2026-04-06 22:52:26 +00:00
29 changed files with 74 additions and 107 deletions
--- a/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml
+++ b/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: roundcube
  labels:
    app.kubernetes.io/name: roundcube-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  instances: 3
@@ -26,8 +26,8 @@ spec:
    limits:
      hugepages-2Mi: 256Mi
    requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
--- a/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml
+++ b/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml
@@ -12,8 +12,8 @@ metadata:
 spec:
  suspend: false
  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
-  timeZone: US/Central
+  startingDeadlineSeconds: 30
+  timeZone: America/Chicago
  schedule: "30 4 * * *"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
@@ -77,10 +77,5 @@ spec:
                  value: elastic
                - name: ROUNDCUBEMAIL_PLUGINS
                  value: archive,zipdownload,newmail_notifier
-              image: roundcube/roundcubemail:1.6.15-fpm-alpine
-              imagePullPolicy: IfNotPresent
+              image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
              name: backup
-              resources:
-                requests:
-                  cpu: 100m
-                  memory: 128Mi
--- a/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml
+++ b/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml
@@ -76,13 +76,12 @@ spec:
              value: elastic
            - name: ROUNDCUBEMAIL_PLUGINS
              value: archive,zipdownload,newmail_notifier
-          image: roundcube/roundcubemail:1.6.15-fpm-alpine
-          imagePullPolicy: IfNotPresent
+          image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 256Mi
+              cpu: 1m
+              memory: 40Mi
          volumeMounts:
            - mountPath: /var/www/html
              name: data
@@ -93,13 +92,8 @@ spec:
              value: mail.alexlebens.net
            - name: NGINX_PHP_CGI
              value: roundcube.roundcube:9000
-          image: nginx:1.29.7-alpine-slim
-          imagePullPolicy: IfNotPresent
+          image: nginx:1.29.7-alpine-slim@sha256:0848ca84c476868cbeb6a5c2c009a98821b8540f96c44b1ba06820db50262e35
          name: nginx
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
          volumeMounts:
            - mountPath: /etc/nginx/conf.d/default.conf
              mountPropagation: None
--- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: DES_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/roundcube/key
-        metadataPolicy: None
        property: DES_KEY
--- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: roundcube
  labels:
    app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  secretStoreRef:
--- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: roundcube-postgresql-18-recovery-secret
  namespace: roundcube
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: roundcube-postgresql-18-recovery-secret
 spec:
--- a/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml
+++ b/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml
@@ -23,7 +23,7 @@ spec:
          name: roundcube
          namespace: roundcube
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: roundcube
  labels:
    app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  retentionPolicy: 7d
--- a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml
@@ -4,10 +4,10 @@ metadata:
  name: "roundcube-postgresql-18-recovery"
  namespace: roundcube
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: "roundcube-postgresql-18-recovery"
 spec:
--- a/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml
+++ b/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: roundcube
    helm.sh/chart: roundcube-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: roundcube
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml
+++ b/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: roundcube
  labels:
    app.kubernetes.io/name: roundcube-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  groups:
--- a/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml
+++ b/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: roundcube
  labels:
    app.kubernetes.io/name: "roundcube-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: roundcube
    app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  immediate: true
--- a/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml
+++ b/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: rybbit
  labels:
    app.kubernetes.io/name: rybbit-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  instances: 3
@@ -26,8 +26,8 @@ spec:
    limits:
      hugepages-2Mi: 256Mi
    requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
--- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml
+++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml
@@ -94,10 +94,18 @@ spec:
                secretKeyRef:
                  key: mapbox-token
                  name: rybbit-config-secret
-          image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0@sha256:fd00f61abe592f872a0e4ac13f8c7b190ab2810e72f898faea4809d7ced46eef
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /api/health
+              port: 3001
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            successThreshold: 1
+            timeoutSeconds: 5
          name: main
          resources:
            requests:
              cpu: 10m
-              memory: 256Mi
+              memory: 200Mi
--- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml
+++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml
@@ -49,13 +49,21 @@ spec:
                secretKeyRef:
                  key: clickhouse-password
                  name: rybbit-config-secret
-          image: clickhouse/clickhouse-server:26.3.3
-          imagePullPolicy: IfNotPresent
+          image: clickhouse/clickhouse-server:26.3.3@sha256:5cfbc0598ee3bd850ac1b2ab150e6c9ec7b9207f1a97617e015325fb5df053d0
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /ping
+              port: 8123
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            successThreshold: 1
+            timeoutSeconds: 5
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 256Mi
+              cpu: 40m
+              memory: 300Mi
          volumeMounts:
            - mountPath: /var/lib/clickhouse
              name: clickhouse
--- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml
+++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml
@@ -43,10 +43,9 @@ spec:
              value: https://rybbit.alexlebens.dev
            - name: NEXT_PUBLIC_DISABLE_SIGNUP
              value: "false"
-          image: harbor.alexlebens.net/images/rybbit-client:v2.4.0
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/rybbit-io/rybbit-client:v2.5.0@sha256:741908be311a23ee4e58c5f82c6740bf75bbe4f7430ff2aec420f6189b1378b8
          name: main
          resources:
            requests:
              cpu: 10m
-              memory: 256Mi
+              memory: 100Mi
--- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml
@@ -14,29 +14,17 @@ spec:
  data:
    - secretKey: clickhouse-user
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
        property: user
    - secretKey: clickhouse-password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
        property: password
    - secretKey: better-auth-secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
        property: better-auth-secret
    - secretKey: mapbox-token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
        property: mapbox-token
--- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: rybbit
  labels:
    app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  secretStoreRef:
--- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: rybbit-postgresql-18-recovery-secret
  namespace: rybbit
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: rybbit-postgresql-18-recovery-secret
 spec:
--- a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: rybbit
  labels:
    app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  retentionPolicy: 7d
--- a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml
@@ -4,10 +4,10 @@ metadata:
  name: "rybbit-postgresql-18-recovery"
  namespace: rybbit
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: "rybbit-postgresql-18-recovery"
 spec:
--- a/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml
+++ b/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: rybbit
    helm.sh/chart: rybbit-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: rybbit
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml
+++ b/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: rybbit
  labels:
    app.kubernetes.io/name: rybbit-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  groups:
--- a/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml
+++ b/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: rybbit
  labels:
    app.kubernetes.io/name: "rybbit-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
    app.kubernetes.io/instance: rybbit
    app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
    app.kubernetes.io/managed-by: Helm
 spec:
  immediate: true
--- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml
@@ -58,10 +58,9 @@ spec:
              value: info
            - name: S3_FORCE_PATH_STYLE
              value: "false"
-          image: molu8bits/s3bucket_exporter:1.0.2
-          imagePullPolicy: IfNotPresent
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 40Mi
--- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml
@@ -55,10 +55,9 @@ spec:
              value: debug
            - name: S3_FORCE_PATH_STYLE
              value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
-          imagePullPolicy: IfNotPresent
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 40Mi
--- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml
@@ -55,10 +55,9 @@ spec:
              value: debug
            - name: S3_FORCE_PATH_STYLE
              value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
-          imagePullPolicy: IfNotPresent
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 40Mi
--- a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml
@@ -14,22 +14,13 @@ spec:
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/all-access
-        metadataPolicy: None
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/all-access
-        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: AWS_REGION
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/prometheus-exporter
-        metadataPolicy: None
        property: AWS_REGION
--- a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml
@@ -14,15 +14,9 @@ spec:
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/s3-exporter
-        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/s3-exporter
-        metadataPolicy: None
        property: ACCESS_SECRET_KEY