clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-cert-controller.yaml

@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
   name: external-secrets-cert-controller
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"
 rules:

clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-controller.yaml

@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
   name: external-secrets-controller
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:

clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-edit.yaml

@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
   name: external-secrets-edit
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-admin: "true"

clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-servicebindings.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-servicebindings
   labels:
     servicebinding.io/controller: "true"
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:

clusters/cl01tl/manifests/external-secrets/ClusterRole-external-secrets-view.yaml

@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
   name: external-secrets-view
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     rbac.authorization.k8s.io/aggregate-to-view: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"

clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-cert-controller.yaml

@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
   name: external-secrets-cert-controller
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"
 roleRef:

clusters/cl01tl/manifests/external-secrets/ClusterRoleBinding-external-secrets-controller.yaml

@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
   name: external-secrets-controller
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io

clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustergenerators.generators.external-secrets.io.yaml

@@ -1096,6 +1096,16 @@ spec:
                             Used to select the correct ESO controller (think: ingress.ingressClassName)
                             The ESO controller is instantiated with a specific controller name and filters VDS based on this property
                           type: string
+                        getParameters:
+                          additionalProperties:
+                            items:
+                              type: string
+                            type: array
+                          description: |-
+                            GetParameters are query-string parameters passed to Vault on GET calls.
+                            Each key may map to multiple values, matching HTTP query-string semantics.
+                            Ignored for non-GET methods; use Parameters for write bodies.
+                          type: object
                         method:
                           description: Vault API method to use (GET/POST/other)
                           type: string

clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-clustersecretstores.external-secrets.io.yaml

@@ -1758,6 +1758,11 @@ spec:
                         serverUrl:
                           description: ServerURL is the DVLS instance URL (e.g., https://dvls.example.com).
                           type: string
+                        vault:
+                          description: |-
+                            Vault is the name or UUID of the vault to fetch secrets from.
+                            When omitted, the vault must be specified in the secret key using the legacy format "<vault-id>/<entry-id>".
+                          type: string
                       required:
                         - auth
                         - serverUrl
@@ -3106,6 +3111,8 @@ spec:
                           type: object
                         folderID:
                           type: string
+                        getByTitleFallback:
+                          type: boolean
                       required:
                         - authRef
                         - folderID

clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-secretstores.external-secrets.io.yaml

@@ -1758,6 +1758,11 @@ spec:
                         serverUrl:
                           description: ServerURL is the DVLS instance URL (e.g., https://dvls.example.com).
                           type: string
+                        vault:
+                          description: |-
+                            Vault is the name or UUID of the vault to fetch secrets from.
+                            When omitted, the vault must be specified in the secret key using the legacy format "<vault-id>/<entry-id>".
+                          type: string
                       required:
                         - auth
                         - serverUrl
@@ -3106,6 +3111,8 @@ spec:
                           type: object
                         folderID:
                           type: string
+                        getByTitleFallback:
+                          type: boolean
                       required:
                         - authRef
                         - folderID

clusters/cl01tl/manifests/external-secrets/CustomResourceDefinition-vaultdynamicsecrets.generators.external-secrets.io.yaml

@@ -52,6 +52,16 @@ spec:
                     Used to select the correct ESO controller (think: ingress.ingressClassName)
                     The ESO controller is instantiated with a specific controller name and filters VDS based on this property
                   type: string
+                getParameters:
+                  additionalProperties:
+                    items:
+                      type: string
+                    type: array
+                  description: |-
+                    GetParameters are query-string parameters passed to Vault on GET calls.
+                    Each key may map to multiple values, matching HTTP query-string semantics.
+                    Ignored for non-GET methods; use Parameters for write bodies.
+                  type: object
                 method:
                   description: Vault API method to use (GET/POST/other)
                   type: string

clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-cert-controller.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-cert-controller
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"
 spec:
@@ -20,10 +20,10 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: external-secrets-2.3.0
+        helm.sh/chart: external-secrets-2.4.0
         app.kubernetes.io/name: external-secrets-cert-controller
         app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.3.0"
+        app.kubernetes.io/version: "v2.4.0"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/metrics: "cert-controller"
     spec:

clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets-webhook.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-webhook
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
 spec:
@@ -20,10 +20,10 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: external-secrets-2.3.0
+        helm.sh/chart: external-secrets-2.4.0
         app.kubernetes.io/name: external-secrets-webhook
         app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.3.0"
+        app.kubernetes.io/version: "v2.4.0"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/metrics: "webhook"
     spec:

clusters/cl01tl/manifests/external-secrets/Deployment-external-secrets.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 3
@@ -19,10 +19,10 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: external-secrets-2.3.0
+        helm.sh/chart: external-secrets-2.4.0
         app.kubernetes.io/name: external-secrets
         app.kubernetes.io/instance: external-secrets
-        app.kubernetes.io/version: "v2.3.0"
+        app.kubernetes.io/version: "v2.4.0"
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: external-secrets

clusters/cl01tl/manifests/external-secrets/PodDisruptionBudget-external-secrets-pdb.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "external-secrets-pdb"
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   minAvailable: 1

clusters/cl01tl/manifests/external-secrets/Role-external-secrets-leaderelection.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-leaderelection
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:

clusters/cl01tl/manifests/external-secrets/RoleBinding-external-secrets-leaderelection.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-leaderelection
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io

clusters/cl01tl/manifests/external-secrets/Secret-external-secrets-webhook.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-webhook
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
     external-secrets.io/component: webhook

clusters/cl01tl/manifests/external-secrets/Service-external-secrets-cert-controller-metrics.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-cert-controller-metrics
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"
 spec:

clusters/cl01tl/manifests/external-secrets/Service-external-secrets-metrics.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-metrics
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP

clusters/cl01tl/manifests/external-secrets/Service-external-secrets-webhook.yaml

@@ -4,10 +4,10 @@ metadata:
   name: external-secrets-webhook
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
     external-secrets.io/component: webhook

clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-cert-controller.yaml

@@ -4,9 +4,9 @@ metadata:
   name: external-secrets-cert-controller
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"

clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets-webhook.yaml

@@ -4,9 +4,9 @@ metadata:
   name: external-secrets-webhook
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"

clusters/cl01tl/manifests/external-secrets/ServiceAccount-external-secrets.yaml

@@ -4,8 +4,8 @@ metadata:
   name: external-secrets
   namespace: external-secrets
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/external-secrets/ServiceMonitor-external-secrets-cert-controller-metrics.yaml

@@ -2,10 +2,10 @@ apiVersion: "monitoring.coreos.com/v1"
 kind: ServiceMonitor
 metadata:
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-cert-controller
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "cert-controller"
   name: external-secrets-cert-controller-metrics

clusters/cl01tl/manifests/external-secrets/ServiceMonitor-external-secrets-metrics.yaml

@@ -2,10 +2,10 @@ apiVersion: "monitoring.coreos.com/v1"
 kind: ServiceMonitor
 metadata:
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
   name: external-secrets-metrics
   namespace: "external-secrets"

clusters/cl01tl/manifests/external-secrets/ServiceMonitor-external-secrets-webhook-metrics.yaml

@@ -2,10 +2,10 @@ apiVersion: "monitoring.coreos.com/v1"
 kind: ServiceMonitor
 metadata:
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
   name: external-secrets-webhook-metrics

clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-externalsecret-validate.yaml

@@ -3,10 +3,10 @@ kind: ValidatingWebhookConfiguration
 metadata:
   name: externalsecret-validate
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
     external-secrets.io/component: webhook

clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-secretstore-validate.yaml

@@ -3,10 +3,10 @@ kind: ValidatingWebhookConfiguration
 metadata:
   name: secretstore-validate
   labels:
-    helm.sh/chart: external-secrets-2.3.0
+    helm.sh/chart: external-secrets-2.4.0
     app.kubernetes.io/name: external-secrets-webhook
     app.kubernetes.io/instance: external-secrets
-    app.kubernetes.io/version: "v2.3.0"
+    app.kubernetes.io/version: "v2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/metrics: "webhook"
     external-secrets.io/component: webhook
@@ -42,3 +42,4 @@ webhooks:
     admissionReviewVersions: ["v1", "v1beta1"]
     sideEffects: None
     timeoutSeconds: 5
+    failurePolicy: Fail

clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml

@@ -43,14 +43,17 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: AWS_ACCESS_KEY_ID
-                  name: s3-garage-secret
+                  name: garage-s3-exporter-credentials
             - name: S3_SECRET_KEY
               valueFrom:
                 secretKeyRef:
                   key: AWS_SECRET_ACCESS_KEY
-                  name: s3-garage-secret
+                  name: garage-s3-exporter-credentials
             - name: S3_REGION
-              value: us-east-1
+              valueFrom:
+                secretKeyRef:
+                  key: ACCESS_REGION
+                  name: garage-s3-exporter-credentials
             - name: LOG_LEVEL
               value: debug
             - name: S3_FORCE_PATH_STYLE

clusters/cl01tl/manifests/unpoller/Deployment-unpoller.yaml

@@ -63,7 +63,7 @@ spec:
               value: "false"
           envFrom:
             - secretRef:
-                name: unpoller-unifi-secret
+                name: unpoller-unifi-credentials
           image: ghcr.io/unpoller/unpoller:v2.39.0@sha256:1cf63ad43121acc6995da1bd636063de9023b4bfc16599a4297951a6fb6b7fd2
           name: main
           resources: