowlarr
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/qbittorrent/HTTPRoute-qbittorrent-main.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-qbittorrent
+  name: qbittorrent-main
-  namespace: qbittorrent
   labels:
-    app.kubernetes.io/name: http-route-qbittorrent
     app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.5.0
+  namespace: qbittorrent
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - qbittorrent.alexlebens.net
+    - "qbittorrent.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: qbittorrent
+          namespace: qbittorrent
+          port: 8080
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: qbittorrent
-          port: 8080
-          weight: 100

clusters/cl01tl/manifests/qbittorrent/HTTPRoute-qbittorrent-qui.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-qui
+  name: qbittorrent-qui
-  namespace: qbittorrent
   labels:
-    app.kubernetes.io/name: http-route-qui
     app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.5.0
+  namespace: qbittorrent
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - qui.alexlebens.net
+    - "qui.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: qbittorrent-qui
+          namespace: qbittorrent
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: qbittorrent-qui
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/qbittorrent/ServiceMonitor-qbittorrent-apprise.yaml

@@ -2,19 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: qbittorrent-apprise
-  namespace: qbittorrent
   labels:
-    app.kubernetes.io/name: qbittorrent-apprise
     app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.5.0
+  namespace: qbittorrent
 spec:
-  endpoints:
+  jobLabel: "qbittorrent-apprise"
-    - port: apprise
+  namespaceSelector:
-      interval: 30s
+    matchNames:
-      scrapeTimeout: 15s
+      - qbittorrent
-      path: /metrics
   selector:
     matchLabels:
-      app.kubernetes.io/service: qbittorrent-qbit-manage
+      app.kubernetes.io/instance: qbittorrent-apprise
-      app.kubernetes.io/name: qbittorrent
+      app.kubernetes.io/name: qbittorrent-apprise
-      app.kubernetes.io/instance: qbittorrent
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: apprise
+      scrapeTimeout: 15s

clusters/cl01tl/manifests/qbittorrent/ServiceMonitor-qbittorrent-main.yaml

@@ -1,20 +1,24 @@
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
-  name: qbittorrent
+  name: qbittorrent-main
-  namespace: qbittorrent
   labels:
-    app.kubernetes.io/name: qbittorrent
     app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.5.0
+  namespace: qbittorrent
 spec:
-  endpoints:
+  jobLabel: "qbittorrent-main"
-    - port: metrics
+  namespaceSelector:
-      interval: 30s
+    matchNames:
-      scrapeTimeout: 15s
+      - qbittorrent
-      path: /metrics
   selector:
     matchLabels:
-      app.kubernetes.io/service: qbittorrent
-      app.kubernetes.io/name: qbittorrent
       app.kubernetes.io/instance: qbittorrent
+      app.kubernetes.io/name: qbittorrent
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: metrics
+      scrapeTimeout: 15s

clusters/cl01tl/manifests/qbittorrent/ServiceMonitor-qbittorrent-qui.yaml

@@ -2,19 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: qbittorrent-qui
-  namespace: qbittorrent
   labels:
-    app.kubernetes.io/name: qbittorrent-qui
     app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/part-of: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.5.0
+  namespace: qbittorrent
 spec:
-  endpoints:
+  jobLabel: "qbittorrent-qui"
-    - port: metrics
+  namespaceSelector:
-      interval: 30s
+    matchNames:
-      scrapeTimeout: 15s
+      - qbittorrent
-      path: /metrics
   selector:
     matchLabels:
-      app.kubernetes.io/service: qbittorrent-qui
+      app.kubernetes.io/instance: qbittorrent-qui
-      app.kubernetes.io/name: qbittorrent
+      app.kubernetes.io/name: qbittorrent-qui
-      app.kubernetes.io/instance: qbittorrent
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: metrics
+      scrapeTimeout: 15s

clusters/cl01tl/manifests/radarr-4k/Cluster-radarr-4k-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-4k-postgresql-18-cluster
   namespace: radarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/radarr-4k/ExternalSecret-radarr-4k-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-4k-postgresql-18-backup-garage-local-secret
+  namespace: radarr-4k
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-4k-postgresql-18
+    app.kubernetes.io/instance: radarr-4k
+    app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-4k/ExternalSecret-radarr-4k-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: radarr-4k-postgresql-18-cluster-backup-secret
-  namespace: radarr-4k
-  labels:
-    app.kubernetes.io/name: radarr-4k-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: radarr-4k
-    app.kubernetes.io/part-of: radarr-4k
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/radarr-4k/ExternalSecret-radarr-4k-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+  name: radarr-4k-postgresql-18-recovery-secret
   namespace: radarr-4k
   labels:
-    app.kubernetes.io/name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/radarr-4k/HTTPRoute-radarr-4k.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-radarr-4k
+  name: radarr-4k
-  namespace: radarr-4k
   labels:
-    app.kubernetes.io/name: http-route-radarr-4k
     app.kubernetes.io/instance: radarr-4k
-    app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k
+    helm.sh/chart: radarr-4k-4.5.0
+  namespace: radarr-4k
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - radarr-4k.alexlebens.net
+    - "radarr-4k.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: radarr-4k
+          namespace: radarr-4k
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: radarr-4k
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/radarr-4k/ObjectStore-radarr-4k-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "radarr-4k-postgresql-18-garage-local-backup"
+  name: radarr-4k-postgresql-18-backup-garage-local
   namespace: radarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr-4k-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: radarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: radarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: radarr-4k-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-4k/ObjectStore-radarr-4k-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "radarr-4k-postgresql-18-recovery"
   namespace: radarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-4k-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr-4k-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: radarr-4k-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-4k-postgresql-18-cluster-backup-secret-garage
+        name: radarr-4k-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: radarr-4k-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-4k/PrometheusRule-radarr-4k-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-4k-postgresql-18-alert-rules
   namespace: radarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/radarr-4k/ScheduledBackup-radarr-4k-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "radarr-4k-postgresql-18-live-backup-scheduled-backup"
+  name: "radarr-4k-postgresql-18-scheduled-backup-live-backup"
   namespace: radarr-4k
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-4k-postgresql-18
     app.kubernetes.io/instance: radarr-4k
     app.kubernetes.io/part-of: radarr-4k
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-4k-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "radarr-4k-postgresql-18-garage-local-backup"
+      barmanObjectName: "radarr-4k-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/radarr-4k/ServiceMonitor-radarr-4k.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: radarr-4k
-  namespace: radarr-4k
   labels:
-    app.kubernetes.io/name: radarr-4k
     app.kubernetes.io/instance: radarr-4k
-    app.kubernetes.io/part-of: radarr-4k
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-4k
+    helm.sh/chart: radarr-4k-4.5.0
+  namespace: radarr-4k
 spec:
+  jobLabel: "radarr-4k"
+  namespaceSelector:
+    matchNames:
+      - radarr-4k
   selector:
     matchLabels:
-      app.kubernetes.io/name: radarr-4k
       app.kubernetes.io/instance: radarr-4k
+      app.kubernetes.io/name: radarr-4k
   endpoints:
-    - port: metrics
+    - interval: 3m
-      interval: 3m
-      scrapeTimeout: 1m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/radarr-anime/Cluster-radarr-anime-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-anime-postgresql-18-cluster
   namespace: radarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/radarr-anime/ExternalSecret-radarr-anime-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-anime-postgresql-18-backup-garage-local-secret
+  namespace: radarr-anime
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-anime-postgresql-18
+    app.kubernetes.io/instance: radarr-anime
+    app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-anime/ExternalSecret-radarr-anime-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: radarr-anime-postgresql-18-cluster-backup-secret
-  namespace: radarr-anime
-  labels:
-    app.kubernetes.io/name: radarr-anime-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: radarr-anime
-    app.kubernetes.io/part-of: radarr-anime
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/radarr-anime/ExternalSecret-radarr-anime-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+  name: radarr-anime-postgresql-18-recovery-secret
   namespace: radarr-anime
   labels:
-    app.kubernetes.io/name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/radarr-anime/HTTPRoute-radarr-anime.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-radarr-anime
+  name: radarr-anime
-  namespace: radarr-anime
   labels:
-    app.kubernetes.io/name: http-route-radarr-anime
     app.kubernetes.io/instance: radarr-anime
-    app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime
+    helm.sh/chart: radarr-anime-4.5.0
+  namespace: radarr-anime
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - radarr-anime.alexlebens.net
+    - "radarr-anime.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: radarr-anime
+          namespace: radarr-anime
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: radarr-anime
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/radarr-anime/ObjectStore-radarr-anime-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "radarr-anime-postgresql-18-garage-local-backup"
+  name: radarr-anime-postgresql-18-backup-garage-local
   namespace: radarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr-anime-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: radarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: radarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: radarr-anime-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-anime/ObjectStore-radarr-anime-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "radarr-anime-postgresql-18-recovery"
   namespace: radarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-anime-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr-anime-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: radarr-anime-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-anime-postgresql-18-cluster-backup-secret-garage
+        name: radarr-anime-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: radarr-anime-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-anime/PrometheusRule-radarr-anime-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-anime-postgresql-18-alert-rules
   namespace: radarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/radarr-anime/ScheduledBackup-radarr-anime-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "radarr-anime-postgresql-18-live-backup-scheduled-backup"
+  name: "radarr-anime-postgresql-18-scheduled-backup-live-backup"
   namespace: radarr-anime
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-anime-postgresql-18
     app.kubernetes.io/instance: radarr-anime
     app.kubernetes.io/part-of: radarr-anime
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-anime-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "radarr-anime-postgresql-18-garage-local-backup"
+      barmanObjectName: "radarr-anime-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/radarr-anime/ServiceMonitor-radarr-anime.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: radarr-anime
-  namespace: radarr-anime
   labels:
-    app.kubernetes.io/name: radarr-anime
     app.kubernetes.io/instance: radarr-anime
-    app.kubernetes.io/part-of: radarr-anime
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-anime
+    helm.sh/chart: radarr-anime-4.5.0
+  namespace: radarr-anime
 spec:
+  jobLabel: "radarr-anime"
+  namespaceSelector:
+    matchNames:
+      - radarr-anime
   selector:
     matchLabels:
-      app.kubernetes.io/name: radarr-anime
       app.kubernetes.io/instance: radarr-anime
+      app.kubernetes.io/name: radarr-anime
   endpoints:
-    - port: metrics
+    - interval: 3m
-      interval: 3m
-      scrapeTimeout: 1m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/radarr-standup/Cluster-radarr-standup-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-standup-postgresql-18-cluster
   namespace: radarr-standup
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/radarr-standup/ExternalSecret-radarr-standup-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-standup-postgresql-18-backup-garage-local-secret
+  namespace: radarr-standup
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-standup-postgresql-18
+    app.kubernetes.io/instance: radarr-standup
+    app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr-standup/ExternalSecret-radarr-standup-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: radarr-standup-postgresql-18-cluster-backup-secret
-  namespace: radarr-standup
-  labels:
-    app.kubernetes.io/name: radarr-standup-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: radarr-standup
-    app.kubernetes.io/part-of: radarr-standup
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/radarr-standup/ExternalSecret-radarr-standup-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+  name: radarr-standup-postgresql-18-recovery-secret
   namespace: radarr-standup
   labels:
-    app.kubernetes.io/name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/radarr-standup/HTTPRoute-radarr-standup.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-radarr-standup
+  name: radarr-standup
-  namespace: radarr-standup
   labels:
-    app.kubernetes.io/name: http-route-radarr-standup
     app.kubernetes.io/instance: radarr-standup
-    app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup
+    helm.sh/chart: radarr-standup-4.5.0
+  namespace: radarr-standup
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - radarr-standup.alexlebens.net
+    - "radarr-standup.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: radarr-standup
+          namespace: radarr-standup
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: radarr-standup
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/radarr-standup/ObjectStore-radarr-standup-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "radarr-standup-postgresql-18-garage-local-backup"
+  name: radarr-standup-postgresql-18-backup-garage-local
   namespace: radarr-standup
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr-standup-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+        name: radarr-standup-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+        name: radarr-standup-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+        name: radarr-standup-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-standup/ObjectStore-radarr-standup-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "radarr-standup-postgresql-18-recovery"
   namespace: radarr-standup
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-standup-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr-standup-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+        name: radarr-standup-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-standup-postgresql-18-cluster-backup-secret-garage
+        name: radarr-standup-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: radarr-standup-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/radarr-standup/PrometheusRule-radarr-standup-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-standup-postgresql-18-alert-rules
   namespace: radarr-standup
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/radarr-standup/ScheduledBackup-radarr-standup-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "radarr-standup-postgresql-18-live-backup-scheduled-backup"
+  name: "radarr-standup-postgresql-18-scheduled-backup-live-backup"
   namespace: radarr-standup
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-standup-postgresql-18
     app.kubernetes.io/instance: radarr-standup
     app.kubernetes.io/part-of: radarr-standup
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-standup-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "radarr-standup-postgresql-18-garage-local-backup"
+      barmanObjectName: "radarr-standup-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/radarr-standup/ServiceMonitor-radarr-standup.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: radarr-standup
-  namespace: radarr-standup
   labels:
-    app.kubernetes.io/name: radarr-standup
     app.kubernetes.io/instance: radarr-standup
-    app.kubernetes.io/part-of: radarr-standup
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-standup
+    helm.sh/chart: radarr-standup-4.5.0
+  namespace: radarr-standup
 spec:
+  jobLabel: "radarr-standup"
+  namespaceSelector:
+    matchNames:
+      - radarr-standup
   selector:
     matchLabels:
-      app.kubernetes.io/name: radarr-standup
       app.kubernetes.io/instance: radarr-standup
+      app.kubernetes.io/name: radarr-standup
   endpoints:
-    - port: metrics
+    - interval: 3m
-      interval: 3m
-      scrapeTimeout: 1m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m

clusters/cl01tl/manifests/radarr/Cluster-radarr-postgresql-18-cluster.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-postgresql-18-cluster
   namespace: radarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3

clusters/cl01tl/manifests/radarr/ExternalSecret-radarr-postgresql-18-backup-garage-local-secret.yaml

@@ -0,0 +1,39 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: radarr-postgresql-18-backup-garage-local-secret
+  namespace: radarr
+  labels:
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-postgresql-18
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-postgresql-18-backup-garage-local-secret
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/radarr/ExternalSecret-radarr-postgresql-18-cluster-backup-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: radarr-postgresql-18-cluster-backup-secret
-  namespace: radarr
-  labels:
-    app.kubernetes.io/name: radarr-postgresql-18-cluster-backup-secret
-    app.kubernetes.io/instance: radarr
-    app.kubernetes.io/part-of: radarr
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/manifests/radarr/ExternalSecret-radarr-postgresql-18-recovery-secret.yaml

@@ -1,17 +1,28 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: radarr-postgresql-18-cluster-backup-secret-garage
+  name: radarr-postgresql-18-recovery-secret
   namespace: radarr
   labels:
-    app.kubernetes.io/name: radarr-postgresql-18-cluster-backup-secret-garage
+    helm.sh/chart: postgres-18-cluster-7.4.3
+    app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/version: "7.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-postgresql-18-recovery-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
     - secretKey: ACCESS_KEY_ID
       remoteRef:
         conversionStrategy: Default
@@ -26,10 +37,3 @@ spec:
         key: /garage/home-infra/postgres-backups
         metadataPolicy: None
         property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/manifests/radarr/HTTPRoute-radarr.yaml

@@ -1,12 +1,13 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: http-route-radarr
+  name: radarr
-  namespace: radarr
   labels:
-    app.kubernetes.io/name: http-route-radarr
     app.kubernetes.io/instance: radarr
-    app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+    helm.sh/chart: radarr-4.5.0
+  namespace: radarr
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
@@ -14,15 +15,16 @@ spec:
       name: traefik-gateway
       namespace: traefik
   hostnames:
-    - radarr.alexlebens.net
+    - "radarr.alexlebens.net"
   rules:
-    - matches:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: radarr
+          namespace: radarr
+          port: 80
+          weight: 100
+      matches:
         - path:
             type: PathPrefix
             value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: radarr
-          port: 80
-          weight: 100

clusters/cl01tl/manifests/radarr/ObjectStore-radarr-postgresql-18-backup-garage-local.yaml

@@ -1,27 +1,28 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: "radarr-postgresql-18-garage-local-backup"
+  name: radarr-postgresql-18-backup-garage-local
   namespace: radarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr-postgresql-18-backup-garage-local
 spec:
-  retentionPolicy: 3d
+  retentionPolicy: 7d
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr/radarr-postgresql-18-cluster
     endpointURL: http://garage-main.garage:3900
     s3Credentials:
       accessKeyId:
-        name: radarr-postgresql-18-cluster-backup-secret-garage
+        name: radarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-postgresql-18-cluster-backup-secret-garage
+        name: radarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_SECRET_KEY
       region:
-        name: radarr-postgresql-18-cluster-backup-secret-garage
+        name: radarr-postgresql-18-backup-garage-local-secret
         key: ACCESS_REGION

clusters/cl01tl/manifests/radarr/ObjectStore-radarr-postgresql-18-recovery.yaml

@@ -4,12 +4,13 @@ metadata:
   name: "radarr-postgresql-18-recovery"
   namespace: radarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-postgresql-18-recovery"
 spec:
   configuration:
     destinationPath: s3://postgres-backups/cl01tl/radarr/radarr-postgresql-18-cluster
@@ -22,8 +23,11 @@ spec:
       jobs: 1
     s3Credentials:
       accessKeyId:
-        name: radarr-postgresql-18-cluster-backup-secret-garage
+        name: radarr-postgresql-18-recovery-secret
         key: ACCESS_KEY_ID
       secretAccessKey:
-        name: radarr-postgresql-18-cluster-backup-secret-garage
+        name: radarr-postgresql-18-recovery-secret
         key: ACCESS_SECRET_KEY
+      region:
+        name: radarr-postgresql-18-recovery-secret
+        key: ACCESS_REGION

clusters/cl01tl/manifests/radarr/PrometheusRule-radarr-postgresql-18-alert-rules.yaml

@@ -4,11 +4,11 @@ metadata:
   name: radarr-postgresql-18-alert-rules
   namespace: radarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/radarr/ScheduledBackup-radarr-postgresql-18-scheduled-backup-live-backup.yaml

@@ -1,15 +1,16 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: "radarr-postgresql-18-live-backup-scheduled-backup"
+  name: "radarr-postgresql-18-scheduled-backup-live-backup"
   namespace: radarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.1.4
+    helm.sh/chart: postgres-18-cluster-7.4.3
     app.kubernetes.io/name: radarr-postgresql-18
     app.kubernetes.io/instance: radarr
     app.kubernetes.io/part-of: radarr
-    app.kubernetes.io/version: "7.1.4"
+    app.kubernetes.io/version: "7.4.3"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: "radarr-postgresql-18-scheduled-backup-live-backup"
 spec:
   immediate: true
   suspend: false
@@ -21,4 +22,4 @@ spec:
   pluginConfiguration:
     name: barman-cloud.cloudnative-pg.io
     parameters:
-      barmanObjectName: "radarr-postgresql-18-garage-local-backup"
+      barmanObjectName: "radarr-postgresql-18-backup-garage-local"

clusters/cl01tl/manifests/radarr/ServiceMonitor-radarr.yaml

@@ -2,18 +2,23 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: radarr
-  namespace: radarr
   labels:
-    app.kubernetes.io/name: radarr
     app.kubernetes.io/instance: radarr
-    app.kubernetes.io/part-of: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+    helm.sh/chart: radarr-4.5.0
+  namespace: radarr
 spec:
+  jobLabel: "radarr"
+  namespaceSelector:
+    matchNames:
+      - radarr
   selector:
     matchLabels:
-      app.kubernetes.io/name: radarr
       app.kubernetes.io/instance: radarr
+      app.kubernetes.io/name: radarr
   endpoints:
-    - port: metrics
+    - interval: 3m
-      interval: 3m
-      scrapeTimeout: 1m
       path: /metrics
+      port: metrics
+      scrapeTimeout: 1m