namespace:
  labels:
  - key: pod-security.kubernetes.io/enforce
    value: privileged
configuration:
  backupStorageLocation:
    - name: weyma-truenas
      provider: velero.io/aws
      bucket: weyma-talos-velero
      default: true
      credential:
        name: weyma-truenas-s3-auth
        key: credentials
      config:
        s3Url: "http://10.69.42.20:9000"
        region: us-east-1
        insecureSkipTLSVerify: "true"
  volumeSnapshotLocation:
    - name: truenas-s3
      provider: velero.io/aws
      config:
        region: us-east-1
initContainers:
  - name: velero-plugin-for-aws
    image: velero/velero-plugin-for-aws:v1.10.0
    imagePullPolicy: IfNotPresent
    volumeMounts:
      - mountPath: /target
        name: plugins
deployNodeAgent: true
extraObjects:
  - apiVersion: external-secrets.io/v1beta1
    kind: ExternalSecret
    metadata:
      name: weyma-truenas-s3-auth
      namespace: velero
    spec:
      refreshInterval: 1h
      secretStoreRef:
        name: weyma-vault
        kind: ClusterSecretStore
      target:
        name: weyma-truenas-s3-auth
        creationPolicy: Owner
      data:
      - secretKey: credentials
        remoteRef:
          key: velero
          property: credentials