chore(main): release 0.15.0 (#1066)

🤖 I have created a release *beep* *boop*
---


##
[0.15.0](https://github.com/cloudnative-pg/plugin-barman-cloud/compare/v0.14.0...v0.15.0)
(2026-09-03)


### Features

* **deps:** Bump Barman version to 3.20.0
([#1090](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1090))
([1bb6bab](1bb6bab640))
* Serve restore hooks from the instance sidecar
([#1025](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1025))
([7bb01a8](7bb01a865b))


### Bug Fixes

* **deps:** Update all non-major go dependencies
([#1041](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1041))
([9a3cc0d](9a3cc0d354))
* **deps:** Update all non-major go dependencies
([#1086](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1086))
([31b2553](31b25538bf))
* **deps:** Update kubernetes monorepo to v0.37.0
([#1084](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1084))
([b15b661](b15b661648))
* **deps:** Update module google.golang.org/grpc to v1.83.2
([#1073](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1073))
([b3d948c](b3d948ce82))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Signed-off-by: Peggie <info@cloudnative-pg.io>

.github/workflows/ci.yml

@@ -47,7 +47,7 @@ jobs:
       - name: Install Dagger
         env:
           # renovate: datasource=github-tags depName=dagger/dagger versioning=semver
-          DAGGER_VERSION: 0.21.7
+          DAGGER_VERSION: 0.21.9
         run: |
           curl -L https://dl.dagger.io/dagger/install.sh | BIN_DIR=$HOME/.local/bin sh
       - name: Run CI task
@@ -71,7 +71,7 @@ jobs:
       - name: Install Dagger
         env:
           # renovate: datasource=github-tags depName=dagger/dagger versioning=semver
-          DAGGER_VERSION: 0.21.7
+          DAGGER_VERSION: 0.21.9
         run: |
           curl -L https://dl.dagger.io/dagger/install.sh | BIN_DIR=$HOME/.local/bin sh
       - name: Write manifest

.github/workflows/release-please.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Install Dagger
         env:
           # renovate: datasource=github-tags depName=dagger/dagger versioning=semver
-          DAGGER_VERSION: 0.21.7
+          DAGGER_VERSION: 0.21.9
         run: |
           curl -L https://dl.dagger.io/dagger/install.sh | BIN_DIR=$HOME/.local/bin sh
       - name: Create image and manifest

.github/workflows/release-publish.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Install Dagger
         env:
           # renovate: datasource=github-tags depName=dagger/dagger versioning=semver
-          DAGGER_VERSION: 0.21.7
+          DAGGER_VERSION: 0.21.9
         run: |
           curl -L https://dl.dagger.io/dagger/install.sh | BIN_DIR=$HOME/.local/bin sh
       - name: Create image and manifest

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.14.0"
+  ".": "0.15.0"
 }

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.15.0](https://github.com/cloudnative-pg/plugin-barman-cloud/compare/v0.14.0...v0.15.0) (2026-09-03)
+
+
+### Features
+
+* **deps:** Bump Barman version to 3.20.0 ([#1090](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1090)) ([1bb6bab](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/1bb6bab640f5adf038c86e33c96d42765d2aa708))
+* Serve restore hooks from the instance sidecar ([#1025](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1025)) ([7bb01a8](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/7bb01a865b15c0f5f608c8bfbc7561daadf2de3d))
+
+
+### Bug Fixes
+
+* **deps:** Update all non-major go dependencies ([#1041](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1041)) ([9a3cc0d](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/9a3cc0d35492697a31ddc13b87f269cca3e83ea5))
+* **deps:** Update all non-major go dependencies ([#1086](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1086)) ([31b2553](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/31b25538bf6d8fadf2cd28c15b23c9c81ae22fac))
+* **deps:** Update kubernetes monorepo to v0.37.0 ([#1084](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1084)) ([b15b661](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/b15b661648792cb2cb899ee628b8a3aa909c3fc8))
+* **deps:** Update module google.golang.org/grpc to v1.83.2 ([#1073](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/1073)) ([b3d948c](https://github.com/cloudnative-pg/plugin-barman-cloud/commit/b3d948ce821c68be1d99c84c679e020b5f3db363))
+
 ## [0.14.0](https://github.com/cloudnative-pg/plugin-barman-cloud/compare/v0.13.0...v0.14.0) (2026-07-29)
 
 

CODEOWNERS

@@ -1,5 +1,9 @@
-# The CODEOWNERS file is used to define individuals or teams that are
+# This file is generated from componentowners-policy.yaml in
-# responsible for code in a repository. For details, please refer to
+# cloudnative-pg/cnpg-infra — do not hand-edit, propose changes there instead.
-# https://docs.github.com/en/free-pro-team@latest/github/creating-cloning-and-archiving-repositories/about-code-owners
+#
+# Path-scoped rules below always include the repo's own general owners
+# (the "*" line) in addition to their own specific teams/users, since
+# CODEOWNERS only honors the LAST matching pattern for a given path —
+# it does not merge an earlier, less-specific rule into a later one.
 
-* @leonardoce @mnencia @gbartolini @fcanovai @armru @NiccoloFei
+* @cloudnative-pg/plugin-barman-cloud-owners

Taskfile.yml

@@ -9,7 +9,7 @@ vars:
   GO_VERSION:
     sh: sed -n 's/^toolchain go//p' go.mod | grep . || sed -n 's/^go //p' go.mod
   # renovate: datasource=docker depName=kindest/node versioning=semver
-  E2E_KUBERNETES_VERSION: v1.36.1
+  E2E_KUBERNETES_VERSION: v1.37.0
   E2E_CLUSTER_NAME: barman-cloud-plugin-e2e-{{.E2E_KUBERNETES_VERSION}}
   REGISTRY_NETWORK: barman-cloud-plugin
   REGISTRY_NAME: registry.barman-cloud-plugin
@@ -23,7 +23,7 @@ tasks:
       # renovate: datasource=git-refs depName=golangci-lint lookupName=https://github.com/sagikazarmark/daggerverse currentValue=main
       DAGGER_GOLANGCI_LINT_SHA: ff27cd50f6b4eed2e3753c520632cd6099e1ce52
       # renovate: datasource=docker depName=golangci/golangci-lint versioning=semver
-      GOLANGCI_LINT_VERSION: v2.12.2
+      GOLANGCI_LINT_VERSION: v2.13.2
     cmds:
       - >
         GITHUB_REF= dagger -sc "github.com/sagikazarmark/daggerverse/golangci-lint@${DAGGER_GOLANGCI_LINT_SHA}
@@ -34,6 +34,7 @@ tasks:
 
   wordlist-ordered:
     desc: Order the word list file
+    run: once
     cmds:
       - LANG=C LC_ALL=C sort .wordlist.txt > .wordlist.txt.new
       - mv -f .wordlist.txt.new .wordlist.txt
@@ -46,7 +47,7 @@ tasks:
       - wordlist-ordered
     env:
       # renovate: datasource=git-refs depName=spellcheck lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
-      DAGGER_SPELLCHECK_SHA: f7187c307f2ba79290efbfff5ce436b956162c53
+      DAGGER_SPELLCHECK_SHA: 26cd57fb6ad66e88c036b675b0478d38df93962d
     cmds:
       - >
         GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/spellcheck@${DAGGER_SPELLCHECK_SHA}
@@ -60,12 +61,32 @@ tasks:
     desc: Check for conventional commits
     env:
       # renovate: datasource=git-refs depName=commitlint lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
-      DAGGER_COMMITLINT_SHA: f7187c307f2ba79290efbfff5ce436b956162c53
+      DAGGER_COMMITLINT_SHA: 26cd57fb6ad66e88c036b675b0478d38df93962d
     cmds:
       - >
         GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/commitlint@${DAGGER_COMMITLINT_SHA}
         lint --source . --args "--from=origin/main" stdout
 
+  pip-compile-sidecar:
+    desc: Regenerate containers/sidecar-requirements.txt with the same Python version as the sidecar image
+    cmds:
+      - >
+        GITHUB_REF= dagger call --no-mod
+        container from --address=debian:trixie-slim
+        with-env-variable --name=DEBIAN_FRONTEND --value=noninteractive
+        with-exec --args="apt-get,update,-qq"
+        with-exec --args="apt-get,install,-y,-qq,python3,python3-venv,python3-pip,gcc,libpq-dev"
+        with-exec --args="pip,install,--quiet,--break-system-packages,pip-tools,click<8.5.0"
+        with-directory --path=/work --source=containers
+        with-workdir --path=/work
+        with-exec --args="pip-compile,--allow-unsafe,--generate-hashes,--output-file=sidecar-requirements.txt,--strip-extras,sidecar-requirements.in"
+        file --path=/work/sidecar-requirements.txt
+        export --path=containers/sidecar-requirements.txt
+    sources:
+      - containers/sidecar-requirements.in
+    generates:
+      - containers/sidecar-requirements.txt
+
   uncommitted:
     desc: Check for uncommitted changes
     deps:
@@ -74,7 +95,7 @@ tasks:
       - wordlist-ordered
     env:
       # renovate: datasource=git-refs depName=uncommitted lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
-      DAGGER_UNCOMMITTED_SHA: f7187c307f2ba79290efbfff5ce436b956162c53
+      DAGGER_UNCOMMITTED_SHA: 26cd57fb6ad66e88c036b675b0478d38df93962d
     cmds:
       - GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/uncommitted@${DAGGER_UNCOMMITTED_SHA} check-uncommitted --source . stdout
     sources:
@@ -86,7 +107,7 @@ tasks:
       - controller-gen
     env:
       # renovate: datasource=git-refs depName=crd-gen-refs lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
-      DAGGER_CRDGENREF_SHA: f7187c307f2ba79290efbfff5ce436b956162c53
+      DAGGER_CRDGENREF_SHA: 26cd57fb6ad66e88c036b675b0478d38df93962d
       # renovate: datasource=go depName=github.com/elastic/crd-ref-docs
       CRDREFDOCS_VERSION: v0.3.0
     cmds:
@@ -206,7 +227,7 @@ tasks:
       - start-build-network
     vars:
       # renovate: datasource=github-tags depName=dagger/dagger versioning=semver
-      DAGGER_VERSION: 0.21.7
+      DAGGER_VERSION: 0.21.9
       DAGGER_ENGINE_IMAGE: registry.dagger.io/engine:v{{ .DAGGER_VERSION }}
     cmds:
       - >
@@ -263,7 +284,7 @@ tasks:
     run: once
     vars:
       # renovate: datasource=git-refs depName=kind lookupName=https://github.com/kubernetes-sigs/kind versioning=semver
-      KIND_VERSION: v0.32.0
+      KIND_VERSION: v0.33.0
     cmds:
       - go install sigs.k8s.io/kind@{{.KIND_VERSION}}
       - kind version | grep -q {{.KIND_VERSION}}
@@ -383,7 +404,7 @@ tasks:
     run: once
     env:
       # renovate: datasource=git-refs depName=controller-gen lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
-      DAGGER_CONTROLLER_GEN_SHA: f7187c307f2ba79290efbfff5ce436b956162c53
+      DAGGER_CONTROLLER_GEN_SHA: 26cd57fb6ad66e88c036b675b0478d38df93962d
     cmds:
       - >
         GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/controller-gen@${DAGGER_CONTROLLER_GEN_SHA}

config/crd/bases/barmancloud.cnpg.io_objectstores.yaml

@@ -460,7 +460,9 @@ spec:
                               description: Selects a key of a ConfigMap.
                               properties:
                                 key:
-                                  description: The key to select.
+                                  description: |-
+                                    The key to select from the ConfigMap's Data field.
+                                    Keys in the BinaryData field are not currently propagated to container env vars.
                                   type: string
                                 name:
                                   default: ""

containers/Dockerfile.sidecar

@@ -63,6 +63,9 @@ RUN python3 -m venv /venv && \
 # already present in the distroless base image.
 # Distroless package list from: https://github.com/GoogleContainerTools/distroless/blob/main/base/config.bzl
 # and https://github.com/GoogleContainerTools/distroless/blob/main/python3/config.bzl
+# libselinux1/libpcre2-8-0 are pulled in transitively by python3.13-venv's apt metadata,
+# but the actual distroless base does not ship them, so they are excluded from the
+# "already present" set below to force them to be bundled (tar needs them at runtime).
 RUN mkdir -p /dependencies /build/downloads && \
     cd /build/downloads && \
     DISTROLESS_PACKAGES="libc6 libssl3t64 libzstd1 zlib1g libgcc-s1 libstdc++6 \
@@ -73,10 +76,11 @@ RUN mkdir -p /dependencies /build/downloads && \
         libpython3.13-stdlib python3.13-minimal python3.13-venv" && \
     apt-cache depends --recurse --no-recommends --no-suggests \
         --no-conflicts --no-breaks --no-replaces --no-enhances \
-        $DISTROLESS_PACKAGES 2>/dev/null | grep "^\w" | sort -u > /tmp/distroless.txt && \
+        $DISTROLESS_PACKAGES 2>/dev/null | grep "^\w" | sort -u | \
+        grep -v -x -E 'libselinux1|libpcre2-8-0' > /tmp/distroless.txt && \
     apt-cache depends --recurse --no-recommends --no-suggests \
         --no-conflicts --no-breaks --no-replaces --no-enhances \
-        libpq5 liblz4-1 libsnappy1v5 2>/dev/null | grep "^\w" | sort -u | \
+        libpq5 liblz4-1 libsnappy1v5 tar 2>/dev/null | grep "^\w" | sort -u | \
         grep -v -F -x -f /tmp/distroless.txt > /tmp/packages.txt && \
     apt-get download $(cat /tmp/packages.txt) && \
     for deb in *.deb; do \
@@ -102,6 +106,7 @@ LABEL summary="$SUMMARY" \
 
 COPY --from=pythonbuilder /venv /venv
 COPY --from=pythonbuilder /dependencies/usr/lib /usr/lib
+COPY --from=pythonbuilder /dependencies/usr/bin/tar /usr/bin/tar
 COPY --from=gobuilder /workspace/manager /manager
 
 # Compile all Python bytecode as root to avoid runtime compilation

containers/sidecar-requirements.in

@@ -1,2 +1,2 @@
-barman[azure,cloud,google,snappy,zstandard,lz4]==3.19.1
+barman[azure,cloud,google,snappy,zstandard,lz4]==3.20.0
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability

containers/sidecar-requirements.txt

@@ -18,17 +18,17 @@ azure-storage-blob==12.30.0 \
     --hash=sha256:2cd74d4d5731e5eb6b8d5c5056ee115a5e88f8fdf22517b739836fda685018be \
     --hash=sha256:d415ac50b67a8da6b3ae7e9f1014b1b55cd7aafa0b8d4ca9b380568dc7360423
     # via barman
-barman==3.19.1 \
+barman==3.20.0 \
-    --hash=sha256:0a6a9e1babf97687732d8b2a3eb79ea95d55246a5257b9433865cb6e755221c0 \
+    --hash=sha256:02dd8936e62c1829c78597eefedfcab0aa820f5618da2871f38b5bc684891a54 \
-    --hash=sha256:2f71c4a1f1ba53f694cbdf838bb9906d8ba02b97d1fd3041196e8999bec7a1ee
+    --hash=sha256:1aa92df452f39c357d6547fd0abd3885a8c243ea95002e6fc0b7f66f8e8c24d5
     # via -r sidecar-requirements.in
-boto3==1.43.56 \
+boto3==1.43.81 \
-    --hash=sha256:57c90df9fb026f2e6ae22530861198130203733c5c9ec4e5cca3a4037f5a8db4 \
+    --hash=sha256:62ecf695088e06f37500d6cc49a240dc1331379bd5ae992d185fef212038ca29 \
-    --hash=sha256:feb699d4ab241ef5c1b80bb58277be2aaad365cd4b672d7817e0bc59ee45131b
+    --hash=sha256:6e24f98974400a3845223bba77f457be92517f78e2cffadfa273e18ea1fe1944
     # via barman
-botocore==1.43.56 \
+botocore==1.43.81 \
-    --hash=sha256:6c01f85f0ff9863076f4c761e74ee3aa96c5ccc1ad09fc1efd62ef8f2d22bf57 \
+    --hash=sha256:49eb02dac7eb4418ae589dc0da816d47bf40be1a7ccfdbed5f772c7a2efcf64d \
-    --hash=sha256:aafc741f1b10f6fd63253eaf6ea029680c1ff436d87e1b8969d62aefa0c76976
+    --hash=sha256:a5d343674b63a619b7f1f3caef4eedb403500c7a8b95a9e7d8cac98b95501adb
     # via
     #   boto3
     #   s3transfer
@@ -36,413 +36,478 @@ certifi==2026.7.22 \
     --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \
     --hash=sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55
     # via requests
-cffi==2.1.0 \
+cffi==2.1.1 \
-    --hash=sha256:02cb7ff33ded4f1532476731f89ede53e2e488a8e6205515a82144246ffa7dcc \
+    --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
-    --hash=sha256:03e9810d18c646077e501f661b682fbf5dee4676048527ca3cffe66faa9960dd \
+    --hash=sha256:06c72bb76605a4b0cd0aad6930b69d4baf7dd5d806cfc409b824191099700e66 \
-    --hash=sha256:0520e1f4c35f44e209cbbb421b67eec42e6a157f59444dfb6058874ff3610e5d \
+    --hash=sha256:0beceaabe56af686895136a2de78db54ecd8e4046b236b8fd6d6cb61389e9bf2 \
-    --hash=sha256:0582a58f3051372229ca8e7f5f589f9e5632678208d8636fea3676711fdf7fe5 \
+    --hash=sha256:154852545011f779917b11c78db2358d095da62a9a172b78ad0a583ee5adc0d0 \
-    --hash=sha256:0611e7ebf90573a535ebdc33ae9da222d037853983e13359f580fab781ca017f \
+    --hash=sha256:194cffa889098ced9976c3fc6340305e43f6303657d298da55366907c05c22d6 \
-    --hash=sha256:0a42c688d19fca6e095a53c6a6e2295a5b050a8b289f109adab02a9e61a25de6 \
+    --hash=sha256:19ee6127ee34de7d83ce3d371ebc5ed91addbdcc39f9ab15ce4eb35a4e534971 \
-    --hash=sha256:0a96b74cda968eebbad56d973efe5098974f0a9fb323865bf99ea1fd24e3e64c \
+    --hash=sha256:1a18a57b58cfb21fc28d72e876acf10eaed67a1ed96226f92af4df681d571c4c \
-    --hash=sha256:10537b1df4967ca26d21e5072d7d54188354483b91dc75058968d3f0cf13fbda \
+    --hash=sha256:1aa5645c30469b09530c4ebca77ebf8f17618293c58f8549cb1a543a50236e7d \
-    --hash=sha256:11b3fb55f4f8ad92274ed26705f65d8f91457de71f5380061eb6d125a768fecd \
+    --hash=sha256:1dea0e4d7d4f11f619fe8c1d76caf49e24405b4b5743c0e3be16a500ecd930c9 \
-    --hash=sha256:15faec4adfff450819f3aee0e2e02c812de6edb88203aa58807955db2003472a \
+    --hash=sha256:208f941bb9d18e768138677f0a6d2ce01f590df56043dda1df1535ac57c88517 \
-    --hash=sha256:164bff1657b2a74f0b6d54e11c9b375bc97b931f2ca9c43fcf875838da1570dd \
+    --hash=sha256:210019b6c7cf07f081b4c54635c8cf744377001350e29cc0f81c4377b4797735 \
-    --hash=sha256:1854b724d00f6654c742097d5387569021be12d3a0f770eae1df8f8acfcc6acd \
+    --hash=sha256:246fa40ce8645a614ff682e0b70f37134e460eaf93a775e0cbe3cca585a67a80 \
-    --hash=sha256:19c54ac121cad98450b4896fa9a43ee0180d57bc4bc911a33db6cab1efab6cd3 \
+    --hash=sha256:25792eac27877609e7bb06d42ff88278a6624fff2ba9bbb523c09616b117e80f \
-    --hash=sha256:1b96bfe2c4bd825681b7d311ad6d9b7280a091f43e8f63da5729638083cd3bfb \
+    --hash=sha256:27350daa11d4f10c540e6e89dada4c54feb7256ad03e9a4dc075ebad7ba360d1 \
-    --hash=sha256:1e9f50d192a3e525b15a75ab5114e442d83d657b7ec29182a991bc9a88fd3a66 \
+    --hash=sha256:28907ab9bfb6aa13184cfc17c6b8e1023c5ab6fd7076d8c20a35e59fe04f8f29 \
-    --hash=sha256:1ff3456eab0d889592d1936d6125bbfbc7ae4d3354a700f8bd80450a66445d4d \
+    --hash=sha256:2ae64be792b8966f2c69538199728b290e34726562896df1e5dc8ffd8d8188e8 \
-    --hash=sha256:2282cd5e38aa8accd03e99d1256af8411c84cdbee6a89d841b563fdbd1f3e50f \
+    --hash=sha256:31348097ff5bbe827ccc41795d4dd099d9f0625e7def00ee653c137a490c2a6c \
-    --hash=sha256:276f20fffd7b396e12516ba8edf9509210ac248cbbc5acbc39cd512f9f59ebe6 \
+    --hash=sha256:3143d81e29e1e20a9ce10901ec369012947876596f75a222235965f2b7ae832e \
-    --hash=sha256:2b71d409cccee78310ab5dec549aed052aaea483346e282c7b02362596e01bb0 \
+    --hash=sha256:3222ba5d678f80a030e6afbcc33dc1ae5cb45facabb61cee2c7016b8432fde48 \
-    --hash=sha256:2e9dabb9abcb7ad15938c7196ad5c1718a4e6d33cc79b4c0209bdb64c4a54a5c \
+    --hash=sha256:3311ed60d36f83378794e1009ac6258bafbf81f7888b4caa7b35a521e3f95813 \
-    --hash=sha256:30b65779d598c370374fefabf138d456fd6f3216bfa7bedfab1ba82025b0cd93 \
+    --hash=sha256:334644fbac4eff73d985a17a91226df55d0f394160c4cfb880e084c8f7161cac \
-    --hash=sha256:33eb1ad83ebe8f313e0df035c406227d55a79456704a863fad9842136af5ad7d \
+    --hash=sha256:34e261f78cb6ceaaa36f42f2613f4380d94d9c759a9c73c769ee6e0247364632 \
-    --hash=sha256:35aaea0c7ee0e58a5cd8c2fd1a48fdf7ece0d2699b7ecdda08194e9ce5dd9b3d \
+    --hash=sha256:363e05fa78e15116c3c32c210ee36884fd6b9afa6d440e47112c3bd511d64cb6 \
-    --hash=sha256:3681e031db29958a7502f5c0c9d6bbc4c36cb20f7b104086fa642d1799631ff8 \
+    --hash=sha256:398aff33cee2767e3e781d2554c54bd0dff386bb437581e0d8011fde1a942ec1 \
-    --hash=sha256:379de10ce1ba048b1448599d1b37b24caee16309d1ac98d3982fc997f768700b \
+    --hash=sha256:3d22a20b1fb1632cc72c22f95f7b0d2961c3e1c235f245ba4c606c4771035659 \
-    --hash=sha256:37f525a7e7e50c017fdebe58b787be310ad59357ae43a053943a6e1a6c526001 \
+    --hash=sha256:42a494cee34437f05546455144f2b5d9ac09b1face62bcfce597d2e521066688 \
-    --hash=sha256:3b926723c13eba9f81d2ef3820d63aeceec3b2d4639906047bf675cb8a7a500d \
+    --hash=sha256:42e2f76b9455f5a9a844f770bf3e200ed3da0e15f5df3db9c31fe80b04b3d004 \
-    --hash=sha256:3d7f118b5adbfdfead90c25822690b02bc8074fba949bb7858bec4ebd55adb43 \
+    --hash=sha256:42f6930c31dc7f50732c9ae793c2786c7b6b044195967bbdde40bb9be81c4cc0 \
-    --hash=sha256:46b1c8db8f6122420f32d02fffb924c2fe9bc772d228c7c711748fff56aabb2b \
+    --hash=sha256:456a61fa52d579ebf9df2e9552ead5129855dbaff6c1e5a9b1bc408809bdc062 \
-    --hash=sha256:47ff3a8bfd8cb9da1af7524b965127095055654c177fcfc7578debcb015eecd0 \
+    --hash=sha256:471cee653ae88de62096552e6d24ccb4a5adb8c8c9f10b5054d0122c15bf2779 \
-    --hash=sha256:4d433a51f1870e43a13b6732f92aaf540ff77c2015097c78556f75a2d6c030e0 \
+    --hash=sha256:49cbc70e6542d4ccccb936558d1064a8012541e78f821f955cff24e357776c94 \
-    --hash=sha256:4f26194e3d95e06501b942642855aed4f953d55e95d7d01b7c4483db3ecff458 \
+    --hash=sha256:4a7c934f7360e8cd64fe9efadcbd10c7c6364f531e432b9a4bf5ccbc9e0e8b50 \
-    --hash=sha256:510aeeeac94811b138077451da1fb18b308a5feab47dd2b603af55804155e1c8 \
+    --hash=sha256:4be96343e422f2dfcd12ab5c9f5aebe03f82f737c6bffeca6830b3875cb44aab \
-    --hash=sha256:5972433ad71a9e46516584ef60a0fda12d9dc459938d1539c3ddecf9bdc1368d \
+    --hash=sha256:4f42141fc14250de6dde5ee7ea4432be017252d91f19c5ad043c084cea629cac \
-    --hash=sha256:5ecbd0499275d57506d397eebe1981cee87b47fcd9ef5c22cab7ed7644a39a94 \
+    --hash=sha256:507a24c282e0f42f8ed737cf048572cbf580468da5555764a8331735e9c736b6 \
-    --hash=sha256:6274dcb2d15cef48daa73ed1be5a40d501d74dccd0cd6db364776d12cb6ba022 \
+    --hash=sha256:51b31d1c98274844cfd7838ce00bfc27c7423a4dc00fc0772fc3331c2cc90676 \
-    --hash=sha256:63960549e4f8dc41e31accb97b975abaecfc44c03e396c093a6436763c2ea7db \
+    --hash=sha256:58acb8ab8e295e6c5ea12f888cbb13cf21511ef2a3303a23f4325c29d17fe5c1 \
-    --hash=sha256:64c753a0f87a256020004f37a1c8c02c480e725f910f0b2a0f3f07debd1b2479 \
+    --hash=sha256:5a59cc1c4442bc3d5c703bf720b51138d0bfc173618807c9ee2490a7541dd3d9 \
-    --hash=sha256:6af371f3767faeffc6ac1ef57cdfd25844403e9d3f476c5537caee499de96376 \
+    --hash=sha256:5bb4e7ea95dcd6a014a6fef62e62467d67d8e582326443f3d68e71d6320a9fcf \
-    --hash=sha256:6ca4919c6e4f89aa99c42510b42cf54596892c00b3f9077f6bdd1505e24b9c8d \
+    --hash=sha256:5c58fe613dc5e5336357eff555824a314d8e43282600435c8d1cb6a7a2fedd13 \
-    --hash=sha256:6d194185eabd279f1c05ebe3504265ddfc5ad2b58d0714f7db9f01da592e9eb6 \
+    --hash=sha256:5e7cecbaadb83884793e05828cee59b210b24583b9c7425d0ba6a754fe22eb4e \
-    --hash=sha256:702c436735fbe99d59ada02a1f65cfc0d31c0ee8b7290912f8fbc5cd1e4b16c3 \
+    --hash=sha256:616f097f2fe415bc92a247f02e11f634e1f9e9a83d327e3c915c15089c87869e \
-    --hash=sha256:716ff8ec22f20b4d988b12884086bcef0fc99737043e503f7a3935a6be99b1ea \
+    --hash=sha256:63bbfd5ded17c4840ac07cd8f1c21ba9d9708141f840b324f422f41b207e3973 \
-    --hash=sha256:762f99479dcb369f60ab9017ad4ab97a36a1dd7c1ee5a3b15db0f4b8659120cd \
+    --hash=sha256:64faea20f4e2613363a1a9b9c7dd73058f3ecd00133a511e72ad7c511658f527 \
-    --hash=sha256:7762faa47e8ff7eb80bd261d9a7d8eea2d8baa69de5e95b70c1f338bbe712f02 \
+    --hash=sha256:661c298b4821edebead0c91edd2b00374d67ad7c5a1f7a91d4442633b79d6a72 \
-    --hash=sha256:78474632761faa0fb96f30b1c928c84ebcf68713cbb80d15bab09dfe61640fde \
+    --hash=sha256:68e62fe11f30d5ca8289242866f0a5291402d8529ca2178ab8afc5c9694ae890 \
-    --hash=sha256:799416bae98336e400981ff6e532d67d5c709cfb30afb79865a1315f94b0e224 \
+    --hash=sha256:6a8dddef476fab96d066d578fc88526767b836ab5ab21754e1d5bf3879c31c7c \
-    --hash=sha256:7d034dcffa09e9a46c93fa3a3be402096cb5354ac6e41ab8e5cc9cd8b642ad76 \
+    --hash=sha256:6e192623c49c94421616a5778fba35cf0d5a8d000650c1967ef4448ee5cdd990 \
-    --hash=sha256:7d28dff1db6764108bc30788d85d61c876beff416d9a49cb9dd7c5a9f34f5804 \
+    --hash=sha256:7225e4514edb64eb6740324353e0da0711954fd8d7da4576755b1c6e09b697cd \
-    --hash=sha256:7d3538f9c0e50670f4deb93dbb696576e60590369cae2faf7de681e597a8a1f1 \
+    --hash=sha256:75f80557d1389eddbd0de2681f6a390a0c5338c31ddaa821381c203fc3fd50d9 \
-    --hash=sha256:7d5980a3433d4b71a5e120f9dd551403d7824e31e2e67124fe2769c404c06913 \
+    --hash=sha256:770de9db11e84213beec501cfcaa013b019820ca881e03344dea5844f7876d94 \
-    --hash=sha256:7ea6b3e2c4250ff1de21c630fe72d0f63eb95c2c32ffbf64a358cf4a8836d714 \
+    --hash=sha256:7750c6449dff7864bb9bb27ddfb0267756189201a3afc911d82b3caacd70dfc3 \
-    --hash=sha256:86cf8755a791f72c85dc287128cc62d4f24d392e3f1e15837245623f4a33cccc \
+    --hash=sha256:7bde5e4cc5c10140859842b9d383af292b22639a4dffb725314baf45968cef80 \
-    --hash=sha256:88023dfe18799507b73f1dbb0d14326a17465de1bc9c9c7655c22845e9ddc3a2 \
+    --hash=sha256:7ce713ace7c0e4520535b42b77eaa742c16dab813978064913e5a3cf82973b41 \
-    --hash=sha256:89095c1968b4ba8285840e131bf2891b09ae137fe2146905acae0354fbce1b5e \
+    --hash=sha256:7da0c5eff80f0197f3b3d1232ec5a682a9325f4ae9016a78f5f5ca35f9ced1f5 \
-    --hash=sha256:8d35c139744adb3e727cd51b1a18324bbe44b8bd41bf8322bca4d41289f48eda \
+    --hash=sha256:7dbb61fe3a7699468030f71bbe5f8a0e326a151daa91beb11a6fc1f980c55e1c \
-    --hash=sha256:8e74a6135550c4748af665b1b1118b6aab33b1fc6a16f9aff630af107c3b4512 \
+    --hash=sha256:811bd1e21d32de12efca32393a0ab3f5133b54fce9bd44b8bd77ab07da14bf6a \
-    --hash=sha256:8f9ec95b8a043d3dfbc74d9abc6f7baf524dd27a8dc160b0a32ff9cdab650c28 \
+    --hash=sha256:8ef53b2de9bcb9197d31854256575d59dbac0cba72ac627bb291ef5eceb74be4 \
-    --hash=sha256:90bec57cf82089383bd06a605b3eb8daebf7e5a668520beaf6e327a83a947699 \
+    --hash=sha256:937c0052c05a31ca1daf18de3158eed4dbfcb9cc107adbea227728d647be701e \
-    --hash=sha256:95f2954c2c9473d892eca6e0409f3568b37ab62a8eedb122461f73cc273476e3 \
+    --hash=sha256:9d2055050ea716bd38b7f7f1579c275386646b4894c155a3e2f3cd62ed41b7c6 \
-    --hash=sha256:961be50688f7fba2fa65f63712d3b9b341a22311f5253460ce933f52f0de1c8c \
+    --hash=sha256:9f8d177621de5cb38ee3e731eda45d421db093ec0739f46a5594babda7987a98 \
-    --hash=sha256:98fff996e983a36d3aa2eca83af40c5821202e7e6f32d13ae94e3d2286f10cfe \
+    --hash=sha256:a2d7755bef5a12ed488f4ef1f1b69ee9191d7396083b755a5d2295f6edb4768b \
-    --hash=sha256:9b8f0f26ca4e7513c534d351eca551947d053fac438f2a04ac96d882909b0d3a \
+    --hash=sha256:a48d62ab9d6f4f98c983223a547af44be6ca3691074c31cecced6facd3ba2dc1 \
-    --hash=sha256:9d72af0cf10a76a600a9690078fe31c63b9588c8e86bf9fd353f713c84b5db0f \
+    --hash=sha256:a4f00aa42f75d6e4595e8866e748cc1705adc0cddfeb2ca86d0d03993d63ba03 \
-    --hash=sha256:9d8272c0e483b024e1b9ad029821470ed8ec65631dbd90217469da0e7cd89f1c \
+    --hash=sha256:a6e721d4b0e45d5b65e87534470e67b18dcd092c83f68fba09f152b9cbc061af \
-    --hash=sha256:a016194dbe13d14ee9556e734b772d8d67b947092b268d757fd4290e3ba2dfc2 \
+    --hash=sha256:a730a083190634c65cca36ba5f489531576ebd79bcd5c8e172130f6453127231 \
-    --hash=sha256:a5781494d4d400a3f47f8f1da94b324f6e6b440a53387774002890a2a2f4b50f \
+    --hash=sha256:a931079504ecc49efed7744c476a5c343a92fabf66dec2db95edb1b2fdc770e2 \
-    --hash=sha256:a95b05f9baf29b91171b3a8bd2020b028835243e7b0ff6bb23e2a3c228518b1b \
+    --hash=sha256:aa9511c62d14da7aacc9b4bf51f3f697a621e83b2d6919008243c3aad168eea3 \
-    --hash=sha256:aa7a1b53a2a4452ada2d1b5dade9960b2522f1e61293a811a077439e39029565 \
+    --hash=sha256:ab36d55f9ed2d067327667c2fea18dda018eb628dd6347aa01dda6cf1f5d3836 \
-    --hash=sha256:ac0f1a2d0cfa7eea3f2aaf006ab6e70e8feeb16b75d65b7e5939982ca2f11056 \
+    --hash=sha256:ad2c86c495b899d862ea0f4b42891b8713a3bd45dd4105c7fd51c2a72f39f3a5 \
-    --hash=sha256:af5e2915d41fe6c961694d7bfdc8562942638200f3ce2765dfb8b745cf997629 \
+    --hash=sha256:aeae0e330c9f6acd681f647d46cefd30c29f93e3392882e792e82080c9691399 \
-    --hash=sha256:b6422532152adf4e59b110cb2808cee7a033800952f5c036b4af047ee43199e7 \
+    --hash=sha256:b0431303acaea1089ad4b3e9ce4e6518193def1118d4073ca848635ee4ea2e96 \
-    --hash=sha256:b65f590ef2a44640f9a05dbb548a429b4ade77913ce683ac8b1480777658a6c0 \
+    --hash=sha256:b5bdfd1c873d4e093aabc0ca84c4ca6dbc4f752afb5c86f146d9742580c9da2e \
-    --hash=sha256:ba00f661f8ba35d075c937174e27c2c421cec3942fd2e0ea3e66996757c0fdd9 \
+    --hash=sha256:baed1e86cc735622097354b9d1281406caf42ff42a886d29faa8e8d1630333be \
-    --hash=sha256:bccbbb5ee76a61f9d99b5bf3846a51d7fca4b6a732fe46f89295610edaf41853 \
+    --hash=sha256:c1453022f490d2459a11819d83ad1d586e9ff65a12ac3e705ffebd46d3685dcf \
-    --hash=sha256:bf01d8c84cbea96b944c73b22182e6c7c432b3475632b8111dbfdc95ddad6e13 \
+    --hash=sha256:c26608d2222fb1e94487e4a387d85f13eb55d5ed725cb25a0c589ac4ee60e7bc \
-    --hash=sha256:bf5c6cf48238b0eb4c086978c492ad1cbc22373fc5b2d7353b3a598ce6db887a \
+    --hash=sha256:c7659f22557c5a0bc4855cd635f55edec690cc008a40768527762cb9fb263455 \
-    --hash=sha256:c16914df9fb7f500e440e6875fa23ff5e0b31db01fa9c06af98d59a91f0dc2e4 \
+    --hash=sha256:c8c69575568085ba0b1b10c0249d779a214aea6f6522e949a0fc9fb0fcb449d0 \
-    --hash=sha256:c351efb95e832a853a29361675f33a7ce53de1a109cd73fd47af0712213aa4ce \
+    --hash=sha256:c8d2c9fd1f2d16f780d15127abb050d13d1a76c03a4bd87d7e4980e45e511e12 \
-    --hash=sha256:c4165821e131d6d4ca444347c2b694e2311bcfa3fe5a861cc72968f28867beac \
+    --hash=sha256:ca82be1a1d406ecfe1d25dc16cb33488e5a16bf4438c9fb590484ea29d92478b \
-    --hash=sha256:c5f5df567f6eb216de69be06ce55c8b714090fae02b18a3b40da8163b8c5fa9c \
+    --hash=sha256:cc572dace3f60ef98d7b12ff411d20f5362feb31a0439eab0085bbfd349982d7 \
-    --hash=sha256:c941bb58d5a6e1c3892d86e42927ed6c180302f07e6d395d08c416e594b98b46 \
+    --hash=sha256:d18e5ac0f2f03f4f518d3e23db0f0cad7faa1da8620e9c09461d443bbf6e6692 \
-    --hash=sha256:c97f080ea627e2863524c5af3836e2270b5f5dfff1f104392b959f8df0c5d384 \
+    --hash=sha256:d28630f5854ab07ab1fd4aba756de52326c82e6be15d414b12793f1975048b54 \
-    --hash=sha256:cb96698e3c7413d906ce83f8ffd245ec1bd94707541f299d0ce4d6b0193e982b \
+    --hash=sha256:d9c275eaacd24aa73f94ffd6de08fc3f932424d8b6c376f4bed7cde376fe7bc3 \
-    --hash=sha256:cbb7640ce37159548d2147b5b8c241f962143d4c71231431820783f4dc78f210 \
+    --hash=sha256:da0e573f9f97159390c89d9f1a9e41908b66d408cc5b58d08cf3847d844c531b \
-    --hash=sha256:cdf2448aab5f661c9315308ec8b93f4e8a1a67a3c733f8631067a2b67d5913dc \
+    --hash=sha256:dd31f52ea1086513bb9df30f8fcee9b8918323ae067a3d5b78bc826a000712be \
-    --hash=sha256:d2117334c3af3bdcb9a88522b844a2bdb5efdc4f71c6c822df55486ae1c3347a \
+    --hash=sha256:dddad92b554513a31f272570678ba307fb9f618f05e3d4a5eacafff9eae03e1d \
-    --hash=sha256:d53d10f7da99ae46f7373b9150393e9c5eab9b224909982b43832668de4779f5 \
+    --hash=sha256:df423d40ee8654634421812bc3b196da3f9bd7d32929da813f8394c4348a5358 \
-    --hash=sha256:d9fafc5aa2e2a39aaf7f8cc0c1f044a9b07fca12e558dca53a3cc5c654ad67a7 \
+    --hash=sha256:df913725b79db7bcf03448f36b7bf8815363417d5b58deecf9305e3e30f0f21a \
-    --hash=sha256:db3eb7d46527159a878ec3460e9d40615bc25ba337d477db681aea6e4f05c5d2 \
+    --hash=sha256:e0bcb7e0f677f543555d2adff3bf19c05f66cdb4796e5ff602442ab2fe3c4ef7 \
-    --hash=sha256:dbf7c7a88e2bac086f06d14577332760bdeecc42bdec8ac4077f6260557d9326 \
+    --hash=sha256:e2d65b31f36619cda3999b78b2aa9632e76b78448e7a56fc4240824200e7c4fc \
-    --hash=sha256:df2b82571a1b30f58a87bf4e5a9e78d2b1eff6c6ce8fd3aa3757221f93f0863f \
+    --hash=sha256:e6e8cff14d6fb0be70a09c0bdc58096f501952d04624ebf867e0e56da2df8960 \
-    --hash=sha256:df92f2aba50eb4d96718b68ef76f2e57a57b54f2fa62333496d16c6d585a85ca \
+    --hash=sha256:f16c709686a78c727bbbf059f92b0bf41c6fc60deec706d2dc19f529175a6125 \
-    --hash=sha256:eb4e8997a49aa2c08a3e43c9045d224448b8941d88e7ac163c7d383e560cbf98 \
+    --hash=sha256:f24fb43132a4c6b4cb4eb029492919b2db645be6808d738f244fd146c03c32cb \
-    --hash=sha256:efc1cdd798b1aaf39b4610bba7aad28c9bea9b910f25c784ccf9ec1fa719d1f9 \
+    --hash=sha256:f53e442b08449d42821fa4a4fba000095af9f62742a500f978a9f557ec44339a \
-    --hash=sha256:f146d154428a2523f9cc7936c02353c2459b8f6cf07d3cd1ee1c0a611109c5d5 \
+    --hash=sha256:f5cfbc5fe74540d335175b656c725d74d90e3730c626d92575eea35029d9afaa \
-    --hash=sha256:f5bce581e6b8c235e566a14768a943b172ada3ed73537bb0c0be1edee312d4e7 \
+    --hash=sha256:f81b3b8f3d4e343550fa4baa0e479bba9f2d29ce9c2e9b51d1ce1718d7442fcf \
-    --hash=sha256:f9912624a0c0b834b7520d7769b3644453aabc0a7e1c839da7359f050750e9bc \
+    --hash=sha256:f8ec5e643a9a937f64e1999eb9f75d072263751912dc5cd06d3c85f8f44be7c3 \
-    --hash=sha256:fb62edb5bb52cca65fab91a63afa7561607120d26090a7e8fda6fb9f064726da \
+    --hash=sha256:fb92203a88b3d3053034db775110081c49d28be6551923805e039924093761e4 \
-    --hash=sha256:ff067a8d8d880e7809e4ac88eb009bb848870115317b306666502ccad30b147f
+    --hash=sha256:fcd22650c908d7b7da162bbfaab594a1227a15d1643a98c68b122ac642fa2264
     # via cryptography
-charset-normalizer==3.4.9 \
+charset-normalizer==3.5.1 \
-    --hash=sha256:0327fcd59a935777d83410750c50600ee9571af2846f71ce40f25b13da1ef380 \
+    --hash=sha256:00668ebb0609751758682eb0b5857e7c35b9f00e84dfdef062e103244ec94d45 \
-    --hash=sha256:03d07803992c6c7bbc976327f34b18b6160327fc81cb82c9d504720ac0be3b62 \
+    --hash=sha256:012a22b88a77ca2e59b98ac5889b0deb604147666032f45e6d6e217634d2550d \
-    --hash=sha256:04ce310cb89c15df659582aee80a0603788732a5e017d5bd5c81158106ce249c \
+    --hash=sha256:01e93745f7f219b703b60ba7afead36cfc4242782be5af484673fc500df12da5 \
-    --hash=sha256:0d861473f743244d349b50f850d10eb87aeb22bbdcc8e64f79273c94af5a8226 \
+    --hash=sha256:04368edf83514385ffc3e1cfd4546e595f4f1272dd23ba437a93a9cc3741d47b \
-    --hash=sha256:0e94703ec9684807f20cfb5eed95c70f67f2a8f21ad620146d7b5a13677b93e5 \
+    --hash=sha256:0722590aabf9dc6a6c0343d523c05458fa2b5047dbe6302fd526bb570600753f \
-    --hash=sha256:0fa1aec2d32bcc03c8fa0f6f1712caad1adc38509f31142112e5c9daf5b9c833 \
+    --hash=sha256:07ffd07412fc5d5e84cd8952acf9ff7e4ed7a708e69d1bada19d8ba91711353f \
-    --hash=sha256:16b65ea0f2465b6fb52aa22de5eca612aa964ddfec00a912e26f4656cbef890b \
+    --hash=sha256:09a7bba9f739468c8e78c36a75c33768e53cb1959fc638f510454c14683f00d5 \
-    --hash=sha256:16d10d789dd9bcca1173c95af82c58433122564b7bc39385124be735a35cbe99 \
+    --hash=sha256:0b2b1b3fa5670c127b246df1d0c059defd41f689a868a3b9d79df9b1cac42d22 \
-    --hash=sha256:19ac87f93086ce37b86e098888555c4b4bc48102279bae3350098c0ed664b501 \
+    --hash=sha256:0c6dfb5ca6723eeed15aa8e564a014d69fcb8812f94eef11fe3631e0508199f5 \
-    --hash=sha256:1d22856ffbe153a602df38e4a5464f0b748a54002e0d69ac6d2ad0a197cc99ec \
+    --hash=sha256:0d929fc574b4d6fd9e7c0f5c2ede8716a41911923aa7fa5fce38e0818aa4a1ac \
-    --hash=sha256:21e764fd1e70b6a3e205a0e46f3051701f98a8cb3fad66eeb80e48bb502f8698 \
+    --hash=sha256:13e3afe97712e8887cd516e960c63f0b93122971e5b5e4b2622fe7701771e838 \
-    --hash=sha256:231ddcbb35e2ff8973e1365db41fe0572662893b99a05deb183b68ad4c0c8bd4 \
+    --hash=sha256:15f024313246a4ed976c60f440bb8d257815513a681d212ff74fd46f7d715a90 \
-    --hash=sha256:253a4a220747e8b5faf57ec320c4f5efb0cef05f647420bf267143ec15dba10a \
+    --hash=sha256:195ce897c6153c0700078142cf8efe3e6454ca4cf4357499e4078dfd83396626 \
-    --hash=sha256:280081916dc341820640489a66e4696049401ef1cf6dd672f672e70ad915aca3 \
+    --hash=sha256:19a3dd5aa73cef1c99687c4fc57db016a9c17104ae1185da88ba566a5d3bebe4 \
-    --hash=sha256:2a441ea71902098ffe78c5abe6c494f44160b4af614ed16c3d9a3b1d17fd8ee2 \
+    --hash=sha256:1d1c7a53a6c2103925cdd6d7229f8c567379f211c869793df679f2e9f738c369 \
-    --hash=sha256:304b13570067b2547562e308af560b3963857b1fa90bd6afd978130130fe2d6a \
+    --hash=sha256:1f5883d77fd409a261abb5dc8ccbe335720d798b1de4abb3b1d47ccbbc76b53b \
-    --hash=sha256:32286a2c8d167e897177b673176c1e3e00d4057caf5d2b64eef9a3666b03018e \
+    --hash=sha256:21b82d8082f6f5e7f456ef0bd16323d08de1266efbfeb476e64b2a91d1471a4e \
-    --hash=sha256:33bdcc2a32c0a0e861f60841a512c8acc658c87c2ac59d89e3a46dacf7d866e4 \
+    --hash=sha256:252d099029bcbea642f2a06c4ed5046bdf8b5a8150b64afa5e027e88b106e5ee \
-    --hash=sha256:375b83ed0aecfce76c16d198fbc21f3b11b337d68662bea0a995046682a11419 \
+    --hash=sha256:256dd4d85d9e4dc595e2bc983c980e73f62ddeb3165c58b4c3dfe78c5c8548c1 \
-    --hash=sha256:3c09a49d6cde137258beb3d551994a2927fd35ad5cf96aed573f61bbd67c5f84 \
+    --hash=sha256:26422d45fd13551cf564c58932f7d72b4f58b93b0fcf18c35ba6be12b46bb102 \
-    --hash=sha256:3d92613ec25e43b05f042302531ec0f00b8445190e43325880cbd6ab7c2581da \
+    --hash=sha256:2679de311c7946dde5d3b6f44941844133ff5c7cb86099c0061ab1e8901c20a8 \
-    --hash=sha256:40a126142a56b2dfc0aacbad1de8310cbf60da7656db0e6b16eebd48e3e93519 \
+    --hash=sha256:29880d17a8eb0b5cfdfd8944b468322928059aa35f1f5fa8ff22b149ec0b42f8 \
-    --hash=sha256:416c229f77e5ea25b3dfd4b582f8d73d7e43c22320302b9ab128a2d3a0b38efe \
+    --hash=sha256:2bced4061f000f7187254a02ad3433ae17eaf991747ceea2f478422590a5bba9 \
-    --hash=sha256:432786d3561e69aeeae6c7e8648964ce0ad05736120135601f87ac26b9c83381 \
+    --hash=sha256:2e9cf9253119d8e5d111f05d71626786fd3d6193817316eab1ca088cdb8593cf \
-    --hash=sha256:43b9e366a31fdd1c87d0eb08f579b4a82b723ea54338f040d6b4e518a026ea29 \
+    --hash=sha256:2f06b7eae9dbe77fe1d644ca244dad508de8d302870a43f3c559b521270938a0 \
-    --hash=sha256:440eede837960000d74978f0eba527be106b5b9aee0daf779d395276ed0b0614 \
+    --hash=sha256:2f293479cce755c75f1697e87c409b7ae4c555c7dfecb6e988ad13abba943031 \
-    --hash=sha256:45b0cc4e3556cd875e09102988d1ab8356c998b596c9fced84547c8138b487a0 \
+    --hash=sha256:329fc3ccb63ad22d867d84c2adea759a64079a37ba4a343433b02c7a2816871e \
-    --hash=sha256:476743fe6dfe14a2da12e3ac79125dc84a3b2cf8094369a47a1529b0cd8549fe \
+    --hash=sha256:343fb4f2821043bd87095f7b08a1a181febc8e36ac64212143bbfd0a0e1bc235 \
-    --hash=sha256:4773092f8019072343a7447203308b176e10199920eb02d6195e81bbb3274c29 \
+    --hash=sha256:3588e376b3ea2eea84976f67273d679f229e24c66dce7b82ae45aef04ff6e072 \
-    --hash=sha256:4b3dac63058cc36820b0dd072f89898604e2d39686fe05321729d00d8ac185a0 \
+    --hash=sha256:35aea775dc2bd5f54cd84a1cd2696cc3207c479cb9cf0bd346f0d343e4300ddb \
-    --hash=sha256:4d1c96a7a18b9690a4d46df09e3e3382406ae3213727cd1019ebade1c4a81917 \
+    --hash=sha256:35fe081843b35aad20ffeccec3eeffbe637b15d14f3fb22cc1b59cd8ec17e93c \
-    --hash=sha256:51307f5c71007673a2bf8232ad973483d281e74cb99c8c5a990af1eefa6277d9 \
+    --hash=sha256:36047af20e17097c3bb9476c2b7655f2f7aa51322c0ba58c07695bedf755a950 \
-    --hash=sha256:51447e9aa2684679af07ca5021c3db526e0284347ebf4ffcec1154c3350cfe32 \
+    --hash=sha256:3617ac3cfd8b9888f145ad89dd6e692285834b0201c6074a5eeaad3fd4d668c2 \
-    --hash=sha256:58150c9f9b9a552505912d182ccdf26f6396fb6094816ceebcbb20eecabaed94 \
+    --hash=sha256:366ec70f5547c640d3ce1985722490f23faf4eb5216a7eeba78277490e78dacb \
-    --hash=sha256:5b10cd92fc5c498b35a8635df6d5a100207f88b63a4dc1de7ef9a548e1e2cd63 \
+    --hash=sha256:394fea06235c8543390050ed5f529187074b029fb027213f6c46ac11ab5d950e \
-    --hash=sha256:5e226f6218febc71f6c1fc2fafb91c226f75bdc1d8fb12d66823716e891608fd \
+    --hash=sha256:3d27167433c0d5f18dc850f07d0b3816221984fecdc405d6c157a6f0b8f8e9e6 \
-    --hash=sha256:609b3ba8fcc0fb5ab7af00719d0fb6ad0cb518e48e7712d12fd68f1327951198 \
+    --hash=sha256:3e5e1224c0a6a90e05843e07adfec669edebec17801c67072f51e59561d63c0b \
-    --hash=sha256:60f44ade2cf573dad7a277e6f8ca9a51a21dda572b13bd7d8539bb3cd5dbedde \
+    --hash=sha256:41876ee62a3dddf48ff1121ad8f0798032aa03f2fd35f21f34a4cab14f18d8d2 \
-    --hash=sha256:611057cc5d5c0afc743ba8be6bd828c17e0aaa8643f9d0a9b9bb7dea80eb8012 \
+    --hash=sha256:433c5a81eade63b47e522303bad236f59dba55ea6951746f5558355eeed8c75d \
-    --hash=sha256:6366a16e1a25018694d6a5d784d09b046edc9eac40ea2b54065c3052672516a1 \
+    --hash=sha256:4582c27e8c889d64811987b5967fbd3ae0c823fe1fd933b543d55ac20bb475fa \
-    --hash=sha256:65a7ff3f705e57d392f7261b6d0550fe137c3019477431f1c355e0db0a7d3e15 \
+    --hash=sha256:485a0d363cafefcd2538a73c7c838daa2035f09b2c9f9b5e3133f80c6aeb84c2 \
-    --hash=sha256:673611bbd43f0810bec0b0f028ddeaaa501190339cac411f347ac76917c3ae7b \
+    --hash=sha256:494b70049a4d69aec6e8137c13af4cf8db8c9f9820a1392ac293b0dd2987a818 \
-    --hash=sha256:67830fc78e67501f47bb950471b2dcb9b35b140084429318e862895a8e89c993 \
+    --hash=sha256:496846868fea80e479324862fa877f02411f2fd0f83b79ccee2607aa68b2a032 \
-    --hash=sha256:68ce9f4d6b26d5ccbf7fd4459bf75f74a0a146677ebba80597df60cbdb20e6f4 \
+    --hash=sha256:4abdc5f9ad448c1ecbfae2974b820535d6bc6e7eef63babbab3d81cf46968c71 \
-    --hash=sha256:68e5f26a1ad57ded6d1cfb85331d1c1a195314756471d97758c48498bb4dcdf5 \
+    --hash=sha256:4b599739b93b2cbeded49645ae3c8d1405c29ddfbceac1545c87a3f9580a9e96 \
-    --hash=sha256:69b157c5d3292bcd443faca052f3096f637f1e074b98212a933c074ae23dc3b8 \
+    --hash=sha256:4bea7f8ebe90bbd7f0e4a2de42ca6924ba23e3e76418c408ff82f1d46fabd687 \
-    --hash=sha256:75286256590a6320cf106a0d28970d3560aad9ee09aa7b34fb40524792436d35 \
+    --hash=sha256:4c4fb141a727957c93edfe5c32a26ceb6b5f6461d67146e2d39f51e16170bea8 \
-    --hash=sha256:78841cccf1af7b40f6f716338d50c0902dbe88d9f800b3c973b7a9a0a693a642 \
+    --hash=sha256:4c9548dc78002099910abaebc0a72ac58b7d30931869e0351c09b507dff4ece3 \
-    --hash=sha256:78fa18e436a1a0e58dbd7e02fc4473f3f32cceb12df9dfca542d075961c307d2 \
+    --hash=sha256:4d26f14f041e83dd8edfd61f4cd4fa7285d31798b5bf1f28e70c367ba6c41d61 \
-    --hash=sha256:79580094b00d1789d1f93ea55bc43cb2f611910c72235b7657f3482ddcc1b22d \
+    --hash=sha256:4f298bdadb8f0b9e5672877f647d1be9373ef5320c9e2f049795e26cad28b6a9 \
-    --hash=sha256:7b86a2b16095d250c6f58b3d9b2eee6f4147754344f3dab0922f7c9bf7d226c9 \
+    --hash=sha256:52ec005752a56ae79547a05c0139ca2501a0c866390b6115008456b9f0e7cde1 \
-    --hash=sha256:83aed2c10721ddd90f68140685391b50811a880af20654c59af6b6c66c40513c \
+    --hash=sha256:55261ac0d2941c42f196dd576f543d87a8ee03cd6f5e30dfb4d807b2e3b9121a \
-    --hash=sha256:84fd18bcc17526fc2b3c1af7d2b9217d32c9c04448c16ec693b9b4f1985c3d33 \
+    --hash=sha256:56490c595a28b1bb27dfc583e816152a9767721ef58b2c03b13f954d2f707420 \
-    --hash=sha256:871ff67ea1aad4dfd91736464934d56b32dac49f9fbe16cddba36198a7b3a0db \
+    --hash=sha256:58d3e12c88e0950bca850ae1f7c256055c097639c2edb9eb123af9807d8b15e4 \
-    --hash=sha256:898f0e9068ca27d37f8e83a5b962821df851532e6c4a7d615c1c033f9da6eedf \
+    --hash=sha256:58d4aa13a59c969dbfdf9e6a9560e242cbfd9e8a8f50c2747714df1a423adf65 \
-    --hash=sha256:8a79d9f4d8001473a30c163556b3c3bfebec837495a412dde78b51672f6134f9 \
+    --hash=sha256:59171c6e45bf07d0d5cab3b0bf81d945035530f6873398b3b531c31184d46663 \
-    --hash=sha256:8c041122946b7ba21bb32c45b1aa57b1be35527690aeb3c5c234521085632eee \
+    --hash=sha256:5b6d1386bf0096d26d3a863dc0a487a5b4eb9aa93cf5ba69683d29dde6b9d60f \
-    --hash=sha256:90c44bc373b7687f6948b693cceaea1348ae0975d7474746559494468e3c1d84 \
+    --hash=sha256:5c0ea61a470e070686aa30892fed79e297d2c8d0ab46b8bcdf027d38c51da591 \
-    --hash=sha256:9104ed0bd76a429d46f9ec0dbc9b08ad1d2dcdf2b00a5a0daa1c145329b35b44 \
+    --hash=sha256:5c84bec0ab5ae0c64bfe73a7d2adcb5ce73b467523fc27fd6a28ab2aa6cbe35a \
-    --hash=sha256:920079c3f7456fa213e0829ed2073aaa727fd39d889ead5b4f35d0de5460d04f \
+    --hash=sha256:5ca0555312ae2fe82715cada7fac375530c2f3349e1eaa1bcb33d0283ac79a18 \
-    --hash=sha256:93d59d504b230e83c7a843251681959a0b6a9cd76f6e146ce1b8a80eb8739af9 \
+    --hash=sha256:5d8531a6569d025f68e2321e7638fb7978f23db58e5f69f56913837aae03816e \
-    --hash=sha256:9b2aff1c7b3884512b9512c3eaadd9bab39fb45042ffaaa1dd08ff2b9f8109d9 \
+    --hash=sha256:5e2d0e146dcb57034f8b97dc58d2d512cb90aba253960ce449f695fec6a82c6f \
-    --hash=sha256:9b8e0f3107e2200b76f6054de99016eac3ee6762713587b36baaa7e4bd2ae177 \
+    --hash=sha256:5fc45d653ea8c9a20479167e11d4a0f8cb2fa3470737ab6f9c827532313187b7 \
-    --hash=sha256:9bb41182d93ea91f60b4bc8fbf4c820c69ef8a12ab2d917f3f1834f1acad07e8 \
+    --hash=sha256:6117b84ea48435e5356dc737f5121485c30920ba43375fa7b434fd753df0eac3 \
-    --hash=sha256:9cdef90ae47919cae358d8ab15797a800ed41da7aba5d72419fb510729e2ed4b \
+    --hash=sha256:6199d5606e2bbf2b096cf64d03f8b6790c91081d5ac866b8e7bb6422738cc60c \
-    --hash=sha256:a1786910334ed46ab1dd73222f2cd1e05c2c3bb39f6dddb4f8b36fc382058a39 \
+    --hash=sha256:62b55f6722735a6c472f88361cde6640608773d9443cebdbb51abf436a1fcdd3 \
-    --hash=sha256:a4cfde78a9f2880208d16a93b795726a3017d5977e08d1e162a7a31322479c41 \
+    --hash=sha256:687c9ca3035544b113bea2055e180af96fb63c0c476e22a9180f51925186e7b7 \
-    --hash=sha256:a4fbdde9dd4a9ce5fd52c2b3a347bb50cc89483ef783f1cb00d408c13f7a96c0 \
+    --hash=sha256:6b7430cf5728e68f6c462254009a6ef4086e1bea43cf2f57aa9c55fb4f50ff96 \
-    --hash=sha256:aa99adc8f081b475a12843953db36831eaf83ec33eb46a90629ca6a5de45a616 \
+    --hash=sha256:6ba32c4d2abf1d2fe7cf27d280f4cca5664233b0f885549c7761719eb977f486 \
-    --hash=sha256:ac351b3b8014eead140e77e9717e2992c6bbe30b63bc3422422eb84865412e3d \
+    --hash=sha256:6c9cdde8becb25a7fde49924511aa2644d6f8081cc8df8e9452724303348d8e3 \
-    --hash=sha256:ad41ba96094304aa090f5a30cb6e4fb3b3f1c264c523394b4c39bbacc4dc92ba \
+    --hash=sha256:6df0ec430f9a831772c23ca5a224cba36517a58a84bb32c32bb59a9fa67c47f6 \
-    --hash=sha256:b5314963fce9b0b12743891de876e724997864ee22aa496f903f426c7e2fa5b2 \
+    --hash=sha256:6e2912d4babbc65196ac13c2f53468dc57fb8b9c25ef913e8c59ddf7c6dc0e1b \
-    --hash=sha256:bcf74c1df76758a395bf0af608c04c82257523f55c9868b334f06270d0f2112b \
+    --hash=sha256:6e5e4d73d588ca5ed09df1b7dcd1b203d1df3c542e3f50d126c947d432b10731 \
-    --hash=sha256:bd47ba7fc3ca94896759ea0109775132d3e7ab921fbf54038e1bab2e46c313c9 \
+    --hash=sha256:70055ff39b97c99e7ae40ea3e393fb62aa2e44dbd9b29f8d14f42fb0025c3959 \
-    --hash=sha256:c0323c9daef75ef2e5083624b4585018a0c9d5e3b40f607eed81a311270b934b \
+    --hash=sha256:706bfd38730a5ac7a365793269a00f4e988178cec121391f4248d84ad8c972e9 \
-    --hash=sha256:c1225416b463483160e4af85d5fc3a9690ccb53fd4b1865a6437825f5ede3209 \
+    --hash=sha256:7235dc28fc6dd9d832ac7c7bce95367dedb85929f17368a0c2bee1e080b9acbf \
-    --hash=sha256:c1c948747b03be832dceed96ca815cef7360de9aa19d37c730f8e3f6101aca48 \
+    --hash=sha256:774d157f112367ff4abd29019f38f023c24e00e56edc7829c20e358a5a913ad8 \
-    --hash=sha256:c25fe15c70c59eb7c5ce8c06a1f3fa1da0ecc5ea1e7a5922c40fd2fa9b0d5046 \
+    --hash=sha256:77efcff2b23071c349402ac1066667a3d011f62398d81408c9b88ad991747c9e \
-    --hash=sha256:cc1b0fff8ead343dae06305f954eb8468ba0ec1a97881f42489d198e4ce3c632 \
+    --hash=sha256:789b8982559ae28dad2356519f841655756cdcd96616410590ae0b17454ee64f \
-    --hash=sha256:cd6280cf040f233bd7d3407b743b4b4c74f70e8e1c4199cb112a62c941c0772a \
+    --hash=sha256:7ac76cf9afd34929d76eb7fcb63be476a4853d8a96f0dcf2d0db68a0cbdf9885 \
-    --hash=sha256:cd6c3d4b783c556fa00bf540854e42f135e2f256abd29669fcd0da0f2dec79c2 \
+    --hash=sha256:7c0c10730342b0c9b35dd1d619beb8214e520bd96a1f870f452680b238aab3e0 \
-    --hash=sha256:d4d6fcde76f94f5cb9e43e9e9a61f16dacefd228cbbf6f1a09bd9b219a92f1a1 \
+    --hash=sha256:823f82903d189af463d7df250ef1f7f696f3cee08cc8d91deb565e8d425f6506 \
-    --hash=sha256:ddf4af30b417d9fe16481e9b81c27ab2a7cde1ff7ba3e85653b02db7d145dc7b \
+    --hash=sha256:838648accb3a7fd9803fd45c87bce8509648eb0c11bc34e216141300977244f2 \
-    --hash=sha256:df115d4d83168fdf2cae48ef1ff6d1cb4c466364e30861b37121de0f3bf1b990 \
+    --hash=sha256:854066be00447fa8de2ccbbe893e2ffc4b123ef16d897af794c1e18bd4a714b0 \
-    --hash=sha256:df7276909358e5635ae203673ab7e509ddd224225a8d6b0790bf13eb2bde1cc5 \
+    --hash=sha256:85d5855daafc240cc045c026d7a15fd198a09b0fc8ff6f5ecbb5297b509cb11e \
-    --hash=sha256:e4fd89cc178bced6ad29cb3e6dd4aa63fa5017c3524dbd0b25998fb64a87cc8b \
+    --hash=sha256:85de3134b5379856e323ba37c19c9256d39425f7b76a63af52b09fb4664c2e8f \
-    --hash=sha256:e9701d0049d92c16703a42771b98d560b95248949f23f8cf7b4eddd201814fb9 \
+    --hash=sha256:87e4f41d375c0b9be2fb5251aee4b8a689169e134535aed81bf085c3b647451e \
-    --hash=sha256:ee2f2a527e3c1a6e6411eb4209642e138b544a2d72fe5d0d76daf77b24063534 \
+    --hash=sha256:88ca277405c2d3b71c4e1c2ee0e7966e807bcba86a69d11e19ba199d18ae4491 \
-    --hash=sha256:f7fb7d750cfa0a070d2c24e831fd3481019a60dd317ea2b39acbcebc08b6ed81 \
+    --hash=sha256:88e85ab89cb822c1e635f51d6d32e488f94e002e70e2f492bdb8b945543f345a \
-    --hash=sha256:f840ed6d8ecba8255df8c42b87fadeda98ddfc6eeec05e2dc66e26d46dd6f58a \
+    --hash=sha256:8ac8c94b6539074e0f40899301273ac8402b9b3e01c7b7ba269ff30340aaaf20 \
-    --hash=sha256:f86c6358749bd4fda175388691e3ba8c46e24c5347d0afd20f9b7edfc9faf07d \
+    --hash=sha256:8fe532b3c966d1fb794e0698e4589d0444017ae77fc0b31edea13c0e35bcc449 \
-    --hash=sha256:fa36ec09ef71d158186bc79e359ff5fdd6e7996fe8ab638f00d6b93139ba4fcf \
+    --hash=sha256:9085f87b0e38a2b92b8923059b4e8789fe40d9279712d15dcc670048d77079af \
-    --hash=sha256:fe2c7201c642b7c308f1675355ad7ff7b66acfe3541625efe5a3ad38f29d6115
+    --hash=sha256:90b7481fb62fbe172c558bc6fd1c4c98d82004a54a7551f20e11ac9bf0b8708c \
+    --hash=sha256:92caef967d287a407085d61176fce4012b1dd62daed4eb6d5ceb26d3d2538712 \
+    --hash=sha256:9362dd90aa7dab48c0054a21187791ccf05473f7dba5d92b8033ae62164675e7 \
+    --hash=sha256:94d78ecec2605a8d0398b0f365d5f12a63248438516f5dac536a5eff7337df4a \
+    --hash=sha256:94fbf1c0c6cc0d3d5e50f9a9313a8cdca90dd696d34b381cd1704f8c9e939f20 \
+    --hash=sha256:950f23cb393f85543777b0433f082cddd25b51ab398eac7971146495679efe5f \
+    --hash=sha256:96eefc178f8636b9c760c5829345307fd81cfae9ab1e80997dbddeb0f54ee9a3 \
+    --hash=sha256:96fef3e886d6a9874b14f27fc193fbdc69d5d8035783d86aa4e1cea594e695f9 \
+    --hash=sha256:977cdbd483a9cff38179bea4fd754289a6f2195c7abd414aba85410b3e66cc5e \
+    --hash=sha256:978eab16f55b4ab2c2a745be9a0a840bf8f09a7f227d9c76eb30214d078865a5 \
+    --hash=sha256:994e883d17c559cdfd38c84003c8b27d25424a1077272a17e7cd27bfe0bf57b2 \
+    --hash=sha256:9ac4444d8d4fd4c4bd08bf451ed3167aa9e7ec6cdb41b648794f1d1103652e36 \
+    --hash=sha256:9b5db6052055d34d41230fb78d7c439c23dc536a9896f6cb039e8dd92cfc1263 \
+    --hash=sha256:9d9a0dc7cbe9bec24c3f767c9122c41fe5a1bc43f47cd099d00d393e09769de4 \
+    --hash=sha256:9dbdd9205662134957cf0c324f639bdc5031c0ca056e2369e238db75187c0f11 \
+    --hash=sha256:9eea3ab2597a5e65fe65296e2d6a84570845a6b55532d90333d740d48bbc850a \
+    --hash=sha256:a2028475ba855475b8b4d3cfeb4994269c967aea8b9892dfba907f4263a863a3 \
+    --hash=sha256:a3a370082ce34d0612f421e15fe011c53bb1feff21a26d06ad4fb244dab5a375 \
+    --hash=sha256:a545775cfe815855ea32d7c27731d79da358ef2055b4a25830231b1622dd18aa \
+    --hash=sha256:a5cbd90ecf0fc62e64726917ad083b73001f0563657a87ec3c0b504e277dc90d \
+    --hash=sha256:a6d095662e73e74f0a49988e0593373e243e3a52e27bfeea0a859e88acf4a0f5 \
+    --hash=sha256:a6dac12ff6b846103483683f60c5f8fee205121adc58ffd87e90a90a3af69e99 \
+    --hash=sha256:a951ad59cad9145664a730d3036b40b844e74d2d3683da40111463cd3a83845d \
+    --hash=sha256:aa1099b956fb795e686d073568f6dc002a0bb89765ea6d5b055dd7d9bf1b116c \
+    --hash=sha256:aa2bb0b37202dca27175591f761108b5d34096ade1191ffe4808bdf6b1571488 \
+    --hash=sha256:aae2ee51122d3ae968a3837d97dc24a0aeebb0dea23694422cd172bd30017cd6 \
+    --hash=sha256:ab743e9bc90c1f73552ec33e10e3331315acd2c397b36065b591b0181de533cc \
+    --hash=sha256:ac00177c4831ffa650f8609e4bdddd5fe09c03b1c0c47acece7e6ea20421598b \
+    --hash=sha256:ac13b004224fb341e1e25a1ed5e19d32f57cdb2a403e01f003b46f051a550f6f \
+    --hash=sha256:acaf604462bf330b0d07e7a07c1d6e4adac79e5fb13e9c5140590542cafacc00 \
+    --hash=sha256:ae31a1a1db2ee6cc2942fccaf695c934bc7f3db9f2133a3fef1f367cf1a4ab10 \
+    --hash=sha256:ae4a097991662cd4fff0ddc74e0fe7874f82e00042fa0ea00855645ed0c79598 \
+    --hash=sha256:aea996a6aba25260827c9ea511d1addfde2da9eb686ac961838509086188b7e6 \
+    --hash=sha256:b39b69b347e5e47a3b5b8cfc005c68c1ba347474e3960236c4944a8ecd174962 \
+    --hash=sha256:b54e7e13267d49ffbfe68e25b3cbd774dab38fa37238f71265e91b36146eb21c \
+    --hash=sha256:b9af956078716df40d985fb0dfeb2c2120c5ca92ba4ff4b388acfd01cdc14d08 \
+    --hash=sha256:ba2f37ee79e6338845261a3c5b1784e5d1acdff2c0785b284f1b633033d136ab \
+    --hash=sha256:ba501e667c17d8411f98e67a022d9604ef179aff0e459b7e292c796837c13573 \
+    --hash=sha256:baf3775a2635e5a11fbd5e4e64ee69c7e86875d224a5c72aca4c141064589a90 \
+    --hash=sha256:bb57753e36e4855b8ca375069482250a6246372331a3e4f3407eaebb007443f5 \
+    --hash=sha256:bd6c173f04743d483881bffa1478d5a4624475b8cd1d2194956a75548e191c18 \
+    --hash=sha256:be47f99644b208bff7766314013f9acf57b056b04191d570d68ad14022cf5b1d \
+    --hash=sha256:c010f5581d9c612804cc59fcf7b524b707fbcb72828551237ab545bb5c7034af \
+    --hash=sha256:c1dcc36dcb96abc02236e182d17e0f71430152a6c2c7447421da2d2dc144edea \
+    --hash=sha256:c428c6c31eb5f4277d7f8eccaf767fbd548ddd5ce3c8b4f4cbbfab3d96b5904c \
+    --hash=sha256:c658c50ac0c98cd755a2dd50b7977d3bca7df401dcc47fbdfa87db53ef7d4e8b \
+    --hash=sha256:c71fb0d56c920c269cd3e2e3fe7c610e3f1fdb21a6ce60efa6430ff63676cea6 \
+    --hash=sha256:c7b742bf31c88566b4bb6335a7f393bb322e580b6bb98df7bd0c25e6e3519ce8 \
+    --hash=sha256:cc0329df4caaceb950d2f580b5ac716a377f7059624a0bafaeaf8a218c6ed774 \
+    --hash=sha256:cc5d36d96478aa9c60654bd932525bf32964c62a7281eafdf16d85003a8d6004 \
+    --hash=sha256:ce854f5f478050ade5a238731c4ca985a7d3b3cb53ff600a9b5c3b689b5f0a7a \
+    --hash=sha256:ced3fdd71aaa83ce593746c2edb42b7a59cb4c19c8b5c407781c72e493aae55a \
+    --hash=sha256:cee5dd7c6fb5dd52a0fe2a740f9bc6e3593f5f8b1788bde49de02086f30182b2 \
+    --hash=sha256:cfa1c0cc3a8f9f53f1243a5a99ac36fd003880199383b37672e86ddda9cb07e2 \
+    --hash=sha256:d1ee1e296209fdce05b81b663250eefa02213a2da7b41bf26f7829b8ba3545aa \
+    --hash=sha256:d59b75732e9b6f27388e10c14b0259cc5f2e48c78627d185e6a177b58ad3cffe \
+    --hash=sha256:d63600d620ad0064c3a748b950ac5ea38a80190e5498532efefa4b7b3f1da1f3 \
+    --hash=sha256:dd732602a7009217f658d5863d12d79d373a4de0eebc111094bcdd3bb8e0a6cc \
+    --hash=sha256:e06efa066f7dbadbc84ebc126a97c452a6451dfcf589d89d788484949e1cf795 \
+    --hash=sha256:e199fb99720074809a7720f1c0b4d919eea8b87e88713e0f8f602f7bef543d9d \
+    --hash=sha256:e4b018dc5a0eee4676e38fe84a47a427816c590b93b55d9025274ec4d6ffc2dc \
+    --hash=sha256:e6621fb2a4988d6e53eedc455e5903e2679f3967b8acb3d639f1b63c14a2e893 \
+    --hash=sha256:e71c909f353863b2b89c83de2ebed71ea6d0df8a6ef65a128193c5e650766bef \
+    --hash=sha256:e90251c0c7bdd54a100a0dce3c07b7e637278c93af29dbf78ebb89a58c4bac7d \
+    --hash=sha256:e9fbdce1e47394b09bc9f26ab117dfc8d6491977a11d86f592bb42c779db2fda \
+    --hash=sha256:eb12fb2ba69ffa05f8695f61c69e591dc4b4a12ac3757ac8af8adb259bf56d17 \
+    --hash=sha256:eda059b6bc8bc0812d626fd91a7ce01bf583df0a61296eff390fd94141a34e30 \
+    --hash=sha256:f03ac127268b43ef4fe9e6ab6794a6794b49485a0cc0c1db79876d2f33f75bc7 \
+    --hash=sha256:f298e218441525d3794428b4c8b8fb8662c6d3ea79925d4807ee6b9a96a3bca5 \
+    --hash=sha256:f5542f9b941279d82d41eb0aa9f98eba36fe4df5c7086c651df7944935b37182 \
+    --hash=sha256:f6f7deae3feb4edfa2efaf7c574fe88cbf055038a6abdb40188e4fff66d5699f \
+    --hash=sha256:f9b1e28d0e8dbfa858abdba91d6b547beaf2df1a59bec6da6faae7b96a4991a9 \
+    --hash=sha256:f9f8405c2c758532c74fed975dbee57be1f31a6e865c031870c79a6ed3212ada \
+    --hash=sha256:fa48b1b63d639f9483e0633e092f5851e2348c352f1f9bb6c8182f87884ef876 \
+    --hash=sha256:fb78f6e7fcd8ad785d28cd577168bc1aaee827b25bb8755638f694794ea98f0a \
+    --hash=sha256:fbc597639158fd7c14d55e808718848319540f51b0e6746e3eefa59723a4a348 \
+    --hash=sha256:fce8cbd4997efeb450bd298b54f755dcdff18d496f7a5ddbb4867c6d7c88fdc3 \
+    --hash=sha256:fd0350afdc3aabd5576f60ea109228bd5538139713c7b094c5cd27c73a98bc6f \
+    --hash=sha256:fd0a274c0e5f9a21565cd9d3dd749b61f96b7aa1e20a93aa1ba4029518f2e5c0 \
+    --hash=sha256:fdb8a068947befafba9952162645dc2fecaeb400e64584829ed5e9b2fbe21a7f
     # via requests
-cramjam==2.11.0 \
+cramjam==2.12.1 \
-    --hash=sha256:028400d699442d40dbda02f74158c73d05cb76587a12490d0bfedd958fd49188 \
+    --hash=sha256:008930cffbdfd2a18c4697bb61c896d7377f8c487c717ab98d9e6f6d4dec74c9 \
-    --hash=sha256:033be66fdceb3d63b2c99b257a98380c4ec22c9e4dca54a2bfec3718cd24e184 \
+    --hash=sha256:00a25d19ce07fd1b61c6bd0baa37075d28a04189c7f3788ae57d0e04a4a53106 \
-    --hash=sha256:03a7316c6bf763dfa34279335b27702321da44c455a64de58112968c0818ec4a \
+    --hash=sha256:0166c41fa7d2f983cb4a5ecc324c48642bb6b60aa6a8651ad08a17e3f9189049 \
-    --hash=sha256:045201ee17147e36cf43d8ae2fa4b4836944ac672df5874579b81cf6d40f1a1f \
+    --hash=sha256:02f3a775664c0330092012e23abeaf207778da90313e17986659ab437444bac8 \
-    --hash=sha256:04cfa39118570e70e920a9b75c733299784b6d269733dbc791d9aaed6edd2615 \
+    --hash=sha256:03fdeda1720ad18f36dd18774e17080e07edc6bbefbccfaeae0b8f59ccb1dca9 \
-    --hash=sha256:092a3ec26e0a679305018380e4f652eae1b6dfe3fc3b154ee76aa6b92221a17c \
+    --hash=sha256:05085e6d5a834c5c206fdead7caa1ef6f38fd24a44b8fa2e00c8f29726b3132f \
-    --hash=sha256:0a70ff17f8e1d13f322df616505550f0f4c39eda62290acb56f069d4857037c8 \
+    --hash=sha256:054ee4a23680acca4419e3303e79b41278d9dbe187f833c98ffc66cc24f10a05 \
-    --hash=sha256:0cf1b5a81b21ea175c976c3ab09e00494258f4b49b7995efc86060cced3f0b2e \
+    --hash=sha256:09ba4e60d8d7b18858966552bd5f8ea16425be634ffd31ed3b087cc17be32aff \
-    --hash=sha256:0ee47c220f0f5179ddc923ab91fc9e282c27b29fabc60c433dfe06f08084f798 \
+    --hash=sha256:0f31c95f4e2ca5c7a1af055046cffa5bfac8b437fdb251ef9aa859bfd500a9d0 \
-    --hash=sha256:11eb40722b3fcf3e6890fba46c711bf60f8dc26360a24876c85e52d76c33b25b \
+    --hash=sha256:11437b53e8dd41024841c2c00cb1f9bccb0293f75cbd45ccea8a4c82d5d03784 \
-    --hash=sha256:13240b3dea41b1174456cb9426843b085dc1a2bdcecd9ee2d8f65ac5703374b0 \
+    --hash=sha256:140e6427ba2fc57bb03b9b60b8e306217490328868320a49b94c7edda5e647f3 \
-    --hash=sha256:1789a057b6d09acf112c1c84701fc03ba5cc0fcf2ada786ce02a7e73dd466ca5 \
+    --hash=sha256:1a04c8fd5530cece11f7f6562a7b6646201a6cd2d334daf99b1be1ab2a32f0a7 \
-    --hash=sha256:17eb39b1696179fb471eea2de958fa21f40a2cd8bf6b40d428312d5541e19dc4 \
+    --hash=sha256:1ff538a7792f79d1332f592e044f779dbbc1398a09769821791e4f287c3c3075 \
-    --hash=sha256:193c6488bd2f514cbc0bef5c18fad61a5f9c8d059dd56edf773b3b37f0e85496 \
+    --hash=sha256:2070ab4e49a0e55593cf4e92f94a9c276913e0d987af4ceb153a090861566333 \
-    --hash=sha256:19eb43e21db9dc42613599703c1a8e40b0170514a313f11f4c8be380425a1019 \
+    --hash=sha256:20d8e2a9a11bc9a9028fffb72c8fe001c4ff2665b028e390ecc0572859d77d93 \
-    --hash=sha256:1c6cea67f6000b81f6bd27d14c8a6f62d00336ca7252fd03ee16f6b70eb5c0d2 \
+    --hash=sha256:25f4870ce08440d7918e7105f48ea93cb0ffebbe458212ab6aef82c91451832c \
-    --hash=sha256:1d77b9b0aca02a3f6eeeff27fcd315ca5972616c0919ee38e522cce257bcd349 \
+    --hash=sha256:28d28ea81661d0c75d0b8be1b31242ef2b7a042bcd51454981353fcf882e019c \
-    --hash=sha256:1e2400c09ba620e2ca91a903dbe907d75f6a1994d8337e9f3026778daa92b08d \
+    --hash=sha256:28efcc63ade34a177d8a60cab6f1b3a69424bfbc9583f96f65a9aa1f464e5cbb \
-    --hash=sha256:1f6449f6de52dde3e2f1038284910c8765a397a25e2d05083870f3f5e7fc682c \
+    --hash=sha256:2b5f9cb05ac9b4a4a42331c3422265f4b1291a110c8cd4740085f0e5551e8227 \
-    --hash=sha256:1f71989668458fc327ac15396db28d92df22f8024bb12963929798b2729d2df5 \
+    --hash=sha256:2e681c732d0370982f88695895f37be5a3f3a89475083a0f431bc1ce859b7396 \
-    --hash=sha256:20c8684d2a693e3052532b9730d4399ba2ee212cacf3b961349aad35d13b0c8c \
+    --hash=sha256:2f7e8960f8abc9c908a72690f17c16c214a63bba0f5e81b9f0d937b7ec191f18 \
-    --hash=sha256:244c2ed8bd7ccbb294a2abe7ca6498db7e89d7eb5e744691dc511a7dc82e65ca \
+    --hash=sha256:343fba082fa90b97f46d37430cbdef8954388e8df9754221193f70707cab7b98 \
-    --hash=sha256:24758375cc5414d3035ca967ebb800e8f24604ececcba3c67d6f0218201ebf2d \
+    --hash=sha256:348e2bba38fa475852de524793bb5fb899cfee22c7999291eb8faf79f79c9b37 \
-    --hash=sha256:2581e82dca742b55d8b1d7f33892394c06b057a74f2853ffcb0802dcddcbf694 \
+    --hash=sha256:35eb2c91a1859fe33dbf9debeb6b4d4fa208bfb2cb42647f8319d1e783f0eee5 \
-    --hash=sha256:261e9200942189d8201a005ffa1e29339479364b5b0013ab0758b03229d9ac67 \
+    --hash=sha256:36a385c11e456fdd8dfc5d981293b377cfba2a222f296f9174160515afc67e46 \
-    --hash=sha256:26cb45c47d71982d76282e303931c6dd4baee1753e5d48f9a89b3a63e690b3a3 \
+    --hash=sha256:377ca108d47cca68c99517a4e3f194c2f3d791f99950c44646b1a96a1a4b83e8 \
-    --hash=sha256:28952fbbf8b32c0cb7fa4be9bcccfca734bf0d0989f4b509dc7f2f70ba79ae06 \
+    --hash=sha256:3d1888fdbd7ca1d6d96395e50bccdeb0116084c0cd228960e261a7fc8dc808f0 \
-    --hash=sha256:2c289729cc1c04e88bafa48b51082fb462b0a57dbc96494eab2be9b14dca62af \
+    --hash=sha256:3dc304c9dc93b762bb7be076506c2c155443272c0b7e9070d06be85bfc16dadd \
-    --hash=sha256:2fa2fe41f48c4d58d923803383b0737f048918b5a0d10390de9628bb6272b107 \
+    --hash=sha256:3e6c1dbc80df326377f02695d10ebb53177dbf7922769c8f437c0fec89fbc93c \
-    --hash=sha256:309e95bf898829476bccf4fd2c358ec00e7ff73a12f95a3cdeeba4bb1d3683d5 \
+    --hash=sha256:3f044601adee91bdf49c317525dbfb611022e40ded18ac5bacba8e807fbb472b \
-    --hash=sha256:320d61938950d95da2371b46c406ec433e7955fae9f396c8e1bf148ffc187d11 \
+    --hash=sha256:40abc3370b39dbde97c6d990eb2bc7bdd65b85f71528f6f4be827f845c151296 \
-    --hash=sha256:360c00338ecf48921492455007f904be607fc7818de3d681acbcc542aae2fb36 \
+    --hash=sha256:440731ef40c3644f1b9054adc31cf09d48f02fb31ec2eb158ef6409719915fe6 \
-    --hash=sha256:362fcf4d6f5e1242a4540812455f5a594949190f6fbc04f2ffbfd7ae0266d788 \
+    --hash=sha256:46565666daf5804591d43a92ac0888493e671d2555da2825120475253be73124 \
-    --hash=sha256:36aa5a798aa34e11813a80425a30d8e052d8de4a28f27bfc0368cfc454d1b403 \
+    --hash=sha256:4ad150da01eda998bae9e42020e2906bc9af97d08d905d29252f930c0472d059 \
-    --hash=sha256:3705888b7acacddd46886926fa390dd3df0e1d9e6fe273fd4edb4cbf8eb64735 \
+    --hash=sha256:4b5ead26851dda08b395e670a9c040d02eddbf2cc8953e23f9d60f4ac46df336 \
-    --hash=sha256:37bed927abc4a7ae2d2669baa3675e21904d8a038ed8e4313326ea7b3be62b2b \
+    --hash=sha256:4bb60168d79f047f3bf228c5e702cd2d8e0d31c096a93b1f6054b5b964b8a2c4 \
-    --hash=sha256:382dec4f996be48ed9c6958d4e30c2b89435d7c2c4dbf32480b3b8886293dd65 \
+    --hash=sha256:4f0cc6a64a708c5ee21e1fdbafd9dfcd76c7a0d574f0e21020ad3808ccfc6ce6 \
-    --hash=sha256:387f09d647a0d38dcb4539f8a14281f8eb6bb1d3e023471eb18a5974b2121c86 \
+    --hash=sha256:4fbfca45193e28d9699221cd20485b8b18de15a4f96daf7ffced32e2cca2d9aa \
-    --hash=sha256:3c1aa56aef2c8af55a21ed39040a94a12b53fb23beea290f94d19a76027e2ffb \
+    --hash=sha256:5415696bcd0dfa516468fb713e7b1d05f7ded2bb75499b0e591687add4612c0f \
-    --hash=sha256:3d1ba626dd5f81f7f09bbf59f70b534e2b75e0d6582b056b7bd31b397f1c13e9 \
+    --hash=sha256:5756ecb9bd8e96a0d0163f17a1282038228485da55c6010917db23cb199335c3 \
-    --hash=sha256:405f8790bad36ce0b4bbdb964ad51507bfc7942c78447f25cb828b870a1d86a0 \
+    --hash=sha256:598c4c37fe01c4f49e6faec1eb1a07bbe07b1ef552b2e5d3551835396b77f8a4 \
-    --hash=sha256:40a75b95e05e38a2a055b2446f09994ce1139151721659315151d4ad6289bbff \
+    --hash=sha256:599b7bbfe4103fa748e5cee63633ccdddca6cc01f2638f65386b4ac6c6344dc6 \
-    --hash=sha256:41eafc8c1653a35a5c7e75ad48138f9f60085cc05cd99d592e5298552d944e9f \
+    --hash=sha256:5f44d68af44b21c023e9911d01a9a42ce03d3a8fb1c5317586643aad6c9147cf \
-    --hash=sha256:449fca52774dc0199545fbf11f5128933e5a6833946707885cf7be8018017839 \
+    --hash=sha256:5fcac413b41f86cf8daf8198bbc6ec8554f47f37697c73dc9b872ce6b56224aa \
-    --hash=sha256:4526c4313306a264049e03e6c17b4e728a0647166dddbc1af7baf8e78a65721c \
+    --hash=sha256:60327eb3cc88603aa734f0b42e7567fdb26659a2348847a832c9cac6eccfcf4d \
-    --hash=sha256:4820516366d455b549a44d0e2210ee7c4575882dda677564ce79092588321d54 \
+    --hash=sha256:60a8cf168e1ca1088a31392fb4f59cba8b41a5b707cc9f30d551259776c86c74 \
-    --hash=sha256:4b86f8e6d9c1b3f9a75b2af870c93ceee0f1b827cd2507387540e053b35d7459 \
+    --hash=sha256:62ec7747b142edf7d66c9d6be7f074cbd586d3a377aa26e675f5f1d99fba9ce5 \
-    --hash=sha256:4b9a46eca804a51e8eb7b243c8e4513afc3b63aa60b69bc48e0efe6c648c4de0 \
+    --hash=sha256:68ec92ea10901e9333ac4869c7fe40809b3a72a967b503f8dad1810e1f5c9f1d \
-    --hash=sha256:4efe919d443c2fd112fe25fe636a52f9628250c9a50d9bddb0488d8a6c09acc6 \
+    --hash=sha256:690a825bbe1cb2407afcf19c4ec75a347ae51834ae2afb83649dde4f32feb152 \
-    --hash=sha256:4f8d82081ed7d8fe52c982bd1f06e4c7631a73fe1fb6d4b3b3f2404f87dc40fe \
+    --hash=sha256:6e2a0e00123ac380db2d7394d6c0f5b22339ca20f2648810a72586d48a6bd46a \
-    --hash=sha256:50e4a58635fa8c6897d84847d6e065eb69f92811670fc5e9f2d9e3b6279a02b6 \
+    --hash=sha256:6ef52f454e8895bea898233a497a3c2185a2682c9da4c799589e4509b7484fbc \
-    --hash=sha256:50e7d65533857736cd56f6509cf2c4866f28ad84dd15b5bdbf2f8a81e77fa28a \
+    --hash=sha256:6f3e601384aa497f01f81831fffc146aca6c4800014fed7529bccbe7d5ce5c03 \
-    --hash=sha256:514e2c008a8b4fa823122ca3ecab896eac41d9aa0f5fc881bd6264486c204e32 \
+    --hash=sha256:6f809c30971a16ec3ff6993d99a9f72591b8817fdaba2c460383022015e8e02f \
-    --hash=sha256:5251585608778b9ac8effed544933df7ad85b4ba21ee9738b551f17798b215ac \
+    --hash=sha256:6f9a90eee999853205a8c724c479e6dec3806529a44dc8a4c4dbc94ac5ccdc23 \
-    --hash=sha256:529d6d667c65fd105d10bd83d1cd3f9869f8fd6c66efac9415c1812281196a92 \
+    --hash=sha256:7191d2863edbb088ab5a0daad59ba0db279eccc53fe637ec071cf9a7b65927c3 \
-    --hash=sha256:52d5db3369f95b27b9f3c14d067acb0b183333613363ed34268c9e04560f997f \
+    --hash=sha256:75187b77a84b1f457f9555604775b70d04102af312224d03c873da59011bba31 \
-    --hash=sha256:53fed080476d5f6ad7505883ec5d1ec28ba36c2273db3b3e92d7224fe5e463db \
+    --hash=sha256:764d9b861177692903ba375ec19a928141248ff003457575d037c444c7e3db53 \
-    --hash=sha256:54c4637122e7cfd7aac5c1d3d4c02364f446d6923ea34cf9d0e8816d6e7a4936 \
+    --hash=sha256:783c99558ec28169238628f978f92dafced2880d5d7f6ba0c39a915bc73ae004 \
-    --hash=sha256:555eb9c90c450e0f76e27d9ff064e64a8b8c6478ab1a5594c91b7bc5c82fd9f0 \
+    --hash=sha256:78dd4df4b8ff8cf61e799ea9733326316b84168bac41bb5e46d6ce787a48b581 \
-    --hash=sha256:57286b289cd557ac76c24479d8ecfb6c3d5b854cce54ccc7671f9a2f5e2a2708 \
+    --hash=sha256:7ce9752480f74caa6c4cd04e785d797b0c59a229f6bc3f729b57f61230a2adc7 \
-    --hash=sha256:5c82500ed91605c2d9781380b378397012e25127e89d64f460fea6aeac4389b4 \
+    --hash=sha256:7d87d950b2ec18569b41da81b2f9f69f48479a80a9277e291d7666c7bfb427f0 \
-    --hash=sha256:5eb0603d8f8019451fc00e1daf4022dfc9df59c16d2e68f925c77ac94555493b \
+    --hash=sha256:7f09aef5c179b1e854987c38e36a396ebd7674cb6f2033bf5104c0933ac4a3a5 \
-    --hash=sha256:5eb4ed3cea945b164b0513fd491884993acac2153a27b93a84019c522e8eda82 \
+    --hash=sha256:7f41d1ecd2ced56c8bbef126de7b435261acb234ac7a5c3878869e20cbdf1615 \
-    --hash=sha256:5edf4c9e32493035b514cf2ba0c969d81ccb31de63bd05490cc8bfe3b431674e \
+    --hash=sha256:7f5bd025f16496fe09eb486cecf25e372fd72126ca68562cb6d860e51224bd69 \
-    --hash=sha256:619cd195d74c9e1d2a3ad78d63451d35379c84bd851aec552811e30842e1c67a \
+    --hash=sha256:8165ccc5eb262f75313290943c70727c3dd008feb63281dc904b84bc8db719c1 \
-    --hash=sha256:62ab4971199b2270005359cdc379bc5736071dc7c9a228581c5122d9ffaac50c \
+    --hash=sha256:8437daf3e46579f491308c8aa14757654c2e3e167b727ec1292fbd5e32119dda \
-    --hash=sha256:66425bc25b5481359b12a6719b6e7c90ffe76d85d0691f1da7df304bfb8ce45c \
+    --hash=sha256:84756b4f9a1c30d360d7845f4de25c969918f45349ac1423da9341e17ee18143 \
-    --hash=sha256:665b0d8fbbb1a7f300265b43926457ec78385200133e41fef19d85790fc1e800 \
+    --hash=sha256:85fbb6e2ad6d5cab797dd2f017c221291d37b7db034ca34979c80aaddf9f26cf \
-    --hash=sha256:66a18f68506290349a256375d7aa2f645b9f7993c10fc4cc211db214e4e61d2b \
+    --hash=sha256:889d80b5cc72ffeeeedd85522c8958a83b34754f578b5bc7cb6c19f55333f500 \
-    --hash=sha256:6b1b751a5411032b08fb3ac556160229ca01c6bbe4757bb3a9a40b951ebaac23 \
+    --hash=sha256:8ddda5576d75095eac4066d1847a9f9904800cdf224dfea8a6e420e60661ee32 \
-    --hash=sha256:6c2eea545fef1065c7dd4eda991666fd9c783fbc1d226592ccca8d8891c02f23 \
+    --hash=sha256:8e6e9ee3086c5c0b0ef7595e39962e55c1a8b562af54bfc00c274f5ee41d8fa7 \
-    --hash=sha256:6eb3ae5ab72edb2ed68bdc0f5710f0a6cad7fd778a610ec2c31ee15e32d3921e \
+    --hash=sha256:914d76aa04cbda1cc7e5a0563421ade8437f801852b6d5528b43e6e82e3f7910 \
-    --hash=sha256:724aa7490be50235d97f07e2ca10067927c5d7f336b786ddbc868470e822aa25 \
+    --hash=sha256:92e2a6745e269daaacd02aeae32179e947d6a9ba8f1fa3d5262ee7bd93460165 \
-    --hash=sha256:72524cd27e67cf95d9c6bb5eacf47cf78473554f74685f57ccabb368988d91bc \
+    --hash=sha256:947398b58ae69fe454a71e4e97aff1eab322b3a5c4576a9736439f22a38d39b4 \
-    --hash=sha256:753710ae1f33b1a34178d104b7e1ac0a94a3f386d14dc24305663f63dc67cabc \
+    --hash=sha256:95790cbbcf781b7c3375e3964ff6ada45b25a32dc575813c248bd43cf65ec13c \
-    --hash=sha256:75b07d36ee034f05e3566878d83f3043d8297dad67937ada15c504ac3e50f9fd \
+    --hash=sha256:9590b6f9343e827f9fcb77c8f396f2631fc9c606fe6340995493f0470b91b2b1 \
-    --hash=sha256:7855bc4df5ed5f7fb1c98ea3fd98292e9acd3c097b1b21d596a69e1e60455400 \
+    --hash=sha256:9fbe33b8db9231f33162d75ce410e83f46ae958b7d450c1c38dc67d9c595a6f3 \
-    --hash=sha256:78ed2e4099812a438b545dfbca1928ec825e743cd253bc820372d6ef8c3adff4 \
+    --hash=sha256:a2e8825e1e6c4d5b62bf3b230a7791524ad5298edd7f356747f30d39ebee773e \
-    --hash=sha256:7a6ed7926a5cca28edebad7d0fedd2ad492710ae3524d25fc59a2b20546d9ce1 \
+    --hash=sha256:a62be7c3dd446f6f6eb28bdf161abd0b0c7b16bca8500f7811343226706daff4 \
-    --hash=sha256:7ba5e38c9fbd06f086f4a5a64a1a5b7b417cd3f8fc07a20e5c03651f72f36100 \
+    --hash=sha256:a84aec18381c50d7146053f6ccf755692a0e38c0ba6dc235fec69eb58768b0ec \
-    --hash=sha256:7d5c8bfb438d94e7b892d1426da5fc4b4a5370cc360df9b8d9d77c33b896c37e \
+    --hash=sha256:a9ae100163d54fe8dfd6f6c7db14064201509792ac475ba1b7360f06e2e378dc \
-    --hash=sha256:7d9aecd5c3845d415bd6c9957c93de8d93097e269137c2ecb0e5a5256374bdc8 \
+    --hash=sha256:a9d1c23fe785aa0f64948d55cb661a29b8e5d5d9b436c69c128c98d9ced7677d \
-    --hash=sha256:84265f2221e83fb1e41a8e33788c06e3ba22629e88644d0841a470cc28baa3f7 \
+    --hash=sha256:abdf50e656c67552a05d946990aeeb3ec4ece30ad7697f8f9e5290b2abb6eb25 \
-    --hash=sha256:86dca35d2f15ef22922411496c220f3c9e315d5512f316fe417461971cc1648d \
+    --hash=sha256:b007d8fe7ee73b72c937dbafcc1dc9de244ad04c94333f4c7dfa208c6388f669 \
-    --hash=sha256:9115f7a4ba2f110e9dcda72a43adaeba202f42cf181877bcf3eecca359576bfe \
+    --hash=sha256:b14588df54bcbc92da4f85bb3eba966f8128ad2dc2804775b5ebc1a65aab44ca \
-    --hash=sha256:966ac9358b23d21ecd895c418c048e806fd254e46d09b1ff0cdad2eba195ea3e \
+    --hash=sha256:b14c95b38cefdcaa86c9234e926e316fe12f2aae86bcf6d91ad0acb771be7dd1 \
-    --hash=sha256:98aa4a351b047b0f7f9e971585982065028adc2c162c5c23c5d5734c5ccc1077 \
+    --hash=sha256:b38c275f30969fdb5e874f694af278b5996396912c9ed0330632e81807377d02 \
-    --hash=sha256:9ca14cf1cabdb0b77d606db1bb9e9ca593b1dbd421fcaf251ec9a5431ec449f3 \
+    --hash=sha256:b593485a58e6985b4e14389a4503c0ea14309ed5875cecf3b3cb8cce608bd315 \
-    --hash=sha256:9f995c6b638255c9301166ed7033cb8fe0f34043a46b8e6a055a56b8a38c2114 \
+    --hash=sha256:babc29b143bb6ba35d2e485352feee006318c8c24292998e742c2d3bbe7b00a2 \
-    --hash=sha256:a24c61f1fad56ca68aee53bf67b6a84cd762a2c71ee4b71064378547c2411ae6 \
+    --hash=sha256:bbc71437302a2cb025704c80ef721c26d27cc37f0b37fcb2ee70fd456f05f1fd \
-    --hash=sha256:a4963dac24213690183110d6b41125fdc4af871a5a213589d6c6606d49e1b949 \
+    --hash=sha256:bc7d657e59500a54ef28e392ecc8a078aef704a8336eb6065a467ea15eecc779 \
-    --hash=sha256:a6d9a23a35b3a105c42a8de60fc2e80281ae6e758f05a3baea0b68eb1ddcb679 \
+    --hash=sha256:bd2c74cf81bda2a13f1c77245a5b24987505e292731adb3c6b1d945cd9006981 \
-    --hash=sha256:a88bc9b191422cd5b22a1521b28607008590628b6b2a8a7db5c54ec04dc82fa1 \
+    --hash=sha256:becebcd0107bce9771b4fbdaf2630020aea2eeacf2263ee5f47559c5248ad8f1 \
-    --hash=sha256:a8949f97ab445d8aa2ccbeab244b46257114d38b6860210b2109b7e5b3ff2c5e \
+    --hash=sha256:bed5a14340fa65de61f60d92617e9431b361f2cb82e655520029e0bd7a03d68b \
-    --hash=sha256:a9994a42cd12f07ece04eff94dbf6e127b3986f7af9b26db1eb4545c477a6604 \
+    --hash=sha256:c6560234b5eee2eda62329a25d7a28ac612b1a2de5b8f5d4eed3f06223d56354 \
-    --hash=sha256:ab86d22f69a21961f35d1a1b02278b5bb9a95c5f5b4722c6904bca343c8d219f \
+    --hash=sha256:cb24a349c16cd3b084a2c2c23a4c5c4f606740d451159e2dd160b3a27a5ba1bf \
-    --hash=sha256:ad52784120e7e4d8a0b5b0517d185b8bf7f74f5e17272857ddc8951a628d9be1 \
+    --hash=sha256:d12eb332123b6789e853ad7123f8d7a13e1d0361d507b292c6ba6ef0e1ffba39 \
-    --hash=sha256:aeb26e2898994b6e8319f19a4d37c481512acdcc6d30e1b5ecc9d8ec57e835cb \
+    --hash=sha256:d4c3e3d7241f317957e03c4b915f90dbbbfa7570a87bffa8634138755d12b4db \
-    --hash=sha256:b1f893014f00fe5e89a660a032e813bf9f6d91de74cd1490cdb13b2b59d0c9a3 \
+    --hash=sha256:d54e58f18148b5ac4386c77a9aa891351903ada3814a87d476583d9d0f9228bb \
-    --hash=sha256:b820004db8b22715cee2ef154d4b47b3d76c4677ff217c587dd46f694a3052f9 \
+    --hash=sha256:d712d547049de46635da1fb4ebfa705f626d165bade0387f568252d719e808f9 \
-    --hash=sha256:b8adeee57b41fe08e4520698a4b0bd3cc76dbd81f99424b806d70a5256a391d3 \
+    --hash=sha256:d75a49543e869e7798400f9509cf90ff0c9feeba6a903df62b7f2dfe133bac7e \
-    --hash=sha256:b96a74fa03a636c8a7d76f700d50e9a8bc17a516d6a72d28711225d641e30968 \
+    --hash=sha256:dd1521d73ed6e227c6aa23ba973495f22d8f340d5b1023771b756c7f4b9883a0 \
-    --hash=sha256:bd748d3407ec63e049b3aea1595e218814fccab329b7fb10bb51120a30e9fb7e \
+    --hash=sha256:e4bbf559b68390a545ce573c89f7de9b99ef69fc7e754f7c265774e26ff95a8e \
-    --hash=sha256:bf81b2e517baadf41eb85c4762ae596dd1dd2c852988ce86a2df6aa7e31d9228 \
+    --hash=sha256:e4ff19b7a43b81d93966b961dbc69782ea84f4d6501cd2f9b6d0e662b3d64c2a \
-    --hash=sha256:c26a1eb487947010f5de24943bd7c422dad955b2b0f8650762539778c380ca89 \
+    --hash=sha256:e539e4abac01774cb315d9aeedba155459e6b3ece725fcc06a8a1a061a7bb7aa \
-    --hash=sha256:c3811a56fa32e00b377ef79121c0193311fd7501f0fb378f254c7f083cc1fbe0 \
+    --hash=sha256:eae41b8a4b113af20dcdf73ea16c489da59f8aaf552a6a1f5811ed90bc254365 \
-    --hash=sha256:c54eed83726269594b9086d827decc7d2015696e31b99bf9b69b12d9063584fe \
+    --hash=sha256:eb686cbca9d319d9abef488e45286c5e616189ed895859f1f0f04c01f541a418 \
-    --hash=sha256:c5d927e87461f8a0d448e4ab5eb2bca9f31ca5d8ea86d70c6f470bb5bc666d7e \
+    --hash=sha256:ec0444e1f198eba41ce69d0e75cf18042c38f348b9ca741d263e60793a4f3cbf \
-    --hash=sha256:c71e140d5eb3145d61d59d0be0bf72f07cc4cf4b32cb136b09f712a3b1040f5f \
+    --hash=sha256:ec63d233defb2b89af03d2bfb27c1ad0409f23f923d402ba20f4d9a8bc94fe5d \
-    --hash=sha256:c77570660abcf3b8931b258d57b600b3484795977797009bed112f0d7b6933bf \
+    --hash=sha256:ee0320d563f6e6b94965f32abe321b62354072b12736c49b7eb0ab398a80878e \
-    --hash=sha256:c9af16f0b07d851b968c54e52d19430d820bb47c26d10a09cfb5c7127de26773 \
+    --hash=sha256:f011b86eed5a4576712b89df31f36e0f1e3903dbf6b4497a0b0e224c67a9a9c6 \
-    --hash=sha256:ca905387c7a371531b9622d93471be4d745ef715f2890c3702479cd4fc85aa51 \
+    --hash=sha256:f33e61bef3b8f22986f4f5f9ca1ec547b953175d3f5bf85abcf54695394f4058 \
-    --hash=sha256:cb148b35ab20c75b19a06c27f05732e2a321adbd86fadc93f9466dbd7b1154a7 \
+    --hash=sha256:f7609bd99095ca3a660c8b2061c45daab6ac1f1b277afb3dce5aeef20e9295db \
-    --hash=sha256:cb1fb8c9337ab0da25a01c05d69a0463209c347f16512ac43be5986f3d1ebaf4 \
+    --hash=sha256:f77e29ce051fcac3a001fc40262d456c315a27d93f5922e4f525c308479fc557 \
-    --hash=sha256:ccec3524ea41b9abd5600e3e27001fd774199dbb4f7b9cb248fcee37d4bda84c \
+    --hash=sha256:f833a121f11380ad6f6970336b28e0e72fb5cd1219f71d5adefbc0d09cdd75bc \
-    --hash=sha256:ccf30e3fe6d770a803dcdf3bb863fa44ba5dc2664d4610ba2746a3c73599f2e4 \
+    --hash=sha256:f8b1fa9526a3e2de5422b9775fa4e98a7abb703e5f38d408540a52195c479eb5 \
-    --hash=sha256:cec977d673ad596bae6bdfc0091ee386cef05b515b23f2ce52f9fadd0156186a \
+    --hash=sha256:f9bdf71a9c12907b417370f9d52924e6ce4f1d65ea437cce564a6858c5ba482e \
-    --hash=sha256:d0859c65775e8ebf2cbc084bfd51bd0ffda10266da6f9306451123b89f8e5a63 \
+    --hash=sha256:fc1fd7229800ec7a33373df09762d146c67836e56648243fb1d87d205147fce6 \
-    --hash=sha256:d388bd5723732c3afe1dd1d181e4213cc4e1be210b080572e7d5749f6e955656 \
+    --hash=sha256:ff91934c38306c82321b56576d4dab3583fc7dd83b37d09d2906b0648c91538c
-    --hash=sha256:d87d37b3d476f4f7623c56a232045d25bd9b988314702ea01bd9b4a94948a778 \
-    --hash=sha256:d9e5db525dc0a950a825202f84ee68d89a072479e07da98795a3469df942d301 \
-    --hash=sha256:dba5c14b8b4f73ea1e65720f5a3fe4280c1d27761238378be8274135c60bbc6e \
-    --hash=sha256:dca88bc8b68ce6d35dafd8c4d5d59a238a56c43fa02b74c2ce5f9dfb0d1ccb46 \
-    --hash=sha256:dcc3b15b97f3054964b47e2a5fcfb4f5ff569e9af0a7af19f1d4c5f4231bbf3b \
-    --hash=sha256:df7da3f4b19e3078f9635f132d31b0a8196accb2576e3213ddd7a77f93317c20 \
-    --hash=sha256:e5d042c376d2025300da37d65192d06a457918b63b31140f697f85fd8e310b29 \
-    --hash=sha256:e5db59c1cdfaa2ab85cc988e602d6919495f735ca8a5fd7603608eb1e23c26d5 \
-    --hash=sha256:ee36348a204f0a68b03400f4736224e9f61d1c6a1582d7f875c1ca56f0254268 \
-    --hash=sha256:ee77ac543f1e2b22af1e8be3ae589f729491b6090582340aacd77d1d757d9569 \
-    --hash=sha256:f1f5c450121430fd89cb5767e0a9728ecc65997768fd4027d069cb0368af62f9 \
-    --hash=sha256:f31fcc0d30dc3f3e94ea6b4d8e1a855071757c6abf6a7b1e284050ab7d4c299c \
-    --hash=sha256:f6a32313a5fdbc4fc4fd681a1895d55ee4bf81275e88638b1643b54ecf850cbe \
-    --hash=sha256:f8195006fdd0fc0a85b19df3d64a3ef8a240e483ae1dfc7ac6a4316019eb5df2
     # via
     #   barman
     #   python-snappy
-cryptography==49.0.0 \
+cryptography==50.0.1 \
-    --hash=sha256:026ac7423e6fa66872d3bf889be5974507da3944f866f704fa200eadacd00001 \
+    --hash=sha256:01f41478cf33fc605a6a089cd56d28b45c6c0b45a1928b61797f2621a04bac71 \
-    --hash=sha256:07cab27cc7b7e0fd28e5e26bb9eeedde5c135c868b46de4a27845abe94af6122 \
+    --hash=sha256:05ba322c4da95b262a212c345af888ef2c37c88c0509756ea00a0e6d68850f23 \
-    --hash=sha256:084ef1af862eb07ec46d25f68689f2102a9fc0e05ce7b80f14f5fe51e4eef0f6 \
+    --hash=sha256:16c5ecd954b3330ebfb6605eca4fd952da8bef376551d5cc264534e3770a9ee6 \
-    --hash=sha256:0b82e28ee398a386f0807bba7884d30f25218855690f45115831bcce5d90822c \
+    --hash=sha256:2a93d05e34d5f67fba6f891fe85d929999baa7195e853923ea6d7576c9e68c5e \
-    --hash=sha256:0e959b578856a3924bc0cbb710fc12c387b9412a951389f3ca61704a9e25f325 \
+    --hash=sha256:2b34d76a652ea2b6faf777c35df230c5637842cd904e04f16230c3f9f03e4361 \
-    --hash=sha256:0f21641cf4b30fca7aee061ced0ec7ad7b073518088b7c9969a297c0ae796c69 \
+    --hash=sha256:2ebbfb0f1fed745e91796e3e1080a1440423fdae8ece1b995a1d80883a409054 \
-    --hash=sha256:196ecd6a36e4e9aa10270393bb98d8df88fccee0bf1e5128b91ae4eb4375896d \
+    --hash=sha256:30a125032e5642a21ff816e021152bd4e7e94f03eff3f4b7fca41cd22bc3110f \
-    --hash=sha256:2400ef9c9e2299a25614eb1dea3db54a69b1349efd043bfac9c67630d136df36 \
+    --hash=sha256:330fbb252391c596f1ae42c5754449dc924e6ad012dca8efe0d703f9f2d12ec6 \
-    --hash=sha256:28d8b15e6275f12c8a207dc309dfa957903c927d08d0cc937ee3f63f200693cc \
+    --hash=sha256:359e62deae718bce96170e223fdcb6357e4fbd3bb7a3a75f4430763532560e49 \
-    --hash=sha256:2afe9051da7ae7bd5905da5a949280c7d2bb75682e188f650a9d0f2756b834c6 \
+    --hash=sha256:407fe2b6db00939c05c0e945e9914238f2f0a430974839429dafc82b1ee6bee5 \
-    --hash=sha256:2eda353d8a27bcbcaa4cbed18994a74ab4d19a2ca897db188ea269ab9b71419b \
+    --hash=sha256:42be3bb70596b3abe4ac097b75be223e8b3ab614a0e5de068e3dcc54d71d6149 \
-    --hash=sha256:32703d93296f5c1f4b53349ad3a250c2cae0fdecd3a3dd5d47e616d8d616af27 \
+    --hash=sha256:4c4188f7c0cf655be5c06342b817ed0f9595b69ffa2b12026e5353eed29dea88 \
-    --hash=sha256:33cd0565932807baddb67b96dbee92f2c374b5c89dee09fd74079aeb8c8dba61 \
+    --hash=sha256:51593d180cf6d179bde5c5d065bed81386b1f381656ae7d042b7ffc87a9895ad \
-    --hash=sha256:35b151772baff2c74cba7fa290ceaff4c3b11c0c881eb93eb5dbc05a7cfbba18 \
+    --hash=sha256:51afcfceb15597cf2635068e4ac9a56b2abde622edde17f37d85fd7b5306497a \
-    --hash=sha256:36d1709f992593689b45bda411498d62c6e365f2ca00b84657d4dadd24de16db \
+    --hash=sha256:53e279950892dc102c6b4e52af03ae5ea92fac572a1ddab78ca73a997f62b69f \
-    --hash=sha256:42b0684e0e40cf26122427802486f6d93aea593612603a94fbf260c7eb1e9c1b \
+    --hash=sha256:55d16b1ef3ee0958d893a977b19777887e546c9954ea81b200c3301a864013f2 \
-    --hash=sha256:4ae387c9cb68ea569ca17e490d66d8142b81c3cc814bf179974b7d146e490bbb \
+    --hash=sha256:5dd9bda1c12b4162f6ff568eeb5e0ff956c28d14406e875cfe8a63a2d414ff20 \
-    --hash=sha256:53ecee2e23f7169b6117e99fc8a944e5e50f79e69758a83b52a00cb98ab2b2d2 \
+    --hash=sha256:5fe002589592ed749ce77fe0695fcbd3500dd61d7d6db5858a7544c612fa8e45 \
-    --hash=sha256:66ec79c3904820572d7e987abdf304281f141d37ad9a489b8e97066e7b9b6459 \
+    --hash=sha256:5fe939deeb161024a6be98229c953b6591fef1f41214497a78fe793a244c017f \
-    --hash=sha256:67e1d20ad9ef3a563c59ef22e7a8a0b8210bd26604369ea4a30a7c66aefe504e \
+    --hash=sha256:693c99b49bd37d0d096e4334c10232c77248c415b98d35236094cdf96d57258b \
-    --hash=sha256:6f2debedf9ca60cf1d5bd466475638af5130f89965605cd818484d19987d3a21 \
+    --hash=sha256:76de83fbd91ac49c0feaaa983d0748fd7a53176afac5fb3bf7478d244f0eb527 \
-    --hash=sha256:6fc361c34fb6aac015ce19435876635e5c6d21db31998b0920f675f131e043b8 \
+    --hash=sha256:79bf008d1f9af6071c797ad133e39915dfee7614f18f18f4db9072eb715064a3 \
-    --hash=sha256:73a205dce83953d131a4aa1e0fd917a2fd1c5b1eef251e9d7152efefcbf5caf7 \
+    --hash=sha256:804728ce710890870f3aaa344b2e161172d258d768ac139d02cfd9092d0d94e6 \
-    --hash=sha256:7abcee80084cda3f7691f3eb1ce480d8df49cec637b429aa35986c1de71738aa \
+    --hash=sha256:8921d58f426793c5f1b47f0b59575780de9a095214958d0eb37d909593db8367 \
-    --hash=sha256:8c25ceb16df5b9435f3f6a9829204985b0e0cbee3b48aacd432c7d2c850b44d9 \
+    --hash=sha256:8df2de9102026855887e4587084f6eabd80ed0f345b8ad8a7ac27ab9bf4723e0 \
-    --hash=sha256:966fe0e9c67490071f14c0d2b1cb2dfb3023c5ce39457343931415f08382f2db \
+    --hash=sha256:9cb3cb952cf5a8abd50c782a98a89d71699715e802fe349704b47f2425b42a94 \
-    --hash=sha256:9e82dcc8e56052715fb18b2429e3bca4823b1629136a2084fc45a9a5cecb9b64 \
+    --hash=sha256:9dde0a357190eb3b1da1bb9ab750e9c85cba82ca5977aa0836cbb94e92611239 \
-    --hash=sha256:b20133d204d2bb56ba047642199603876c872026ca53e79c35b83772ab2cc505 \
+    --hash=sha256:9ebcdd5519be9b652a46f507817a74591774fc3d6923ac364e4dfa64e36b291b \
-    --hash=sha256:b39efa323140595abd3ecca8529d321ae50f55f3aa3ba9cc81ea56a6011953d5 \
+    --hash=sha256:a0b1a59e3a089064a0ec309e9428c8e3ae4e161419d20ac33600767e83fc658a \
-    --hash=sha256:b47db11c2c3525083296069b98ac5221907455e989ae0c2e3008bde851921615 \
+    --hash=sha256:a255449073358275b64b67d3f595f268bbef70e72b6edb65e0c70c735bf739c9 \
-    --hash=sha256:b87e65d263b3e5d3bb92a57e2a6638e2f31110fa7aa890c7b2dbba42248d0a3f \
+    --hash=sha256:a8f40ea47330e71b594a7e246898f93177c259490c63183dbaf9e571d71ed9a5 \
-    --hash=sha256:b970c6da94d5bb18629db453d14f2a1300f6bf59b61e9b82377931ef95504866 \
+    --hash=sha256:ac02b07824d4d1001bd4367599f839c19cb171924c796e52c23508ac14c2c0cc \
-    --hash=sha256:be9fcb48a55f023493482827d4f459bd263cc20efde64f204b97c123201850c6 \
+    --hash=sha256:aed8db4f6d71c51efb89530e12d9464e7bf2923d46c3205dc794a2a93f8c0648 \
-    --hash=sha256:c2bc30226390d60ea19d9f82b19db005fe0452154a23c1c410c12ea801e43561 \
+    --hash=sha256:b8f852c65863251b9e3a1b8c150ce21e59b522dbb6a7d4bc80e680d38388e986 \
-    --hash=sha256:c83782480a4a9da4d0feb51950131ba32e12e70813848b3343f6e18c28a66838 \
+    --hash=sha256:be224a65493ec5b74a158ff22a5522ce4a5ca1e543c647a3a4730d4a09e5f959 \
-    --hash=sha256:cbc77da8c523d5abd028635ba850a6966fcee2c82e2bf65a41d1d8afe0f98be9 \
+    --hash=sha256:ca83d00d9e69cd5eb63f2e69c3a5a59e0cecae5ae14c6ae0b35830fe3b37bad0 \
-    --hash=sha256:ccac2bfebc306b862133e3bb71f3f6ee8bb525240089b2d952e4144b3a6d5da7 \
+    --hash=sha256:cbf74a81765ee67413503ca6e26dcc4f6f5a519822436cc0a1b97aab6c1b8a17 \
-    --hash=sha256:d0527ce944105f257f605a827d6ebead966c752038b6e8656abb9c5edee6fc68 \
+    --hash=sha256:d63ae8f6481fec907ac0f588eee8a90aefde112c633131fe540e5711ddbb5a4e \
-    --hash=sha256:d8ecde755e2e91bf773fc94e8c9d730cd7f2007004cb492263a794ec3899a1c8 \
+    --hash=sha256:e22dfed744bd4002e909464cb23d2f0b05c6f3113a79ef2e9864a53db737c733 \
-    --hash=sha256:e3fb64c420688e5319ae25113a354015abbd8dffbfbc41781a1ea66fc7622ac3 \
+    --hash=sha256:e2ca8fd1b6b4b82a1c4cb02841d0837e3c12336c2e24b520ab8ab3b969733d8f \
-    --hash=sha256:e5dfc1e64de5677cec922ffa8da89c546d0415bf6efdf081842e5d44c84e1f0e \
+    --hash=sha256:e74591e283fe6eb956416c929eb58262a719fe0311fd9054c62c3350ed8760d8 \
-    --hash=sha256:ec5e529fb80935c94fe7b729f9972b50e351a0e6b50aa294fd5cabb109fcc29a \
+    --hash=sha256:f74455bb086a85d5e81246412602aaa97ed095e504cd40dd261ef50be42205bf \
-    --hash=sha256:f37d847238971164fdbc68ade6f6574aecc9c0af714190e2083429ff68f4ce9d \
+    --hash=sha256:fb4b9672d389c738b175c4166e78310f8a70358886aacd9173ee03a85ffdc671 \
-    --hash=sha256:f78ff2c9ed8dc2d036b0f4d640e22522213d047c1b14e61205a7e55c80a494d4 \
+    --hash=sha256:fc3ed7ebd2a8c96f5b166de0ab9b624996bef3b07bbeb19364dfb78222c22c80 \
-    --hash=sha256:f89660a348f4f78a92366240a61404e337586ef7f5909a2fef59ca88ef505493 \
+    --hash=sha256:fd3718b960d0b5dd213cdf03f3bcb7000e69dda0de8b956061947ff6bcff5558 \
-    --hash=sha256:fc1e275c2f1d97b1a6450b8b0ea3ebfa6e087a611c2b26cb2404d48588abab7b
+    --hash=sha256:ff838d62ec1bfce4f9ba7fa16f4a7b554cd8d0c299e6be37502161a660c84eef
     # via
     #   azure-identity
     #   azure-storage-blob
     #   google-auth
     #   msal
     #   pyjwt
-google-api-core==2.33.0 \
+google-api-core==2.34.0 \
-    --hash=sha256:3a36bcc3e319783f4c97da41f6f45ea6ffcaa55848e341de16e09cb70243c2bb \
+    --hash=sha256:98a779fe72de956eb1c9c2f47ff4c4432a668ece1a002ec38bed07ec2698ae59 \
-    --hash=sha256:a2e22a0c1d0f03eafff1858b38cf46f832d5902b0c052235bf0ab8402929fbdc
+    --hash=sha256:cdf9c67e7ca2402d86ccbfde5f2503fc83e3cc3f58cc78456ae96cad24a6d2de
     # via
     #   google-cloud-core
     #   google-cloud-storage
-google-auth==2.56.2 \
+google-auth==2.57.0 \
-    --hash=sha256:c8270ea95b2697b74e3d8438ae9c5b898e38b623b915c7b5c5635921e7de68a6 \
+    --hash=sha256:180dafe015cfb62193bea26b677500fab5b9fd51a1e825ebf3ad9b182047ae59 \
-    --hash=sha256:e28f103ca8091fb7012b99c44243d7366c29863713b8e34a220c3322b7a07051
+    --hash=sha256:9b4f96d6a1feb5f7201231f47cfb3de08d8f176f8a61f9e461555116e95a8789
     # via
     #   google-api-core
     #   google-cloud-core
     #   google-cloud-storage
-google-cloud-core==2.6.0 \
+google-cloud-core==2.7.0 \
-    --hash=sha256:6d63ac8e5eca6d9e4319d0a1e2265fadcd7f1049904378caecfa01cf52dd869e \
+    --hash=sha256:874aaf89765db87a9b911b7a2ca7c5068554868eed9e75c7766affe342a2913d \
-    --hash=sha256:e76149739f90fac1fc6757c09f47eaccb3145b54adbd7759b0f7c4b235f46c83
+    --hash=sha256:c18a250904cfdda021eb3ae8b8238c9f9ca272a4cbbfb5cba946b3fe3022eed1
     # via google-cloud-storage
-google-cloud-storage==3.13.0 \
+google-cloud-storage==3.13.1 \
-    --hash=sha256:648af3ef8a6acc674e1359d3c920c67eb89a7a5ab66b336bd3ac43fed6b5ab84 \
+    --hash=sha256:98208de6c21e85cecd3eb44551894efff33d98365500e178867d4305854a770a \
-    --hash=sha256:d11d8706ea1520fba0f21043bcb7897caf7015d76ce1ad9a4f60237e4d7a9f6c
+    --hash=sha256:a80bf8cac2794808aa61c50c5f769ecbbe2d10331bacd0d69d30e59b14b346b2
     # via barman
 google-crc32c==1.8.0 \
     --hash=sha256:014a7e68d623e9a4222d663931febc3033c5c7c9730785727de2a81f87d5bab8 \
@@ -481,17 +546,17 @@ google-crc32c==1.8.0 \
     # via
     #   google-cloud-storage
     #   google-resumable-media
-google-resumable-media==2.10.0 \
+google-resumable-media==2.10.2 \
-    --hash=sha256:88152884bee37b2bf36a0ab81ad8c7fd12212c9803dd981d77c1b35b02d34e7c \
+    --hash=sha256:1de441703cd298d75a419bfdc0066e9fc7b0a1de630df96eea8ce8f5c759358c \
-    --hash=sha256:e324bc9d0fdae4c52a08ae90456edc4e71ece858399e1217ac0eb3a51d6bc6ee
+    --hash=sha256:e3cedc827a4ea41e216582d74346f1fb9fceb625a8c3c53912f2ca1d663334d7
     # via google-cloud-storage
-googleapis-common-protos==1.75.0 \
+googleapis-common-protos==1.75.2 \
-    --hash=sha256:53a062ff3c32552fbd62c11fe23768b78e4ddf0494d5e5fd97d3f4689c75fbbd \
+    --hash=sha256:6b83302f554ea93a0f48409c7fc2050f954bcbcddb7e3a9c76d4a823cb22920e \
-    --hash=sha256:961ed60399c457ceb0ee8f285a84c870aabc9c6a832b9d37bb281b5bebde43ed
+    --hash=sha256:8829a3d1e4508c5b7b9a6b9525f7fccff611f8531644579a76466c29295d4bb2
     # via google-api-core
-idna==3.18 \
+idna==3.19 \
-    --hash=sha256:7f952cbe720b688055e3f87de14f5c3e5fdaa8bc3928985c4077ca689de849a2 \
+    --hash=sha256:5e0811a4383b21dc5838069f801c4fb62113b7447663d2530d2bd6e77b49bf15 \
-    --hash=sha256:ffb385a7e039654cef1ab9ef32c6fafe283c0c0467bba1d9029738ce4a14a848
+    --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
     # via requests
 isodate==0.7.2 \
     --hash=sha256:28009937d8031054830160fce6d409ed342816b543597cece116d966c6d99e15 \
@@ -562,9 +627,9 @@ lz4==4.4.5 \
     --hash=sha256:f9b8bde9909a010c75b3aea58ec3910393b758f3c219beed67063693df854db0 \
     --hash=sha256:ff1b50aeeec64df5603f17984e4b5be6166058dcf8f1e26a3da40d7a0f6ab547
     # via barman
-msal==1.37.0 \
+msal==1.38.0 \
-    --hash=sha256:1b1672a33ee467c1d70b341bb16cafd51bb3c817147a95b93263794b03971bec \
+    --hash=sha256:4f10ff1257bacfd1781f22e85bd2b8d43ad1b490f3b6aafd7906671cadedd464 \
-    --hash=sha256:dd17e95a7c71bce75e8108113438ba7c4a086b3bcad4f57a8c09b7af3d753c2d
+    --hash=sha256:765b9b98b6aa380ee8b8f1c75636e08863edaf0a953498955bd668650dde5d49
     # via
     #   azure-identity
     #   msal-extensions
@@ -572,19 +637,19 @@ msal-extensions==1.3.1 \
     --hash=sha256:96d3de4d034504e969ac5e85bae8106c8373b5c6568e4c8fa7af2eca9dbe6bca \
     --hash=sha256:c5b0fd10f65ef62b5f1d62f4251d51cbcaf003fcedae8c91b040a488614be1a4
     # via azure-identity
-proto-plus==1.28.2 \
+proto-plus==1.28.4 \
-    --hash=sha256:26d843eb99c1e32fdf1d20ff0faae56607f7748fe774acf9ecd5cfe6c6472501 \
+    --hash=sha256:4b01341272f8a348db3f003b6143109f83ab43091019d5181b3fcdf500ab32aa \
-    --hash=sha256:b874236fcac2358f601e4330bcb76cb8b89c851303ccf4078408b3d4774d1c52
+    --hash=sha256:5ff7ecad828e032a491fcb86947801768e32237f99dd049b649965b892ae9a63
     # via google-api-core
-protobuf==7.35.1 \
+protobuf==7.36.0 \
-    --hash=sha256:11d6b0ec246892d85215b0a13ca6e0233cf5284b68f0ac02646427f4ff88a799 \
+    --hash=sha256:1781cc1de61249b750848029bca452c0a8b7e990080316b9bbc2518b2117b488 \
-    --hash=sha256:230a75ddfc2de4806e56696ce9640c1cdfdb6543b7cfce98d42a4c0a0e7bdb87 \
+    --hash=sha256:3297e60abdff301e5f74393d87f6cc59dacab5f024a89548a6e8de1d26576b16 \
-    --hash=sha256:24f857477359a85c0c235261b8ba905fd51b2562f4a64ca1df5473f29850cbf6 \
+    --hash=sha256:53374d53fc29a67f7dbbf0ade47d7526a0f0137bf0f9c90e48d8a60790ef748c \
-    --hash=sha256:353652e4efd0bca5b5fc2656abf8307ef351f0cf938c9eba09f0e09c20a25c30 \
+    --hash=sha256:70f5ec8eb0da81a44360c0dc0beac99a0d78071d21956a7076bae8bd2051841b \
-    --hash=sha256:4bc97768d8fe4ad6743c8a19403e314511ed9f6d13205b687e52421c023ac1b9 \
+    --hash=sha256:7326fd717bdc419162a735938d89d4032332bcc3408804012b24ff3a37086071 \
-    --hash=sha256:74758715c53d7158fb76caf4f0cfdacc5329a4b1bb994f865d6cf302d413a1c4 \
+    --hash=sha256:9103532dffd80c6fab7e50c65a31007680a06eb57537d437bb1b35812c138a37 \
-    --hash=sha256:b73f9489a4b8b1c9cb1f8ed951c736392592edb24b9d6819f36d2e10b171d5b4 \
+    --hash=sha256:bf94a5917c71058262de683669bc0a797a7669d3de71f0b36d058e3194f47b44 \
-    --hash=sha256:ce115a26fe0c39a2c29973d914d327e516a6455464489fe3cd1e51a1b354f81a
+    --hash=sha256:e8e09cb0d794c6687926fa558a8a6e72aa10edb997d5ca61da0765f12a3e00ea
     # via
     #   google-api-core
     #   googleapis-common-protos

dagger/check-doc-version/dagger.json

@@ -1,6 +1,6 @@
 {
   "name": "check-doc-version",
-  "engineVersion": "v0.21.7",
+  "engineVersion": "v0.21.8",
   "sdk": {
     "source": "go"
   },

dagger/check-doc-version/go.mod

@@ -26,7 +26,7 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
-	google.golang.org/grpc v1.80.0 // indirect
+	google.golang.org/grpc v1.82.1 // indirect
 )
 
 require (

dagger/check-doc-version/go.sum

@@ -89,8 +89,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 h1:
 google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478/go.mod h1:C6ADNqOxbgdUUeRTU+LCHDPB9ttAMCTff6auwCVa4uc=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 h1:RmoJA1ujG+/lRGNfUnOMfhCy5EipVMyvUE+KNbPbTlw=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
-google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
+google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

dagger/e2e/dagger.json

@@ -1,6 +1,6 @@
 {
   "name": "e2e",
-  "engineVersion": "v0.21.7",
+  "engineVersion": "v0.21.8",
   "sdk": {
     "source": "go"
   },

dagger/e2e/go.mod

@@ -22,7 +22,7 @@ require (
 	go.opentelemetry.io/otel/trace v1.43.0
 	go.opentelemetry.io/proto/otlp v1.10.0
 	golang.org/x/sync v0.20.0
-	google.golang.org/grpc v1.80.0
+	google.golang.org/grpc v1.82.1
 )
 
 require github.com/cenkalti/backoff/v5 v5.0.3 // indirect

dagger/e2e/go.sum

@@ -89,8 +89,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 h1:
 google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478/go.mod h1:C6ADNqOxbgdUUeRTU+LCHDPB9ttAMCTff6auwCVa4uc=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 h1:RmoJA1ujG+/lRGNfUnOMfhCy5EipVMyvUE+KNbPbTlw=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
-google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
+google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

dagger/gotest/dagger.json

@@ -1,6 +1,6 @@
 {
   "name": "gotest",
-  "engineVersion": "v0.21.7",
+  "engineVersion": "v0.21.8",
   "sdk": {
     "source": "go"
   },

dagger/gotest/go.mod

@@ -22,7 +22,7 @@ require (
 	go.opentelemetry.io/otel/sdk/log v0.19.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
-	google.golang.org/grpc v1.80.0 // indirect
+	google.golang.org/grpc v1.82.1 // indirect
 )
 
 require (

dagger/gotest/go.sum

@@ -89,8 +89,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 h1:
 google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478/go.mod h1:C6ADNqOxbgdUUeRTU+LCHDPB9ttAMCTff6auwCVa4uc=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 h1:RmoJA1ujG+/lRGNfUnOMfhCy5EipVMyvUE+KNbPbTlw=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
-google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
+google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

go.mod

@@ -3,23 +3,23 @@ module github.com/cloudnative-pg/plugin-barman-cloud
 go 1.26.4
 
 require (
-	github.com/cert-manager/cert-manager v1.21.0
+	github.com/cert-manager/cert-manager v1.21.1
 	github.com/cloudnative-pg/api v1.30.0
-	github.com/cloudnative-pg/barman-cloud v0.5.2-0.20260720143032-950b0f57e122
+	github.com/cloudnative-pg/barman-cloud v0.6.0
 	github.com/cloudnative-pg/cloudnative-pg v1.30.0
 	github.com/cloudnative-pg/cnpg-i v0.6.0
 	github.com/cloudnative-pg/cnpg-i-machinery v0.4.2
-	github.com/cloudnative-pg/machinery v0.5.0
+	github.com/cloudnative-pg/machinery v0.6.0
-	github.com/onsi/ginkgo/v2 v2.32.0
+	github.com/onsi/ginkgo/v2 v2.32.1
-	github.com/onsi/gomega v1.42.1
+	github.com/onsi/gomega v1.43.0
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/viper v1.21.0
-	google.golang.org/grpc v1.82.1
+	google.golang.org/grpc v1.83.2
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/api v0.36.3
+	k8s.io/api v0.37.0
-	k8s.io/apiextensions-apiserver v0.36.3
+	k8s.io/apiextensions-apiserver v0.37.0
-	k8s.io/apimachinery v0.36.3
+	k8s.io/apimachinery v0.37.0
-	k8s.io/client-go v0.36.3
+	k8s.io/client-go v0.37.0
 	k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3
 	sigs.k8s.io/controller-runtime v0.24.1
 	sigs.k8s.io/kustomize/api v0.21.1
@@ -27,7 +27,7 @@ require (
 )
 
 require (
-	cel.dev/expr v0.25.1 // indirect
+	cel.dev/expr v0.25.2 // indirect
 	github.com/Masterminds/semver/v3 v3.5.0 // indirect
 	github.com/antlr4-go/antlr/v4 v4.13.1 // indirect
 	github.com/avast/retry-go/v5 v5.0.0 // indirect
@@ -42,33 +42,33 @@ require (
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.2 // indirect
 	github.com/go-errors/errors v1.5.1 // indirect
-	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/go-logr/logr v1.4.4 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-logr/zapr v1.3.0 // indirect
-	github.com/go-openapi/jsonpointer v0.23.1 // indirect
+	github.com/go-openapi/jsonpointer v1.0.0 // indirect
-	github.com/go-openapi/jsonreference v0.21.5 // indirect
+	github.com/go-openapi/jsonreference v1.0.0 // indirect
-	github.com/go-openapi/swag v0.26.0 // indirect
+	github.com/go-openapi/swag v0.27.1 // indirect
-	github.com/go-openapi/swag/cmdutils v0.26.0 // indirect
+	github.com/go-openapi/swag/cmdutils v0.27.1 // indirect
-	github.com/go-openapi/swag/conv v0.26.0 // indirect
+	github.com/go-openapi/swag/conv v0.27.1 // indirect
-	github.com/go-openapi/swag/fileutils v0.26.0 // indirect
+	github.com/go-openapi/swag/fileutils v0.27.1 // indirect
-	github.com/go-openapi/swag/jsonname v0.26.0 // indirect
+	github.com/go-openapi/swag/jsonutils v0.27.1 // indirect
-	github.com/go-openapi/swag/jsonutils v0.26.0 // indirect
+	github.com/go-openapi/swag/loading v0.27.1 // indirect
-	github.com/go-openapi/swag/loading v0.26.0 // indirect
+	github.com/go-openapi/swag/mangling v0.27.1 // indirect
-	github.com/go-openapi/swag/mangling v0.26.0 // indirect
+	github.com/go-openapi/swag/netutils v0.27.1 // indirect
-	github.com/go-openapi/swag/netutils v0.26.0 // indirect
+	github.com/go-openapi/swag/pools v0.27.1 // indirect
-	github.com/go-openapi/swag/stringutils v0.26.0 // indirect
+	github.com/go-openapi/swag/stringutils v0.27.1 // indirect
-	github.com/go-openapi/swag/typeutils v0.26.0 // indirect
+	github.com/go-openapi/swag/typeutils v0.27.1 // indirect
-	github.com/go-openapi/swag/yamlutils v0.26.0 // indirect
+	github.com/go-openapi/swag/yamlutils v0.27.1 // indirect
 	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
 	github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
-	github.com/google/cel-go v0.26.0 // indirect
+	github.com/google/cel-go v0.29.2 // indirect
 	github.com/google/gnostic-models v0.7.1 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kubernetes-csi/external-snapshotter/client/v8 v8.6.0 // indirect
@@ -81,59 +81,58 @@ require (
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.92.0 // indirect
-	github.com/prometheus/client_golang v1.23.2 // indirect
+	github.com/prometheus/client_golang v1.24.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.67.5 // indirect
+	github.com/prometheus/common v0.70.0 // indirect
-	github.com/prometheus/procfs v0.19.2 // indirect
+	github.com/prometheus/procfs v0.21.1 // indirect
 	github.com/sagikazarmark/locafero v0.11.0 // indirect
 	github.com/snorwin/jsonpatch v1.5.0 // indirect
 	github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
 	github.com/spf13/afero v1.15.0 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
-	github.com/stoewer/go-strcase v1.3.1 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
 	github.com/thoas/go-funk v0.9.3 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 // indirect
-	go.opentelemetry.io/otel v1.43.0 // indirect
+	go.opentelemetry.io/otel v1.44.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 // indirect
-	go.opentelemetry.io/otel/metric v1.43.0 // indirect
+	go.opentelemetry.io/otel/metric v1.44.0 // indirect
-	go.opentelemetry.io/otel/sdk v1.43.0 // indirect
+	go.opentelemetry.io/otel/sdk v1.44.0 // indirect
-	go.opentelemetry.io/otel/trace v1.43.0 // indirect
+	go.opentelemetry.io/otel/trace v1.44.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.28.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 // indirect
+	golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f // indirect
-	golang.org/x/mod v0.36.0 // indirect
+	golang.org/x/mod v0.38.0 // indirect
-	golang.org/x/net v0.56.0 // indirect
+	golang.org/x/net v0.58.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/sync v0.21.0 // indirect
+	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/term v0.44.0 // indirect
+	golang.org/x/term v0.45.0 // indirect
-	golang.org/x/text v0.38.0 // indirect
+	golang.org/x/text v0.41.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
-	golang.org/x/tools v0.45.0 // indirect
+	golang.org/x/tools v0.48.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/apiserver v0.36.3 // indirect
+	k8s.io/apiserver v0.37.0 // indirect
-	k8s.io/component-base v0.36.3 // indirect
+	k8s.io/component-base v0.37.0 // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
-	k8s.io/kube-openapi v0.0.0-20260603220949-865597e52e25 // indirect
+	k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect
-	k8s.io/streaming v0.36.3 // indirect
+	k8s.io/streaming v0.37.0 // indirect
-	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 // indirect
+	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0 // indirect
 	sigs.k8s.io/gateway-api v1.6.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v6 v6.4.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )

go.sum

@@ -1,5 +1,5 @@
-cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4=
+cel.dev/expr v0.25.2 h1:K6j46C81hXtZQfuX60cVWQFBJahKSE2gfRbNuvr5bFs=
-cel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=
+cel.dev/expr v0.25.2/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=
 github.com/Masterminds/semver/v3 v3.5.0 h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE=
 github.com/Masterminds/semver/v3 v3.5.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
 github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
@@ -14,22 +14,22 @@ github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM
 github.com/blang/semver/v4 v4.0.0/go.mod h1:IbckMUScFkM3pff0VJDNKRiT6TG/YpiHIM2yvyW5YoQ=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
-github.com/cert-manager/cert-manager v1.21.0 h1:BCoB2BxA1lbqPusZCqPLPn8Q9MhraL7RbZGHbBcm3W8=
+github.com/cert-manager/cert-manager v1.21.1 h1:0LttV37Q5c2CBNoHkjuI8sLKTXWZDC2SwQkxrBMKV9w=
-github.com/cert-manager/cert-manager v1.21.0/go.mod h1:V8iALETs2W428CjBZ4Ez3DftDeyu0f8PZnHDTcliS4I=
+github.com/cert-manager/cert-manager v1.21.1/go.mod h1:sVwmLBWoiB1BRd0rJElBGQuiu94z4k7p3Kd0FRQyfgw=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cloudnative-pg/api v1.30.0 h1:L8hnvV/tPEQA1xYEi41FUBFA7FUNVGju8+SlgFlDDjI=
 github.com/cloudnative-pg/api v1.30.0/go.mod h1:XrKBbOWObL33si0FNuwX4uHNf5JShiZyOUqd6LxbJQo=
-github.com/cloudnative-pg/barman-cloud v0.5.2-0.20260720143032-950b0f57e122 h1:NuOztBdp+bUr/xYtaAw8o/x880hvWDRhJGl+R1YsZNw=
+github.com/cloudnative-pg/barman-cloud v0.6.0 h1:OtBFmCDyVUAcgFa++FIoCCJwPfd5TtqK3PH6DGPcpkA=
-github.com/cloudnative-pg/barman-cloud v0.5.2-0.20260720143032-950b0f57e122/go.mod h1:ZQLkdpk44FW5/BGWzABTOEcV9qPbwC+rbdscg2I8mBI=
+github.com/cloudnative-pg/barman-cloud v0.6.0/go.mod h1:eqSPRGz/s8M0Mea8mkqiVQUTkoSquAhvJF49feh+Ks4=
 github.com/cloudnative-pg/cloudnative-pg v1.30.0 h1:fnhVq44xXx97MNiuvJsPrX1vSjYbgdyBK5MSGfdHdp0=
 github.com/cloudnative-pg/cloudnative-pg v1.30.0/go.mod h1:QkolwBOWZ+GvAiJt6KpDSymwkpf0K19/p4Q6MQlTM8U=
 github.com/cloudnative-pg/cnpg-i v0.6.0 h1:LA//DLkFOLIjU0ASOpFkydZhGir9IAIDfgSsTTX9IpU=
 github.com/cloudnative-pg/cnpg-i v0.6.0/go.mod h1:4kcpLAj+feMTnh0TVadXRASdVnEhBytNSm/BvktLgmI=
 github.com/cloudnative-pg/cnpg-i-machinery v0.4.2 h1:0reS9MtyLYINHXQ/MfxJ9jp39hhBf8e3Qdj+T5Nsq6I=
 github.com/cloudnative-pg/cnpg-i-machinery v0.4.2/go.mod h1:gvrKabgxXq0zGthXGucemDdsxakLEQDMxn43M4HLW30=
-github.com/cloudnative-pg/machinery v0.5.0 h1:hhTnkzn+AiN3NmbjCQ6RXj5rfqV3K6arzq6kdXAzcnQ=
+github.com/cloudnative-pg/machinery v0.6.0 h1:faHxS1AK75XkzppOcAKdOexKmzX7iGK6jX2b9itssb4=
-github.com/cloudnative-pg/machinery v0.5.0/go.mod h1:uuFjqBUjWn0a9uvAk1ixTSzPM0PrjaS+QiKLOIBqLm4=
+github.com/cloudnative-pg/machinery v0.6.0/go.mod h1:wyw9E/0uYGAixp9+0PLsJ6qHiEiFKDkeXb9O2dRi2w0=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -60,46 +60,46 @@ github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3Bop
 github.com/go-faker/faker/v4 v4.4.1 h1:LY1jDgjVkBZWIhATCt+gkl0x9i/7wC61gZx73GTFb+Q=
 github.com/go-faker/faker/v4 v4.4.1/go.mod h1:HRLrjis+tYsbFtIHufEPTAIzcZiRu0rS9EYl2Ccwme4=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
+github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8=
-github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ=
 github.com/go-logr/zapr v1.3.0/go.mod h1:YKepepNBd1u/oyhd/yQmtjVXmm9uML4IXUgMOwR8/Gg=
-github.com/go-openapi/jsonpointer v0.23.1 h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4=
+github.com/go-openapi/jsonpointer v1.0.0 h1:kR9tHqY0CtZaOPVFm622dPVNhrvYpwr4uCxgL3h1H8s=
-github.com/go-openapi/jsonpointer v0.23.1/go.mod h1:iWRmZTrGn7XwYhtPt/fvdSFj1OfNBngqRT2UG3BxSqY=
+github.com/go-openapi/jsonpointer v1.0.0/go.mod h1:Z3rw7dWu1p9IgitXCFamSlA5lmDiklEB6vkaxcNZW5Y=
-github.com/go-openapi/jsonreference v0.21.5 h1:6uCGVXU/aNF13AQNggxfysJ+5ZcU4nEAe+pJyVWRdiE=
+github.com/go-openapi/jsonreference v1.0.0 h1:jlmTr6torcd1YgDQvSfNmRtKzYDO4FGBkrAdlAVWnpY=
-github.com/go-openapi/jsonreference v0.21.5/go.mod h1:u25Bw85sX4E2jzFodh1FOKMTZLcfifd1Q+iKKOUxExw=
+github.com/go-openapi/jsonreference v1.0.0/go.mod h1:jtwdyGbJk0Xhe5Y+rwtglQP6Sb1WZST4rT32LWB+sv0=
-github.com/go-openapi/swag v0.26.0 h1:GVDXCmfvhfu1BxiHo8/FA+BbKmhecHnG3varjON5/RI=
+github.com/go-openapi/swag v0.27.1 h1:VotvOLWW8q/EAxB0YdsBBGC8XYyeL1YwBj2ungAGPNg=
-github.com/go-openapi/swag v0.26.0/go.mod h1:82g3193sZJRbocs7bNCqGfIgq8pkuwVwCfhKIRlEQF0=
+github.com/go-openapi/swag v0.27.1/go.mod h1:GTkJPwHfhJp6MWr4/rCh64HVI3Ofu+tcsbfjfHmTxpE=
-github.com/go-openapi/swag/cmdutils v0.26.0 h1:iowihOcvq7y4egO8cOq0dmfohz6wfeQ63U1EnuhO2TU=
+github.com/go-openapi/swag/cmdutils v0.27.1 h1:I7sYqaWVl5mq0NEmNQkAmFDyNin9ufvMX/p2zwtQaOE=
-github.com/go-openapi/swag/cmdutils v0.26.0/go.mod h1:Sm1MVFMkF6guJJ+pQqHnQA3N0j9qALV3NxzDSv6bETM=
+github.com/go-openapi/swag/cmdutils v0.27.1/go.mod h1:Sm1MVFMkF6guJJ+pQqHnQA3N0j9qALV3NxzDSv6bETM=
-github.com/go-openapi/swag/conv v0.26.0 h1:5yGGsPYI1ZCva93U0AoKi/iZrNhaJEjr324YVsiD89I=
+github.com/go-openapi/swag/conv v0.27.1 h1:8wi9ZG+olmY1wXphl93EWniPtbSPkXM/feH7FgjsvrU=
-github.com/go-openapi/swag/conv v0.26.0/go.mod h1:tpAmIL7X58VPnHHiSO4uE3jBeRamGsFsfdDeDtb5ECE=
+github.com/go-openapi/swag/conv v0.27.1/go.mod h1:QbqMivkpKhC3g1B1GGGOJ6ANewI3S62dbzYu3Duowqs=
-github.com/go-openapi/swag/fileutils v0.26.0 h1:WJoPRvsA7QRiiWluowkLJa9jaYR7FCuxmDvnCgaRRxU=
+github.com/go-openapi/swag/fileutils v0.27.1 h1:QQqBSoi5mW4XpU85nS0mLcA+zAE6vLzrb0QkmLKf9oM=
-github.com/go-openapi/swag/fileutils v0.26.0/go.mod h1:0WDJ7lp67eNjPMO50wAWYlKvhOb6CQ37rzR7wrgI8Tc=
+github.com/go-openapi/swag/fileutils v0.27.1/go.mod h1:VvJFZLTZS0AI854gEQz5tk7dBESdLjiNUMSZ/th2ry8=
-github.com/go-openapi/swag/jsonname v0.26.0 h1:gV1NFX9M8avo0YSpmWogqfQISigCmpaiNci8cGECU5w=
+github.com/go-openapi/swag/jsonutils v0.27.1 h1:SVgK3i4USzCU5mibOOS/l4ea2h9UQXy7J7RNLTjuXjU=
-github.com/go-openapi/swag/jsonname v0.26.0/go.mod h1:urBBR8bZNoDYGr653ynhIx+gTeIz0ARZxHkAPktJK2M=
+github.com/go-openapi/swag/jsonutils v0.27.1/go.mod h1:tdlEpZqdcQ17uj6J4YdK9vd8It5qWMwjWXOs0tjpRlk=
-github.com/go-openapi/swag/jsonutils v0.26.0 h1:FawFML2iAXsPqmERscuMPIHmFsoP1tOqWkxBaKNMsnA=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.27.1 h1:mJu3COL9WEaZVp/Kf2PRMi7tPszPEJfSr/OO75ynCs8=
-github.com/go-openapi/swag/jsonutils v0.26.0/go.mod h1:2VmA0CJlyFqgawOaPI9psnjFDqzyivIqLYN34t9p91E=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.27.1/go.mod h1:mofwUWx70wvskwESqRJ//k/9kURmCgyJl5m5Ppoh5kY=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.26.0 h1:apqeINu/ICHouqiRZbyFvuDge5jCmmLTqGQ9V95EaOM=
+github.com/go-openapi/swag/loading v0.27.1 h1:/DxUgDXKbBX4bcn7r9uEXfJyzN5XpiJmZplzQTjrRCY=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.26.0/go.mod h1:AyM6QT8uz5IdKxk5akv0y6u4QvcL9GWERt0Jx/F/R8Y=
+github.com/go-openapi/swag/loading v0.27.1/go.mod h1:jvGh3iA2+zyUUycB5fgJWzeHnhrpvGnJJM0RVE9ZShE=
-github.com/go-openapi/swag/loading v0.26.0 h1:Apg6zaKhCJurpJer0DCxq99qwmhFddBhaMX7kilDcko=
+github.com/go-openapi/swag/mangling v0.27.1 h1:yC9D0HyUE8gbP+BfmGx9+AA89ikwZTMjESK3OnnoaqA=
-github.com/go-openapi/swag/loading v0.26.0/go.mod h1:dBxQ/6V2uBaAQdevN18VELE6xSpJWZxLX4txe12JwDg=
+github.com/go-openapi/swag/mangling v0.27.1/go.mod h1:jtBE2+V+3pILxOR7Vgce+Cwp6A2PgZbvVqfNntbVs0w=
-github.com/go-openapi/swag/mangling v0.26.0 h1:Du2YC4YLA/Y5m/YKQd7AnY5qq0wRKSFZTTt8ktFaXcQ=
+github.com/go-openapi/swag/netutils v0.27.1 h1:mICMFoS82F5TZ4Zy3cqmcQk+BFeCp3Uyq3Np7GI0/qU=
-github.com/go-openapi/swag/mangling v0.26.0/go.mod h1:jifS7W9vbg+pw63bT+GI53otluMQL3CeemuyCHKwVx0=
+github.com/go-openapi/swag/netutils v0.27.1/go.mod h1:J+WYyFMLtvtCGqa6jLv+YNUmIKI3ZRQRrvfNDMoQoEQ=
-github.com/go-openapi/swag/netutils v0.26.0 h1:CmZp+ZT7HrmFwrC3GdGsXBq2+42T1bjKBapcqVpIs3c=
+github.com/go-openapi/swag/pools v0.27.1 h1:9LeadcMyb2GJCbXX5hVQDbZ2Lq9TL4dCs/nx1j5DO0E=
-github.com/go-openapi/swag/netutils v0.26.0/go.mod h1:5iK+Ok3ZohWWex1C50BFTPexi03UaPwjW4Oj8kgrpwo=
+github.com/go-openapi/swag/pools v0.27.1/go.mod h1:kVQefhSK5RWuRe7BXsL8htgBPAMpN7HDGpGEknqugeE=
-github.com/go-openapi/swag/stringutils v0.26.0 h1:qZQngLxs5s7SLijc3N2ZO+fUq2o8LjuWAASSrJuh+xg=
+github.com/go-openapi/swag/stringutils v0.27.1 h1:ZXePZ0r2p1qSjo8tD3Un4vFj8+FqlCkczxDrJIhYUp8=
-github.com/go-openapi/swag/stringutils v0.26.0/go.mod h1:sWn5uY+QIIspwPhvgnqJsH8xqFT2ZbYcvbcFanRyhFE=
+github.com/go-openapi/swag/stringutils v0.27.1/go.mod h1:lzRN95CxXmA03XcDWHLOb6nOMcxCqR5rGY0lOgsfRoM=
-github.com/go-openapi/swag/typeutils v0.26.0 h1:2kdEwdiNWy+JJdOvu5MA2IIg2SylWAFuuyQIKYybfq4=
+github.com/go-openapi/swag/typeutils v0.27.1 h1:KSTdFlfnse4r6dP9IrEnwMldjE+zs71UeEB3//PtVXc=
-github.com/go-openapi/swag/typeutils v0.26.0/go.mod h1:oovDuIUvTrEHVMqWilQzKzV4YlSKgyZmFh7AlfABNVE=
+github.com/go-openapi/swag/typeutils v0.27.1/go.mod h1:Srm0xFNRZ1Y+vCxJclo5qzx8aj+1pAKda/YfFPrG0dQ=
-github.com/go-openapi/swag/yamlutils v0.26.0 h1:H7O8l/8NJJQ/oiReEN+oMpnGMyt8G0hl460nRZxhLMQ=
+github.com/go-openapi/swag/yamlutils v0.27.1 h1:ftxv6xvXb1E3zohUc+okZ9nSqNb9StQX/FXnKZ98sQA=
-github.com/go-openapi/swag/yamlutils v0.26.0/go.mod h1:1evKEGAtP37Pkwcc7EWMF0hedX0/x3Rkvei2wtG/TbU=
+github.com/go-openapi/swag/yamlutils v0.27.1/go.mod h1:bnxFIB1qewGRiZHypXGZ3fNgf13/0HfRgnS/iZBDrOo=
-github.com/go-openapi/testify/enable/yaml/v2 v2.4.2 h1:5zRca5jw7lzVREKCZVNBpysDNBjj74rBh0N2BGQbSR0=
+github.com/go-openapi/testify/enable/yaml/v2 v2.6.0 h1:gGHwAJ0R/5jU8BEGDbfRNR3hL68dAVi84WuOApp29B0=
-github.com/go-openapi/testify/enable/yaml/v2 v2.4.2/go.mod h1:XVevPw5hUXuV+5AkI1u1PeAm27EQVrhXTTCPAF85LmE=
+github.com/go-openapi/testify/enable/yaml/v2 v2.6.0/go.mod h1:tY+St1SGq4NFl0QIqdTY4aEdbChAHxhyB77XQi9iJCo=
-github.com/go-openapi/testify/v2 v2.4.2 h1:tiByHpvE9uHrrKjOszax7ZvKB7QOgizBWGBLuq0ePx4=
+github.com/go-openapi/testify/v2 v2.6.0 h1:5PKH2HE7YJ/LuRPQGvSxBRlFXNQhSetBLlGAgUEu3ug=
-github.com/go-openapi/testify/v2 v2.4.2/go.mod h1:SgsVHtfooshd0tublTtJ50FPKhujf47YRqauXXOUxfw=
+github.com/go-openapi/testify/v2 v2.6.0/go.mod h1:SgsVHtfooshd0tublTtJ50FPKhujf47YRqauXXOUxfw=
 github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
@@ -108,8 +108,8 @@ github.com/goccy/go-yaml v1.18.0 h1:8W7wMFS12Pcas7KU+VVkaiCng+kG8QiFeFwzFb+rwuw=
 github.com/goccy/go-yaml v1.18.0/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
 github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
 github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
-github.com/google/cel-go v0.26.0 h1:DPGjXackMpJWH680oGY4lZhYjIameYmR+/6RBdDGmaI=
+github.com/google/cel-go v0.29.2 h1:ZtDxkeiMmz0mxbKDYiNkE5Lk7V5edMRcaaDf2jX002k=
-github.com/google/cel-go v0.26.0/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM=
+github.com/google/cel-go v0.29.2/go.mod h1:X0bD6iVNR8pkROSOoHVdgTkzmRcosof7WQqCD6wcMc8=
 github.com/google/gnostic-models v0.7.1 h1:SisTfuFKJSKM5CPZkffwi6coztzzeYUhc3v4yxLWH8c=
 github.com/google/gnostic-models v0.7.1/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
@@ -125,16 +125,16 @@ github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 h1:JeSE6pjso5T
 github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674/go.mod h1:r4w70xmWCQKmi1ONH4KIaBptdivuRPyosB9RmPlGEwA=
 github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3 h1:B+8ClL/kCQkRiU82d9xajRPKYMrB7E0MbtzWVi1K4ns=
 github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3/go.mod h1:NbCUVmiS4foBGBHOYlCT25+YmGpJ32dZPi75pGEUpj4=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 h1:X+2YciYSxvMQK0UZ7sg45ZVabVZBeBuvMkmuI2V3Fak=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7/go.mod h1:lW34nIZuQ8UDPdkon5fmfp2l3+ZkQ2me/+oecHYLOII=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0/go.mod h1:Hyl3n6Twe1hvtd9XUXDec4pTvgMSEixRuQKPTMH2bNs=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/joshdk/go-junit v1.0.0 h1:S86cUKIdwBHWwA6xCmFlf3RTLfVXYQfvanM5Uh+K6GE=
 github.com/joshdk/go-junit v1.0.0/go.mod h1:TiiV0PqkaNfFXjEiyjWM3XXrhVyCa1K4Zfga6W52ung=
 github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
-github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
+github.com/klauspost/compress v1.19.0 h1:sXLILfc9jV2QYWkzFOPWStmcUVH2RHEB1JCdY2oVvCQ=
-github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
+github.com/klauspost/compress v1.19.0/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@@ -161,10 +161,10 @@ github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 h1:n6/
 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00/go.mod h1:Pm3mSP3c5uWn86xMLZ5Sa7JB9GsEZySvHYXCTK4E9q4=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.32.0 h1:Hw7s2pVrQo/8Yz5N77qdnpHaoc+c6cC9WIV1Jce+J6E=
+github.com/onsi/ginkgo/v2 v2.32.1 h1:6tlvcDm/3sE8lGJbZ4+d4mO3RLy24/tQWOFzVSQNIfw=
-github.com/onsi/ginkgo/v2 v2.32.0/go.mod h1:+aXOY+vzZ5mu2iI2HpTZUPmM//oQfsNFX6gU9kNcA44=
+github.com/onsi/ginkgo/v2 v2.32.1/go.mod h1:+aXOY+vzZ5mu2iI2HpTZUPmM//oQfsNFX6gU9kNcA44=
-github.com/onsi/gomega v1.42.1 h1:iN1rCUX+44NZ1Dc97MPoeFYbFR0vh8zxoxMFwKdyZ6I=
+github.com/onsi/gomega v1.43.0 h1:VlG/1FxqNxhSO+lq/OHBNaaqwiBK/mO8JbVkX9Y+FeU=
-github.com/onsi/gomega v1.42.1/go.mod h1:REff/hsDsodHoKlWsP2mAPhu1+5/6hVYNf9rIEBpeSg=
+github.com/onsi/gomega v1.43.0/go.mod h1:REff/hsDsodHoKlWsP2mAPhu1+5/6hVYNf9rIEBpeSg=
 github.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=
 github.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
@@ -174,14 +174,14 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRI
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.92.0 h1:cgcHnhpMbk86QzIe23vwUiIUNBB0kftdOA9JJA83ASA=
 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.92.0/go.mod h1:eGo3VN8Kq5Fd0M7Cdx0oqbIxo753t99ojUZFVQkO1UM=
-github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=
+github.com/prometheus/client_golang v1.24.0 h1:5XStIklKuAtJSNpdD3s8XJj/Yv78IQmE1kbNk87JrAI=
-github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
+github.com/prometheus/client_golang v1.24.0/go.mod h1:QcsNdotprC2nS4BTM2ucbcqxd2CeXTEa9jW7zHO9iDE=
 github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
 github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
-github.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4=
+github.com/prometheus/common v0.70.0 h1:bcpru3tWPVnxGnETLgOV5jbp/JRXgYEyv65CuBLAMMI=
-github.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=
+github.com/prometheus/common v0.70.0/go.mod h1:S/SFasQmgGiYH6C81LKCtYa8QACgthGg5zxL2udV7SY=
-github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
+github.com/prometheus/procfs v0.21.1 h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI=
-github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
+github.com/prometheus/procfs v0.21.1/go.mod h1:aB55Cww9pdSJVHk0hUf0inxWyyjPogFIjmHKYgMKmtY=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
@@ -204,19 +204,12 @@ github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=
 github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=
-github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs=
-github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.3 h1:jmXUvGomnU1o3W/V5h2VEradbpJDwGrzugQQvL0POH4=
-github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/objx v0.5.3/go.mod h1:rDQraq+vQZU7Fde9LOZLr8Tax6zZvy4kuNKF+QYS+U0=
-github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
-github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
-github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
@@ -237,24 +230,24 @@ github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
 github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 h1:OyrsyzuttWTSur2qN/Lm0m2a8yqyIjUVBZcxFPuXq2o=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0/go.mod h1:C2NGBr+kAB4bk3xtMXfZ94gqFDtg/GkI7e9zqGh5Beg=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0/go.mod h1:z9+yiacE0IHRqM4qFfkbt/JYlmYXgss8GY/jXoNuPJI=
-go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
+go.opentelemetry.io/otel v1.44.0 h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=
-go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
+go.opentelemetry.io/otel v1.44.0/go.mod h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 h1:QKdN8ly8zEMrByybbQgv8cWBcdAarwmIPZ6FThrWXJs=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 h1:4YsVu3B8+3qtWYYrsUYgn0OG78pN0rnNPRGX4SbokQI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0/go.mod h1:bTdK1nhqF76qiPoCCdyFIV+N/sRHYXYCTQc+3VCi3MI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0/go.mod h1:+wnlSn0mD1ADVMe3v9Z/WIaiz6q6gL2J/ejaAmdmv80=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 h1:DvJDOPmSWQHWywQS6lKL+pb8s3gBLOZUtw4N+mavW1I=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 h1:qazEJlUOQzhCpzQpFETGby7EdqjI1wsd0W+6Gg1SCTU=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0/go.mod h1:EtekO9DEJb4/jRyN4v4Qjc2yA7AtfCBuz2FynRUWTXs=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0/go.mod h1:fOD2Yefuxixkx3ahVNf0O/PERb6r4OlbxfATVnYvzCo=
-go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
+go.opentelemetry.io/otel/metric v1.44.0 h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=
-go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
+go.opentelemetry.io/otel/metric v1.44.0/go.mod h1:8O7hanEPBNgEMmybD3s2VBKcgWOCsA6tzHBPODAiquo=
-go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
+go.opentelemetry.io/otel/sdk v1.44.0 h1:nHYwb9lK+fJPU/dnT6s7W7Z8itMWyqrnVfbheVYrZ58=
-go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
+go.opentelemetry.io/otel/sdk v1.44.0/go.mod h1:Osuydd3Se74nqjAKxid74N5eC+jfEqfTegHRnq58oK0=
-go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
+go.opentelemetry.io/otel/sdk/metric v1.44.0 h1:3LlKgI+VjbVsjNRFZJZAJ30WjXC5VkNRks6si09iEfI=
-go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
+go.opentelemetry.io/otel/sdk/metric v1.44.0/go.mod h1:5B5pMARnXxKhltooO4xUuCBorl65a4EpnTalObqOigA=
-go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
+go.opentelemetry.io/otel/trace v1.44.0 h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=
-go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
+go.opentelemetry.io/otel/trace v1.44.0/go.mod h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE=
-go.opentelemetry.io/proto/otlp v1.9.0 h1:l706jCMITVouPOqEnii2fIAuO3IVGBRPV5ICjceRb/A=
+go.opentelemetry.io/proto/otlp v1.10.0 h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g=
-go.opentelemetry.io/proto/otlp v1.9.0/go.mod h1:xE+Cx5E/eEHw+ISFkwPLwCZefwVjY+pqKg1qcK03+/4=
+go.opentelemetry.io/proto/otlp v1.10.0/go.mod h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
@@ -265,36 +258,36 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
-golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 h1:fQsdNF2N+/YewlRZiricy4P1iimyPKZ/xwniHj8Q2a0=
+golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f h1:W3F4c+6OLc6H2lb//N1q4WpJkhzJCK5J6kUi1NTVXfM=
-golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93/go.mod h1:EPRbTFwzwjXj9NpYyyrvenVh9Y+GFeEvMNh7Xuz7xgU=
+golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f/go.mod h1:J1xhfL/vlindoeF/aINzNzt2Bket5bjo9sdOYzOsU80=
-golang.org/x/mod v0.36.0 h1:JJjpVx6myfUsUdAzZuOSTTmRE0PfZeNWzzvKrP7amb4=
+golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
-golang.org/x/mod v0.36.0/go.mod h1:moc6ELqsWcOw5Ef3xVprK5ul/MvtVvkIXLziUOICjUQ=
+golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
-golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=
+golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec=
+golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
-golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
+golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
-golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
 golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
-golang.org/x/term v0.44.0 h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc=
+golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0=
-golang.org/x/term v0.44.0/go.mod h1:7ze4MdzUzLXpSAoFP1H0bOI9aXDqveSvatT5vKcFh2Y=
+golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w=
-golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4=
+golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
 golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
 golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
-golang.org/x/tools v0.45.0 h1:18qN3FAooORvApf5XjCXgsuayZOEtXf6JK18I3+ONa8=
+golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE=
-golang.org/x/tools v0.45.0/go.mod h1:LuUGqqaXcXMEFEruIVJVm5mgDD8vww/z/SR1gQ4uE/0=
+golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk=
 gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
-google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 h1:yQugLulqltosq0B/f8l4w9VryjV+N/5gcW0jQ3N8Qec=
+google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8=
-google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478/go.mod h1:C6ADNqOxbgdUUeRTU+LCHDPB9ttAMCTff6auwCVa4uc=
+google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:q4lMZS6kskjT5HvCPrnnypcDPVJqT/f4nfxmkE7gryY=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad h1:45WmJvIV6C2+O/jjLkPUH+F3aOj/1miDoU2DD0+NWbg=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
+google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU=
-google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
+google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8=
 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=
 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -308,28 +301,28 @@ gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.36.3 h1:NxB+05W2UGqXWFXcLO0RB5cnqnUPP5v5sVlaOH0Iz4w=
+k8s.io/api v0.37.0 h1:Z//Vj9N7RA/yS2sDmxyeo7h+RR4zbUrd2vrd3Z0TbB4=
-k8s.io/api v0.36.3/go.mod h1:JzLQKqRHC5+I8RVj/lS3lCg0mg6nWI9Fo/Sk3ElxHzg=
+k8s.io/api v0.37.0/go.mod h1:LKXgcJWMc+f4OLbP5SFR8rulEg07zZhpi/zMULiBImk=
-k8s.io/apiextensions-apiserver v0.36.3 h1:dPmOAPhwTtqb1bTxbFPsy18KHPhktQeO3WUPXunZIB0=
+k8s.io/apiextensions-apiserver v0.37.0 h1:zRMQ3+/LIE5oZ0tVvXwYHC+dIkSP5cjNWju7AZU1LOI=
-k8s.io/apiextensions-apiserver v0.36.3/go.mod h1:KTXFqgXiuw2pRoL+Wpmttqc+up9Xt/GohadPWeLLOa4=
+k8s.io/apiextensions-apiserver v0.37.0/go.mod h1:HU0PfSBwchHL5iDau6jjt9zU6ryWkDDlaVUiq91NK80=
-k8s.io/apimachinery v0.36.3 h1:PkzMRBRG8joFD8EhCuQAtNPvJlxb82FwplP26HIzvAM=
+k8s.io/apimachinery v0.37.0 h1:Np2AbDtf8x6RDHiD8T9LbKJ9gaegeVNa8yNm5FuGKm0=
-k8s.io/apimachinery v0.36.3/go.mod h1:cTSjBWgPe/6CQyBKzY/hDIRWCQQQeK0mfLbml0UYFHE=
+k8s.io/apimachinery v0.37.0/go.mod h1:RN3nhprFSCxOi5Selxd7oMTXOe/c+ZbcE7Im+TS2zkE=
-k8s.io/apiserver v0.36.3 h1:MGSg2SkdfuytiDEcRylT5mQFmmSsbx90XFUO67Y4bsQ=
+k8s.io/apiserver v0.37.0 h1:TXg7OxsOWrAH8J4Zi/gBAZuMw1Dfdd+6cca2h4qjRqo=
-k8s.io/apiserver v0.36.3/go.mod h1:fVH7zv9EUNUA7Fl7LtDKh8aB9W7u1VQPSGtWV5SjUxg=
+k8s.io/apiserver v0.37.0/go.mod h1:OddHDF4gy9qyIb8o/3+qaeP6S0vEObWLgOygVqXksv0=
-k8s.io/client-go v0.36.3 h1:M4JdVzXxYcZk4fGpfDdYnxSwhLKWCFoQsHW6t+z8Hfg=
+k8s.io/client-go v0.37.0 h1:nsN31fy8wBySuZ+QRnKmrjRSQLOG2rvoGN0tKd12zhQ=
-k8s.io/client-go v0.36.3/go.mod h1:gcPwr0c87vjjG6HB6pWEqOeuYVoXSsREjzux2j6GF30=
+k8s.io/client-go v0.37.0/go.mod h1:FcGqw+Ll/gNQiq+nPGY1Oyt9y7SgDh1d3MW3RFDEbn0=
-k8s.io/component-base v0.36.3 h1:vc/UFvPCkW0irPz84LAodAL1j3f4xktPM6dDJIEheAY=
+k8s.io/component-base v0.37.0 h1:3SdSa4+itMdFTDFTeR8CxKGmSTSMXFlKL4ky8OqjguM=
-k8s.io/component-base v0.36.3/go.mod h1:hZbNFG+gCMl9EbykDGEu73feKP9/Cq6JsV4pTo9GTO8=
+k8s.io/component-base v0.37.0/go.mod h1:LjOebp4R9y6LODWZQv102ZQxGheLcDO2ZJLAw6bbh4I=
 k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
 k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
-k8s.io/kube-openapi v0.0.0-20260603220949-865597e52e25 h1:mPMaPMpBij2V1Wv/fR+HW124vVGXXvOSS9ver/9yjWs=
+k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad h1:oXImqH8mQNk7PmvzKhmN3ddJoY6OnyM225MXwGHPm0A=
-k8s.io/kube-openapi v0.0.0-20260603220949-865597e52e25/go.mod h1:V/QaCUYDa+0QpcHhVVc5l99Uz56wEMEXBSj9oCDkNDY=
+k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad/go.mod h1:0/mqHCVhlumdJ3BhCfnjSZQE037nAhNodh1/hK0T8/I=
-k8s.io/streaming v0.36.3 h1:9rAaqBk0C0Pc7+/fqGekj07NV+/Xrew58p647A0JT8w=
+k8s.io/streaming v0.37.0 h1:iPBUZLZiKt5bV+lxJurASMOV07VuBhNpiwJt2//AWrM=
-k8s.io/streaming v0.36.3/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s=
+k8s.io/streaming v0.37.0/go.mod h1:APlJR26ZWRcVy5bIEj0QRrKUXROtBHPcxl2NT7EAzPU=
 k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3 h1:jVkFFVfXdXP74B/zbO3hM3hpSFD0xvhQ5U686DPurkE=
 k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3/go.mod h1:M2s5JB1lIYP3jzZdorPLHXIPJzt9vv2muW5a6L9DtNM=
-sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 h1:hSfpvjjTQXQY2Fol2CS0QHMNs/WI1MOSGzCm1KhM5ec=
+sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0 h1:/YpDJ4vReG7ZmzSpBGxduXgywWkJU9zHubgJG03MT+Y=
-sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
+sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.36.0/go.mod h1:tJo1aepTXyR+8Xs3sUsGBDk4Ub2AM5dPAPKJx0mpm5c=
 sigs.k8s.io/controller-runtime v0.24.1 h1:miPEwrmirImAvgME1L9qebGHrOnGJoVmVdtOU9fRfo4=
 sigs.k8s.io/controller-runtime v0.24.1/go.mod h1:vFkfY5fGt5xAC/sKb8IBFKgWPNKG9OUG29dR8Y2wImw=
 sigs.k8s.io/gateway-api v1.6.0 h1:735YBRj5NXFrOGX0GoSjwzUIzbz8kiEOfADsqHFmHgE=
@@ -342,7 +335,7 @@ sigs.k8s.io/kustomize/kyaml v0.21.1 h1:IVlbmhC076nf6foyL6Taw4BkrLuEsXUXNpsE+ScX7
 sigs.k8s.io/kustomize/kyaml v0.21.1/go.mod h1:hmxADesM3yUN2vbA5z1/YTBnzLJ1dajdqpQonwBL1FQ=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
-sigs.k8s.io/structured-merge-diff/v6 v6.4.0 h1:qmp2e3ZfFi1/jJbDGpD4mt3wyp6PE1NfKHCYLqgNQJo=
+sigs.k8s.io/structured-merge-diff/v6 v6.4.2 h1:qdOxHwrl2Kaag1aQEarlYcOA9vSyGCp3CIki3aW8c4Q=
-sigs.k8s.io/structured-merge-diff/v6 v6.4.0/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
+sigs.k8s.io/structured-merge-diff/v6 v6.4.2/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=

internal/cnpgi/common/common.go

@@ -52,6 +52,11 @@ const (
 	// BarmanEndpointCACertificateFileName is the name of the file in which the barman endpoint
 	// CA certificate is stored.
 	BarmanEndpointCACertificateFileName = "barman-ca.crt"
+
+	// PgWalVolumePgWalPath is the path of the pg_wal directory inside the WAL volume,
+	// used when a separate WAL storage is configured. During a restore the pg_wal
+	// directory is moved here and symlinked back into PGDATA.
+	PgWalVolumePgWalPath = "/var/lib/postgresql/wal/pg_wal"
 )
 
 // GetRestoreCABundleEnv gets the enveronment variables to be used when custom

internal/cnpgi/instance/identity.go

@@ -70,6 +70,13 @@ func (i IdentityImplementation) GetPluginCapabilities(
 					},
 				},
 			},
+			{
+				Type: &identity.PluginCapability_Service_{
+					Service: &identity.PluginCapability_Service{
+						Type: identity.PluginCapability_Service_TYPE_RESTORE_JOB,
+					},
+				},
+			},
 		},
 	}, nil
 }

internal/cnpgi/instance/identity_test.go

@@ -0,0 +1,51 @@
+/*
+Copyright © contributors to CloudNativePG, established as
+CloudNativePG a Series of LF Projects, LLC.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package instance
+
+import (
+	"github.com/cloudnative-pg/cnpg-i/pkg/identity"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+)
+
+var _ = Describe("IdentityImplementation", func() {
+	Describe("GetPluginCapabilities", func() {
+		It("declares the WAL, backup, metrics and restore-job services", func(ctx SpecContext) {
+			impl := IdentityImplementation{}
+			response, err := impl.GetPluginCapabilities(ctx, &identity.GetPluginCapabilitiesRequest{})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(response).NotTo(BeNil())
+
+			var serviceTypes []identity.PluginCapability_Service_Type
+			for _, capability := range response.GetCapabilities() {
+				serviceTypes = append(serviceTypes, capability.GetService().GetType())
+			}
+
+			// Runs the phase-0 restore in-process now, hence TYPE_RESTORE_JOB below.
+			Expect(serviceTypes).To(ConsistOf(
+				identity.PluginCapability_Service_TYPE_WAL_SERVICE,
+				identity.PluginCapability_Service_TYPE_BACKUP_SERVICE,
+				identity.PluginCapability_Service_TYPE_METRICS,
+				identity.PluginCapability_Service_TYPE_RESTORE_JOB,
+			))
+		})
+	})
+})

internal/cnpgi/instance/start.go

@@ -25,11 +25,13 @@ import (
 	"github.com/cloudnative-pg/cnpg-i-machinery/pkg/pluginhelper/http"
 	"github.com/cloudnative-pg/cnpg-i/pkg/backup"
 	"github.com/cloudnative-pg/cnpg-i/pkg/metrics"
+	restore "github.com/cloudnative-pg/cnpg-i/pkg/restore/job"
 	"github.com/cloudnative-pg/cnpg-i/pkg/wal"
 	"google.golang.org/grpc"
 	"sigs.k8s.io/controller-runtime/pkg/client"
 
 	"github.com/cloudnative-pg/plugin-barman-cloud/internal/cnpgi/common"
+	barmanrestore "github.com/cloudnative-pg/plugin-barman-cloud/internal/cnpgi/restore"
 )
 
 // CNPGI is the implementation of the PostgreSQL sidecar
@@ -60,6 +62,15 @@ func (c *CNPGI) Start(ctx context.Context) error {
 		metrics.RegisterMetricsServer(server, &metricsImpl{
 			Client: c.Client,
 		})
+		// The instance pod runs the phase-0 bootstrap in-process (no separate
+		// recovery Job), so the same sidecar must answer the Restore RPC that
+		// initializes PGDATA from the object store before PostgreSQL starts.
+		restore.RegisterRestoreJobHooksServer(server, &barmanrestore.JobHookImpl{
+			Client:               c.Client,
+			SpoolDirectory:       c.SpoolDirectory,
+			PgDataPath:           c.PGDataPath,
+			PgWalFolderToSymlink: common.PgWalVolumePgWalPath,
+		})
 		common.AddHealthCheck(server)
 		return nil
 	}

internal/cnpgi/metadata/constants.go

@@ -63,7 +63,7 @@ const (
 // Data is the metadata of this plugin.
 var Data = identity.GetPluginMetadataResponse{
 	Name:          PluginName,
-	Version:       "0.14.0", // x-release-please-version
+	Version:       "0.15.0", // x-release-please-version
 	DisplayName:   "BarmanCloudInstance",
 	ProjectUrl:    "https://github.com/cloudnative-pg/plugin-barman-cloud",
 	RepositoryUrl: "https://github.com/cloudnative-pg/plugin-barman-cloud",

internal/cnpgi/operator/config/config.go

@@ -102,6 +102,13 @@ func (config *PluginConfiguration) GetReplicaSourceBarmanObjectKey() types.Names
 	}
 }
 
+// HasAnyBarmanObjectStore reports whether any barman object store is configured.
+func (config *PluginConfiguration) HasAnyBarmanObjectStore() bool {
+	return len(config.BarmanObjectName) > 0 ||
+		len(config.RecoveryBarmanObjectName) > 0 ||
+		len(config.ReplicaSourceBarmanObjectName) > 0
+}
+
 // GetReferredBarmanObjectsKey gets the list of barman objects referred by this
 // plugin configuration
 func (config *PluginConfiguration) GetReferredBarmanObjectsKey() []types.NamespacedName {
@@ -263,9 +270,7 @@ func getReplicaSourcePlugin(cluster *cnpgv1.Cluster) *cnpgv1.PluginConfiguration
 func (config *PluginConfiguration) Validate() error {
 	err := NewConfigurationError()
 
-	if len(config.BarmanObjectName) == 0 &&
+	if !config.HasAnyBarmanObjectStore() {
-		len(config.RecoveryBarmanObjectName) == 0 &&
-		len(config.ReplicaSourceBarmanObjectName) == 0 {
 		return err.WithMessage("no reference to barmanObjectName have been included")
 	}
 

internal/cnpgi/operator/lifecycle.go

@@ -322,6 +322,42 @@ func (impl LifecycleImplementation) collectAdditionalInstanceArgs(
 	return nil, nil
 }
 
+// shouldInjectBarmanSidecar decides whether an instance pod needs the
+// plugin-barman-cloud sidecar.
+//
+// Backup/archiving and replica-source configs need it for as long as the
+// cluster exists, so those always inject it. A recovery-only cluster (only
+// RecoveryBarmanObjectName set, mirroring pluginConfiguration.Validate())
+// only needs it for the one-time bootstrap restore, so it's gated on
+// cluster.Status.CurrentPrimary instead.
+//
+// CurrentPrimary is set by the instance manager itself, from inside the pod,
+// only once bootstrap completes (see instance_startup.go in cloudnative-pg).
+// cluster.Status.Instances / IsInitialized() looks equivalent but flips as
+// soon as the instance's PVC exists, before the pod is even created - using
+// it here would mean the sidecar never reaches the pod that needs it.
+//
+// Once CurrentPrimary is set, the operator's drift-check
+// (checkPodSpecIsOutdated) sees the running pod's spec as outdated and rolls
+// it out to drop the sidecar. Accepted deliberately: one deterministic
+// rollout via the same machinery used for any other pod-spec change
+// (switchover if a replica exists, in-place restart otherwise), not a new
+// risk.
+func shouldInjectBarmanSidecar(
+	cluster *cnpgv1.Cluster,
+	pluginConfiguration *config.PluginConfiguration,
+) bool {
+	if len(pluginConfiguration.BarmanObjectName) != 0 || len(pluginConfiguration.ReplicaSourceBarmanObjectName) != 0 {
+		return true
+	}
+
+	if len(pluginConfiguration.RecoveryBarmanObjectName) == 0 {
+		return false
+	}
+
+	return cluster.Status.CurrentPrimary == ""
+}
+
 func reconcileInstancePod(
 	ctx context.Context,
 	cluster *cnpgv1.Cluster,
@@ -339,8 +375,7 @@ func reconcileInstancePod(
 
 	mutatedPod := pod.DeepCopy()
 
-	if len(pluginConfiguration.BarmanObjectName) != 0 ||
+	if shouldInjectBarmanSidecar(cluster, pluginConfiguration) {
-		len(pluginConfiguration.ReplicaSourceBarmanObjectName) != 0 {
 		if err := reconcilePodSpec(
 			cluster,
 			&mutatedPod.Spec,
@@ -353,7 +388,7 @@ func reconcileInstancePod(
 			return nil, fmt.Errorf("while reconciling pod spec for pod: %w", err)
 		}
 	} else {
-		contextLogger.Debug("No need to mutate instance with no backup & archiving configuration")
+		contextLogger.Debug("No need to mutate instance, sidecar not required for this configuration and pod")
 	}
 
 	patch, err := object.CreatePatch(mutatedPod, pod)

internal/cnpgi/operator/lifecycle_test.go

@@ -242,6 +242,69 @@ var _ = Describe("LifecycleImplementation", func() {
 				HaveKey("value")))
 		})
 
+		It("injects the sidecar for a recovery-only cluster", func(ctx SpecContext) {
+			recoveryOnlyConfig := &config.PluginConfiguration{
+				RecoveryBarmanObjectName: "minio-store-recovery",
+			}
+			pod := &corev1.Pod{
+				TypeMeta:   podTypeMeta,
+				ObjectMeta: metav1.ObjectMeta{Name: "test-pod"},
+				Spec:       corev1.PodSpec{Containers: []corev1.Container{{Name: "postgres"}}},
+			}
+			podJSON, _ := json.Marshal(pod)
+			request := &lifecycle.OperatorLifecycleRequest{
+				ObjectDefinition: podJSON,
+			}
+
+			response, err := reconcileInstancePod(ctx, cluster, request, recoveryOnlyConfig, sidecarConfiguration{})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(response).NotTo(BeNil())
+			Expect(response.JsonPatch).NotTo(BeEmpty())
+			var patch []map[string]interface{}
+			Expect(json.Unmarshal(response.JsonPatch, &patch)).To(Succeed())
+			Expect(patch).To(ContainElement(HaveKeyWithValue("path", "/spec/initContainers")))
+		})
+
+		It("does not inject the sidecar for a recovery-only cluster that has "+
+			"already completed its initial bootstrap", func(ctx SpecContext) {
+			recoveryOnlyConfig := &config.PluginConfiguration{
+				RecoveryBarmanObjectName: "minio-store-recovery",
+			}
+			cluster.Status.CurrentPrimary = "test-pod"
+			pod := &corev1.Pod{
+				TypeMeta:   podTypeMeta,
+				ObjectMeta: metav1.ObjectMeta{Name: "test-pod"},
+				Spec:       corev1.PodSpec{Containers: []corev1.Container{{Name: "postgres"}}},
+			}
+			podJSON, _ := json.Marshal(pod)
+			request := &lifecycle.OperatorLifecycleRequest{
+				ObjectDefinition: podJSON,
+			}
+
+			response, err := reconcileInstancePod(ctx, cluster, request, recoveryOnlyConfig, sidecarConfiguration{})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(response).NotTo(BeNil())
+			Expect(response.JsonPatch).To(BeEmpty())
+		})
+
+		It("does not mutate the pod when no object store is configured", func(ctx SpecContext) {
+			emptyConfig := &config.PluginConfiguration{}
+			pod := &corev1.Pod{
+				TypeMeta:   podTypeMeta,
+				ObjectMeta: metav1.ObjectMeta{Name: "test-pod"},
+				Spec:       corev1.PodSpec{Containers: []corev1.Container{{Name: "postgres"}}},
+			}
+			podJSON, _ := json.Marshal(pod)
+			request := &lifecycle.OperatorLifecycleRequest{
+				ObjectDefinition: podJSON,
+			}
+
+			response, err := reconcileInstancePod(ctx, cluster, request, emptyConfig, sidecarConfiguration{})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(response).NotTo(BeNil())
+			Expect(response.JsonPatch).To(BeEmpty())
+		})
+
 		It("returns an error for invalid pod definition", func(ctx SpecContext) {
 			request := &lifecycle.OperatorLifecycleRequest{
 				ObjectDefinition: []byte("invalid-json"),

internal/cnpgi/restore/start.go

@@ -44,9 +44,6 @@ type CNPGI struct {
 
 // Start starts the GRPC service
 func (c *CNPGI) Start(ctx context.Context) error {
-	// PgWalVolumePgWalPath is the path of pg_wal directory inside the WAL volume when present
-	const PgWalVolumePgWalPath = "/var/lib/postgresql/wal/pg_wal"
-
 	enrich := func(server *grpc.Server) error {
 		wal.RegisterWALServer(server, common.WALServiceImplementation{
 			InstanceName:   c.InstanceName,
@@ -60,7 +57,7 @@ func (c *CNPGI) Start(ctx context.Context) error {
 			Client:               c.Client,
 			SpoolDirectory:       c.SpoolDirectory,
 			PgDataPath:           c.PGDataPath,
-			PgWalFolderToSymlink: PgWalVolumePgWalPath,
+			PgWalFolderToSymlink: common.PgWalVolumePgWalPath,
 		})
 
 		common.AddHealthCheck(server)

manifest.yaml

@@ -459,7 +459,9 @@ spec:
                               description: Selects a key of a ConfigMap.
                               properties:
                                 key:
-                                  description: The key to select.
+                                  description: |-
+                                    The key to select from the ConfigMap's Data field.
+                                    Keys in the BinaryData field are not currently propagated to container env vars.
                                   type: string
                                 name:
                                   default: ""

test/e2e/internal/certmanager/certmanager.go

@@ -58,7 +58,7 @@ func WithIgnoreExistingResources(ignore bool) InstallOption {
 // DefaultVersion is the default version of cert-manager to install.
 //
 // renovate: datasource=github-releases depName=cert-manager/cert-manager
-const DefaultVersion = "v1.21.0"
+const DefaultVersion = "v1.21.1"
 
 // Install installs cert-manager using kubectl.
 func Install(ctx context.Context, cl client.Client, opts ...InstallOption) error {

test/e2e/internal/objectstore/azurite.go

@@ -72,8 +72,8 @@ func newAzuriteDeployment(namespace, name string) *appsv1.Deployment {
 						{
 							Name: name,
 							// renovate: datasource=docker depName=mcr.microsoft.com/azure-storage/azurite versioning=docker
-							// Version: 3.36.0
+							// Version: 3.37.0
-							Image: "mcr.microsoft.com/azure-storage/azurite@sha256:76b8127d608fab8287a14a4bfeb9a5502cdcffb4bf1e86f09f324ebb0e70edba",
+							Image: "mcr.microsoft.com/azure-storage/azurite@sha256:830430c1da1a2d537e08f3e6764dd1f5ae00cf0346bcaf625b968ec3f0971fd5",
 							Args: []string{
 								"azurite-blob",
 								"--blobHost",

test/e2e/internal/objectstore/fakegcsserver.go

@@ -72,8 +72,8 @@ func newGCSDeployment(namespace, name string) *appsv1.Deployment {
 						{
 							Name:  name,
 							// renovate: datasource=docker depName=fsouza/fake-gcs-server versioning=docker
-							// Version: 1.55.1
+							// Version: 1.56.1
-							Image: "fsouza/fake-gcs-server@sha256:91afded49de804aa61b5f3eb6c7cd65205acf9e5c5e047cf0ba7d9507af806c8",
+							Image: "fsouza/fake-gcs-server@sha256:797ce226d62f947c009dc40246b30cfb456b8473d8241407f9d6f2c04e4d69ef",
 							Ports: []corev1.ContainerPort{
 								{
 									ContainerPort: 4443,

test/e2e/internal/tests/backup/backup_restore.go

@@ -56,6 +56,12 @@ var _ = Describe("Backup and restore", func() {
 			ctx SpecContext,
 			factory testCaseFactory,
 		) {
+			switch factory.(type) {
+			case *gcsBackupPluginBackupPluginRestore, *gcsBackupPluginBackupInTreeRestore,
+				*gcsBackupPluginInTreeBackupPluginRestore:
+				Skip("GCS e2e tests are disabled until https://github.com/EnterpriseDB/barman/issues/1218 is fixed")
+			}
+
 			testResources := factory.createBackupRestoreTestResources(namespace.Name)
 
 			By("starting the ObjectStore deployment")

test/e2e/internal/tests/replicacluster/replica_cluster.go

@@ -57,6 +57,11 @@ var _ = Describe("Replica cluster", func() {
 			ctx SpecContext,
 			factory testCaseFactory,
 		) {
+			switch factory.(type) {
+			case gcsReplicaClusterFactory:
+				Skip("GCS e2e tests are disabled until https://github.com/EnterpriseDB/barman/issues/1218 is fixed")
+			}
+
 			testResources := factory.createReplicaClusterTestResources(namespace.Name)
 
 			By("starting the ObjectStore deployments")

test/e2e/internal/tests/walrestore/fixtures.go

@@ -121,8 +121,8 @@ func newS3ClientDeployment(namespace string) *appsv1.Deployment {
 						{
 							Name: s3ClientName,
 							// renovate: datasource=docker depName=amazon/aws-cli versioning=docker
-							// Version: 2.36.9
+							// Version: 2.36.32
-							Image:   "docker.io/amazon/aws-cli@sha256:00dee8ccaf669721f8163944ea9e6ac13183851b23d5b7a9868a608bc932cfdb",
+							Image:   "docker.io/amazon/aws-cli@sha256:f630107e3eadb6479fa441631bbf50d15cf354a6ace85b6028bf6b3e5c69c605",
 							Command: []string{"sleep", "infinity"},
 							Env: []corev1.EnvVar{
 								{

web/docs/concepts.md

@@ -35,7 +35,7 @@ object storage system. It allows you to configure:
 - **Base backup options**—with similar settings for compression, concurrency,
   and encryption—under `.spec.configuration.data`
 - **Retention policies** to manage the life-cycle of archived WALs and backups
-  via `.spec.configuration.retentionPolicy`
+  via `.spec.retentionPolicy`
 
 WAL files are archived in the `wals` directory, while base backups are stored
 as **tarballs** in the `base` directory, following the

web/docs/installation.mdx

@@ -54,10 +54,49 @@ Both checks are required before proceeding with the installation.
 
 ## Installing the Barman Cloud Plugin
 
-import { InstallationSnippet } from '@site/src/components/Installation';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+import { InstallationSnippet, ManifestVersion } from '@site/src/components/Installation';
+import { HelmInstallationSnippet } from '@site/src/components/HelmInstallation';
 
-Install the plugin using `kubectl` by applying the manifest for the latest
+<Tabs groupId="install-method" queryString>
-release:
+  <TabItem value="helm" label="Helm Chart" default>
+
+The plugin can be installed using the provided [Helm chart](https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud).
+This installs the latest published chart release; to test an unreleased
+development snapshot instead, switch to the [**Manifest (kubectl)**](./?install-method=kubectl#installing-the-barman-cloud-plugin) tab.
+
+<HelmInstallationSnippet />
+
+Example output:
+
+```output
+Release "plugin-barman-cloud" does not exist. Installing it now.
+NAME: plugin-barman-cloud
+LAST DEPLOYED: Wed Jul  1 09:05:16 2026
+NAMESPACE: cnpg-system
+STATUS: deployed
+REVISION: 1
+DESCRIPTION: Install complete
+TEST SUITE: None
+```
+
+Finally, check that the deployment is up and running:
+
+```sh
+kubectl -n cnpg-system rollout status deploy/plugin-barman-cloud
+```
+
+Example output:
+
+```output
+deployment "plugin-barman-cloud" successfully rolled out
+```
+
+  </TabItem>
+  <TabItem value="kubectl" label="Manifest (kubectl)">
+
+Install the plugin using `kubectl` by applying the manifest for <ManifestVersion />:
 
 <InstallationSnippet />
 
@@ -86,8 +125,7 @@ issuer.cert-manager.io/selfsigned-issuer created
 Finally, check that the deployment is up and running:
 
 ```sh
-kubectl rollout status deployment \
+kubectl -n cnpg-system rollout status deploy/barman-cloud
-  -n cnpg-system barman-cloud
 ```
 
 Example output:
@@ -96,14 +134,15 @@ Example output:
 deployment "barman-cloud" successfully rolled out
 ```
 
+  </TabItem>
+</Tabs>
+
+---
+
 This confirms that the plugin is deployed and ready to use.
 
 ## Testing the latest development snapshot
 
-You can also test the latest development snapshot of the plugin with the
+import { DevSnapshotSection } from '@site/src/components/Installation';
-following command:
 
-```sh
+<DevSnapshotSection />
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/docs/troubleshooting.md

@@ -485,14 +485,10 @@ If problems persist:
 
 ### Plugin Limitations
 
-1. **Installation method**: Currently only supports manifest and Kustomize
+1. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
    resources with PostgreSQL
 
-3. **Plugin restart behavior**: Restarting the sidecar container requires
+2. **Plugin restart behavior**: Restarting the sidecar container requires
    restarting the entire PostgreSQL pod
 
 ## Recap of General Debugging Steps
@@ -588,4 +584,3 @@ kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys
 * **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
 * **"Connection timeout"** — Check network connectivity and firewall rules.
 * **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/src/components/HelmInstallation/index.tsx

@@ -0,0 +1,36 @@
+import {ReactElement} from 'react';
+import CodeBlock from '@theme/CodeBlock';
+import {useActiveVersion, useLatestVersion} from '@docusaurus/plugin-content-docs/client';
+
+// HelmInstallationSnippet is the Helm command to install the plugin.
+//
+// - Latest release: no override. The chart already defaults to
+//   itself.
+// - Older release: pin image.tag and sidecarImage.tag to that
+//   version. We check this again on every build using
+//   useLatestVersion, so an old page updates itself once a newer
+//   version ships.
+// - Dev docs: also no override, but this does NOT install a dev
+//   build. Setting the tag alone would not be enough, since the
+//   chart's own templates (CRDs, RBAC...) can be older than what
+//   main needs. Use the kubectl method to test a dev build.
+export function HelmInstallationSnippet(): ReactElement<null> {
+    const activeVersion = useActiveVersion('default');
+    const latestVersion = useLatestVersion('default');
+    const isOlderRelease = activeVersion
+        && activeVersion.name !== 'current'
+        && activeVersion.name !== latestVersion.name;
+    const setArgs = isOlderRelease
+        ? ` \\
+  --set image.tag=v${activeVersion.name} \\
+  --set sidecarImage.tag=v${activeVersion.name}`
+        : '';
+    return (
+        <CodeBlock language="sh">
+            {`helm repo add cnpg https://cloudnative-pg.github.io/charts --force-update
+helm upgrade --install plugin-barman-cloud \\
+  --namespace cnpg-system${setArgs} \\
+  cnpg/plugin-barman-cloud`}
+        </CodeBlock>
+    );
+}

web/src/components/Installation/index.tsx

@@ -1,16 +1,60 @@
 import {ReactElement} from 'react';
 import CodeBlock from '@theme/CodeBlock';
-import {useCurrentVersion} from '@site/src/hooks/versions';
+import Link from '@docusaurus/Link';
+import {useLocation} from '@docusaurus/router';
+import {useActiveVersion} from '@docusaurus/plugin-content-docs/client';
 
-// InstallationSnippet is the kubectl incantation to install the lastest
+// DEV_MANIFEST_URL is the URL of the manifest.yaml on the main branch of the plugin repo.
-// available version of the Barman Cloud Plugin.
+const DEV_MANIFEST_URL =
+    'https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml';
+
+// InstallationSnippet is the kubectl incantation to install the Barman
+// Cloud Plugin: the manifest matching the doc version being viewed, or
+// (on the unreleased "current" docs) the latest manifest on main.
 export function InstallationSnippet(): ReactElement<null> {
-    const latest = useCurrentVersion('latestReleased');
+    const activeVersion = useActiveVersion('default');
+    const url = activeVersion && activeVersion.name !== 'current'
+        ? `https://github.com/cloudnative-pg/plugin-barman-cloud/releases/download/v${activeVersion.name}/manifest.yaml`
+        : DEV_MANIFEST_URL;
     return (
         <CodeBlock language="sh">
             {`kubectl apply -f \\
-        https://github.com/cloudnative-pg/plugin-barman-cloud/releases/download/v${latest}/manifest.yaml`}
+        ${url}`}
         </CodeBlock>
     );
 }
 
+// ManifestVersion names the manifest the snippet below installs: the
+// release tag for a versioned docs page, or the main branch on Dev docs.
+export function ManifestVersion(): ReactElement<null> {
+    const activeVersion = useActiveVersion('default');
+    return activeVersion && activeVersion.name !== 'current'
+        ? <code>v{activeVersion.name}</code>
+        : <>the latest development snapshot from the <code>main</code> branch</>;
+}
+
+// DevSnapshotSection shows how to test the main-branch manifest. On
+// the Dev docs, the kubectl install above already does that, so we
+// hide this section there. (The Helm tab there installs the latest
+// release, not a dev build.)
+export function DevSnapshotSection(): ReactElement {
+    const activeVersion = useActiveVersion('default');
+    const {pathname} = useLocation();
+    if (!activeVersion || activeVersion.name === 'current') {
+        return (
+            <p>The <Link to={`${pathname}?install-method=kubectl#installing-the-barman-cloud-plugin`}>kubectl
+                install command above</Link> already applies the latest development
+                snapshot from the <code>main</code> branch.</p>
+        );
+    }
+    return (
+        <>
+            <p>You can also test the latest development snapshot of the plugin
+                with the following command:</p>
+            <CodeBlock language="sh">
+                {`kubectl apply -f \\
+        ${DEV_MANIFEST_URL}`}
+            </CodeBlock>
+        </>
+    );
+}

web/src/hooks/versions.ts

@@ -1,36 +0,0 @@
-import {useActiveVersion, useLatestVersion, useVersions} from '@docusaurus/plugin-content-docs/client';
-
-
-export function useCurrentVersion(fallback: 'latest' | 'latestReleased' = 'latest'): string {
-    switch (fallback) {
-        case 'latestReleased':
-            return useLatestReleasedVersion();
-        case 'latest': {
-            const version = useActiveVersion('default');
-            return version?.name ?? useLatestVersion('default')?.name;
-        }
-        default:
-            // The following line ensures that if `fallback` is not 'latest' or 'latestReleased',
-            // an error is thrown. This can be useful for catching unexpected states.
-            throw new Error(`Unhandled fallback type: ${fallback}`);
-    }
-}
-
-export function useLatestReleasedVersion(): string {
-    const allVersions = useVersions('default');
-
-    // Filter out "current" to only consider versioned docs
-    const versionedDocs = allVersions.filter(version => version.name !== 'current');
-
-    // Handle the case where no versioned documents are found
-    if (versionedDocs.length === 0) {
-        return "unknown_version";
-    }
-
-    const sortedVersions = versionedDocs.sort((a, b) => {
-        return b.name.localeCompare(a.name, undefined, { numeric: true, sensitivity: 'base' });
-    });
-
-    // The latest version is the first in the sorted list since versionedDocs was not empty,
-    return sortedVersions[0].name;
-}

web/versioned_docs/version-0.10.0/compression.md

@@ -1,43 +0,0 @@
----
-sidebar_position: 80
----
-
-# Compression
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-By default, backups and WAL files are archived **uncompressed**. However, the
-Barman Cloud Plugin supports multiple compression algorithms via
-`barman-cloud-backup` and `barman-cloud-wal-archive`, allowing you to optimize
-for space, speed, or a balance of both.
-
-### Supported Compression Algorithms
-
-- `bzip2`
-- `gzip`
-- `lz4` (WAL only)
-- `snappy`
-- `xz` (WAL only)
-- `zstd` (WAL only)
-
-Compression settings for base backups and WAL archives are configured
-independently. For implementation details, refer to the corresponding API
-definitions:
-
-- [`DataBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#DataBackupConfiguration)
-- [`WALBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#WalBackupConfiguration)
-
-:::important
-Compression impacts both performance and storage efficiency. Choose the right
-algorithm based on your recovery time objectives (RTO), storage capacity, and
-network throughput.
-:::
-
-## Compression Benchmark (on MinIO)
-
-| Compression | Backup Time (ms) | Restore Time (ms) | Uncompressed Size (MB) | Compressed Size (MB) | Ratio |
-| ----------- | ---------------- | ----------------- | ---------------------- | -------------------- | ----- |
-| None        | 10,927           | 7,553             | 395                    | 395                  | 1.0:1 |
-| bzip2       | 25,404           | 13,886            | 395                    | 67                   | 5.9:1 |
-| gzip        | 116,281          | 3,077             | 395                    | 91                   | 4.3:1 |
-| snappy      | 8,134            | 8,341             | 395                    | 166                  | 2.4:1 |

web/versioned_docs/version-0.10.0/concepts.md

@@ -1,177 +0,0 @@
----
-sidebar_position: 10
----
-
-# Main Concepts
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-:::important
-Before proceeding, make sure to review the following sections of the
-CloudNativePG documentation:
-
-- [**Backup**](https://cloudnative-pg.io/documentation/current/backup/)
-- [**WAL Archiving**](https://cloudnative-pg.io/documentation/current/wal_archiving/)
-- [**Recovery**](https://cloudnative-pg.io/documentation/current/recovery/)
-:::
-
-The **Barman Cloud Plugin** enables **hot (online) backups** of PostgreSQL
-clusters in CloudNativePG through [`barman-cloud`](https://pgbarman.org),
-supporting continuous physical backups and WAL archiving to an **object
-store**—without interrupting write operations.
-
-It also supports both **full recovery** and **Point-in-Time Recovery (PITR)**
-of a PostgreSQL cluster.
-
-## The Object Store
-
-At the core is the [`ObjectStore` custom resource (CRD)](plugin-barman-cloud.v1.md#objectstorespec),
-which acts as the interface between the PostgreSQL cluster and the target
-object storage system. It allows you to configure:
-
-- **Authentication and bucket location** via the `.spec.configuration` section
-- **WAL archiving** settings—such as compression type, parallelism, and
-  server-side encryption—under `.spec.configuration.wal`
-- **Base backup options**—with similar settings for compression, concurrency,
-  and encryption—under `.spec.configuration.data`
-- **Retention policies** to manage the life-cycle of archived WALs and backups
-  via `.spec.configuration.retentionPolicy`
-
-WAL files are archived in the `wals` directory, while base backups are stored
-as **tarballs** in the `base` directory, following the
-[Barman Cloud convention](https://docs.pgbarman.org/cloud/latest/usage/#object-store-layout).
-
-The plugin also offers advanced capabilities, including
-[backup tagging](misc.md#backup-object-tagging) and
-[extra options for backups and WAL archiving](misc.md#extra-options-for-backup-and-wal-archiving).
-
-:::tip
-For details, refer to the
-[API reference for the `ObjectStore` resource](plugin-barman-cloud.v1.md#objectstorespec).
-:::
-
-## Integration with a CloudNativePG Cluster
-
-CloudNativePG can delegate continuous backup and recovery responsibilities to
-the **Barman Cloud Plugin** by configuring the `.spec.plugins` section of a
-`Cluster` resource. This setup requires a corresponding `ObjectStore` resource
-to be defined.
-
-:::important
-While it is technically possible to reuse the same `ObjectStore` for multiple
-`Cluster` resources within the same namespace, it is strongly recommended to
-dedicate one object store per PostgreSQL cluster to ensure data isolation and
-operational clarity.
-:::
-
-The following example demonstrates how to configure a CloudNativePG cluster
-named `cluster-example` to use a previously defined `ObjectStore` (also named
-`cluster-example`) in the same namespace. Setting `isWALArchiver: true` enables
-WAL archiving through the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-example
-spec:
-  # Other cluster settings...
-  plugins:
-    - name: barman-cloud.cloudnative-pg.io
-      isWALArchiver: true
-      parameters:
-        barmanObjectName: cluster-example
-```
-
-## Backup of a Postgres Cluster
-
-Once the object store is defined and the `Cluster` is configured to use the
-Barman Cloud Plugin, **WAL archiving is activated immediately** on the
-PostgreSQL primary.
-
-Physical base backups are seamlessly managed by CloudNativePG using the
-`Backup` and `ScheduledBackup` resources, respectively for
-[on-demand](https://cloudnative-pg.io/documentation/current/backup/#on-demand-backups)
-and
-[scheduled](https://cloudnative-pg.io/documentation/current/backup/#scheduled-backups)
-backups.
-
-To use the Barman Cloud Plugin, you must set the `method` to `plugin` and
-configure the `pluginConfiguration` section as shown:
-
-```yaml
-[...]
-spec:
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-  [...]
-```
-
-With this configuration, CloudNativePG supports:
-
-- Backups from both **primary** and **standby** instances
-- Backups from **designated primaries** in a distributed topology using
-  [replica clusters](https://cloudnative-pg.io/documentation/current/replica_cluster/)
-
-:::tip
-For details on how to back up from a standby, refer to the official documentation:
-[Backup from a standby](https://cloudnative-pg.io/documentation/current/backup/#backup-from-a-standby).
-:::
-
-:::important
-Both backup and WAL archiving operations are executed by sidecar containers
-running in the same pod as the PostgreSQL `Cluster` primary instance—except
-when backups are taken from a standby, in which case the sidecar runs alongside
-the standby pod.
-The sidecar containers use a [dedicated container image](images.md) that
-includes only the supported version of Barman Cloud.
-:::
-
-## Recovery of a Postgres Cluster
-
-In PostgreSQL, *recovery* refers to the process of starting a database instance
-from an existing backup.  The Barman Cloud Plugin integrates with CloudNativePG
-to support both **full recovery** and **Point-in-Time Recovery (PITR)** from an
-object store.
-
-Recovery in this context is *not in-place*: it bootstraps a brand-new
-PostgreSQL cluster from a backup and replays the necessary WAL files to reach
-the desired recovery target.
-
-To perform a recovery, define an *external cluster* that references the
-appropriate `ObjectStore`, and use it as the source in the `bootstrap` section
-of the target cluster:
-
-```yaml
-[...]
-spec:
-  [...]
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: cluster-example
-        serverName: cluster-example
-  [...]
-```
-
-The critical element here is the `externalClusters` section of the `Cluster`
-resource, where the `plugin` stanza instructs CloudNativePG to use the Barman
-Cloud Plugin to access the object store for recovery.
-
-This same mechanism can be used for a variety of scenarios enabled by the
-CloudNativePG API, including:
-
-* **Full cluster recovery** from the latest backup
-* **Point-in-Time Recovery (PITR)**
-* Bootstrapping **replica clusters** in a distributed topology
-
-:::tip
-For complete instructions and advanced use cases, refer to the official
-[Recovery documentation](https://cloudnative-pg.io/documentation/current/recovery/).
-:::

web/versioned_docs/version-0.10.0/installation.mdx

@@ -1,109 +0,0 @@
----
-sidebar_position: 20
----
-
-# Installation
-
-:::important
-1. The plugin **must** be installed in the same namespace as the CloudNativePG
-   operator (typically `cnpg-system`).
-
-2. Keep in mind that the operator's **listening namespaces** may differ from its
-   installation namespace. Double-check this to avoid configuration issues.
-:::
-
-## Verifying the Requirements
-
-Before installing the plugin, make sure the [requirements](intro.md#requirements) are met.
-
-### CloudNativePG Version
-
-Ensure you're running a version of CloudNativePG that is compatible with the
-plugin. If installed in the default `cnpg-system` namespace, you can verify the
-version with:
-
-```sh
-kubectl get deployment -n cnpg-system cnpg-controller-manager \
-  -o jsonpath="{.spec.template.spec.containers[*].image}"
-```
-
-Example output:
-
-```output
-ghcr.io/cloudnative-pg/cloudnative-pg:1.26.0
-```
-
-The version **must be 1.26 or newer**.
-
-### cert-manager
-
-Use the [cmctl](https://cert-manager.io/docs/reference/cmctl/#installation)
-tool to confirm that `cert-manager` is installed and available:
-
-```sh
-cmctl check api
-```
-
-Example output:
-
-```output
-The cert-manager API is ready
-```
-
-Both checks are required before proceeding with the installation.
-
-## Installing the Barman Cloud Plugin
-
-import { InstallationSnippet } from '@site/src/components/Installation';
-
-Install the plugin using `kubectl` by applying the manifest for the latest
-release:
-
-<InstallationSnippet />
-
-Example output:
-
-```output
-customresourcedefinition.apiextensions.k8s.io/objectstores.barmancloud.cnpg.io created
-serviceaccount/plugin-barman-cloud created
-role.rbac.authorization.k8s.io/leader-election-role created
-clusterrole.rbac.authorization.k8s.io/metrics-auth-role created
-clusterrole.rbac.authorization.k8s.io/metrics-reader created
-clusterrole.rbac.authorization.k8s.io/objectstore-editor-role created
-clusterrole.rbac.authorization.k8s.io/objectstore-viewer-role created
-clusterrole.rbac.authorization.k8s.io/plugin-barman-cloud created
-rolebinding.rbac.authorization.k8s.io/leader-election-rolebinding created
-clusterrolebinding.rbac.authorization.k8s.io/metrics-auth-rolebinding created
-clusterrolebinding.rbac.authorization.k8s.io/plugin-barman-cloud-binding created
-secret/plugin-barman-cloud-8tfddg42gf created
-service/barman-cloud created
-deployment.apps/barman-cloud configured
-certificate.cert-manager.io/barman-cloud-client created
-certificate.cert-manager.io/barman-cloud-server created
-issuer.cert-manager.io/selfsigned-issuer created
-```
-
-Finally, check that the deployment is up and running:
-
-```sh
-kubectl rollout status deployment \
-  -n cnpg-system barman-cloud
-```
-
-Example output:
-
-```output
-deployment "barman-cloud" successfully rolled out
-```
-
-This confirms that the plugin is deployed and ready to use.
-
-## Testing the latest development snapshot
-
-You can also test the latest development snapshot of the plugin with the
-following command:
-
-```sh
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/versioned_docs/version-0.10.0/object_stores.md

@@ -1,454 +0,0 @@
----
-sidebar_position: 50
----
-
-# Object Store Providers
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin enables the storage of PostgreSQL cluster backup files
-in any object storage service supported by the
-[Barman Cloud infrastructure](https://docs.pgbarman.org/release/latest/).
-
-Currently, Barman Cloud supports the following providers:
-
-- [Amazon S3](#aws-s3)
-- [Microsoft Azure Blob Storage](#azure-blob-storage)
-- [Google Cloud Storage](#google-cloud-storage)
-
-You may also use any S3- or Azure-compatible implementation of the above
-services.
-
-To configure object storage with Barman Cloud, you must define an
-[`ObjectStore` object](plugin-barman-cloud.v1.md#objectstore), which
-establishes the connection between your PostgreSQL cluster and the object
-storage backend.
-
-Configuration details — particularly around authentication — will vary depending on
-the specific object storage provider you are using.
-
-The following sections detail the setup for each.
-
----
-
-## AWS S3
-
-[AWS Simple Storage Service (S3)](https://aws.amazon.com/s3/) is one of the
-most widely adopted object storage solutions.
-
-The Barman Cloud plugin for CloudNativePG integrates with S3 through two
-primary authentication mechanisms:
-
-- [IAM Roles for Service Accounts (IRSA)](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html) —
-  recommended for clusters running on EKS
-- Access keys — using `ACCESS_KEY_ID` and `ACCESS_SECRET_KEY` credentials
-
-### Access Keys
-
-To authenticate using access keys, you’ll need:
-
-- `ACCESS_KEY_ID`: the public key used to authenticate to S3
-- `ACCESS_SECRET_KEY`: the corresponding secret key
-- `ACCESS_SESSION_TOKEN`: (optional) a temporary session token, if required
-
-These credentials must be stored securely in a Kubernetes secret:
-
-```sh
-kubectl create secret generic aws-creds \
-  --from-literal=ACCESS_KEY_ID=<access key here> \
-  --from-literal=ACCESS_SECRET_KEY=<secret key here>
-# --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required
-```
-
-The credentials will be encrypted at rest if your Kubernetes environment
-supports it.
-
-You can then reference the secret in your `ObjectStore` definition:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: aws-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/path/to/folder"
-    s3Credentials:
-      accessKeyId:
-        name: aws-creds
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: aws-creds
-        key: ACCESS_SECRET_KEY
-  [...]
-```
-
-### IAM Role for Service Account (IRSA)
-
-To use IRSA with EKS, configure the service account of the PostgreSQL cluster
-with the appropriate annotation:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  [...]
-spec:
-  serviceAccountTemplate:
-    metadata:
-      annotations:
-        eks.amazonaws.com/role-arn: arn:[...]
-        [...]
-```
-
-### S3 Lifecycle Policy
-
-Barman Cloud uploads backup files to S3 but does not modify them afterward.
-To enhance data durability and protect against accidental or malicious loss,
-it's recommended to implement the following best practices:
-
-- Enable object versioning
-- Enable object locking to prevent objects from being deleted or overwritten
-  for a defined period or indefinitely (this provides an additional layer of
-  protection against accidental deletion and ransomware attacks)
-- Set lifecycle rules to expire current versions a few days after your Barman
-  retention window
-- Expire non-current versions after a longer period
-
-These strategies help you safeguard backups without requiring broad delete
-permissions, ensuring both security and compliance with minimal operational
-overhead.
-
-
-### S3-Compatible Storage Providers
-
-You can use S3-compatible services like **MinIO**, **Linode (Akamai) Object Storage**,
-or **DigitalOcean Spaces** by specifying a custom `endpointURL`.
-
-Example with Linode (Akamai) Object Storage (`us-east1`):
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: linode-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/"
-    endpointURL: "https://us-east1.linodeobjects.com"
-    s3Credentials:
-    [...]
-  [...]
-```
-
-Recent changes to the [boto3 implementation](https://github.com/boto/boto3/issues/4392)
-of [Amazon S3 Data Integrity Protections](https://docs.aws.amazon.com/sdkref/latest/guide/feature-dataintegrity.html)
-may lead to the `x-amz-content-sha256` error when using the Barman Cloud
-Plugin.
-
-If you encounter this issue (see [GitHub issue #393](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/393)),
-you can apply the following workaround by setting specific environment
-variables in the `ObjectStore` resource:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: linode-store
-spec:
-  instanceSidecarConfiguration:
-    env:
-      - name: AWS_REQUEST_CHECKSUM_CALCULATION
-        value: when_required
-      - name: AWS_RESPONSE_CHECKSUM_VALIDATION
-        value: when_required
-  [...]
-```
-
-These settings ensure that checksum calculations and validations are only
-applied when explicitly required, avoiding compatibility issues with certain
-S3-compatible storage providers.
-
-Example with DigitalOcean Spaces (SFO3, path-style):
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: digitalocean-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/path/to/folder"
-    endpointURL: "https://sfo3.digitaloceanspaces.com"
-    s3Credentials:
-    [...]
-  [...]
-```
-
-### Using Object Storage with a Private CA
-
-For object storage services (e.g., MinIO) that use HTTPS with certificates
-signed by a private CA, set the `endpointCA` field in the `ObjectStore`
-definition. Unless you already have it, create a Kubernetes `Secret` with the
-CA bundle:
-
-```sh
-kubectl create secret generic my-ca-secret --from-file=ca.crt
-```
-
-Then reference it:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    endpointURL: <myEndpointURL>
-    endpointCA:
-      name: my-ca-secret
-      key: ca.crt
-  [...]
-```
-
-<!-- TODO: does this also apply to the plugin? -->
-:::note
-If you want `ConfigMaps` and `Secrets` to be **automatically** reloaded by
-instances, you can add a label with the key `cnpg.io/reload` to the
-`Secrets`/`ConfigMaps`. Otherwise, you will have to reload the instances using the
-`kubectl cnpg reload` subcommand.
-:::
-
----
-
-## Azure Blob Storage
-
-[Azure Blob Storage](https://azure.microsoft.com/en-us/services/storage/blobs/)
-is Microsoft’s cloud-based object storage solution.
-
-Barman Cloud supports the following authentication methods:
-
-- [Connection String](https://learn.microsoft.com/en-us/azure/storage/common/storage-configure-connection-string)
-- Storage Account Name + [Access Key](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage)
-- Storage Account Name + [SAS Token](https://learn.microsoft.com/en-us/azure/storage/blobs/sas-service-create)
-- [Azure AD Workload Identity](https://azure.github.io/azure-workload-identity/docs/introduction.html)
-
-### Azure AD Workload Identity
-
-This method avoids storing credentials in Kubernetes via the
-`.spec.configuration.inheritFromAzureAD` option:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: azure-store
-spec:
-  configuration:
-    destinationPath: "<destination path here>"
-    azureCredentials:
-      inheritFromAzureAD: true
-  [...]
-```
-
-### Access Key, SAS Token, or Connection String
-
-Store credentials in a Kubernetes secret:
-
-```sh
-kubectl create secret generic azure-creds \
-  --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \
-  --from-literal=AZURE_STORAGE_KEY=<storage account key> \
-  --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \
-  --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string>
-```
-
-Then reference the required keys in your `ObjectStore`:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: azure-store
-spec:
-  configuration:
-    destinationPath: "<destination path here>"
-    azureCredentials:
-      connectionString:
-        name: azure-creds
-        key: AZURE_CONNECTION_STRING
-      storageAccount:
-        name: azure-creds
-        key: AZURE_STORAGE_ACCOUNT
-      storageKey:
-        name: azure-creds
-        key: AZURE_STORAGE_KEY
-      storageSasToken:
-        name: azure-creds
-        key: AZURE_STORAGE_SAS_TOKEN
-  [...]
-```
-
-For Azure Blob, the destination path format is:
-
-```
-<http|https>://<account-name>.<service-name>.core.windows.net/<container>/<blob>
-```
-
-### Azure-Compatible Providers
-
-If you're using a different implementation (e.g., Azurite or emulator):
-
-```
-<http|https>://<local-machine-address>:<port>/<account-name>/<container>/<blob>
-```
-
----
-
-## Google Cloud Storage
-
-[Google Cloud Storage](https://cloud.google.com/storage/) is supported with two
-authentication modes:
-
-- **GKE Workload Identity** (recommended inside Google Kubernetes Engine)
-- **Service Account JSON key** via the `GOOGLE_APPLICATION_CREDENTIALS` environment variable
-
-### GKE Workload Identity
-
-Use the [Workload Identity authentication](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
-when running in GKE:
-
-1. Set `googleCredentials.gkeEnvironment` to `true` in the `ObjectStore`
-   resource
-2. Annotate the `serviceAccountTemplate` in the `Cluster` resource with the GCP
-   service account
-
-For example, in the `ObjectStore` resource:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: google-store
-spec:
-  configuration:
-    destinationPath: "gs://<bucket>/<folder>"
-    googleCredentials:
-      gkeEnvironment: true
-```
-
-And in the `Cluster` resource:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-spec:
-  serviceAccountTemplate:
-    metadata:
-      annotations:
-        iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com
-```
-
-### Service Account JSON Key
-
-Follow Google’s [authentication setup](https://cloud.google.com/docs/authentication/getting-started),
-then:
-
-```sh
-kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json
-```
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: google-store
-spec:
-  configuration:
-    destinationPath: "gs://<bucket>/<folder>"
-    googleCredentials:
-      applicationCredentials:
-        name: backup-creds
-        key: gcsCredentials
-  [...]
-```
-
-:::important
-This authentication method generates a JSON file within the container
-with all the credentials required to access your Google Cloud Storage
-bucket. As a result, if someone gains access to the `Pod`, they will also have
-write permissions to the bucket.
-:::
-
----
-
-
-## MinIO Object Store
-
-In order to use the Tenant resource you first need to deploy the
-[MinIO operator](https://docs.min.io/community/minio-object-store/operations/deployments/installation.html).
-For the latest documentation of MinIO, please refer to the
-[MinIO official documentation](https://docs.min.io/community/minio-object-store/).
-
-MinIO Object Store's API is compatible with S3, and the default configuration of the Tenant
-will create these services:
-- `<tenant>-console` on port 9090 (with autocert) or 9443 (without autocert)
-- `<tenant>-hl` on port 9000
-Where `<tenant>` is the `metadata.name` you assigned to your Tenant resource.
-
-:::note
-The `<tenant>-console` service will only be available if you have enabled the
-[MinIO Console](https://docs.min.io/community/minio-object-store/administration/minio-console.html).
-
-For example, the following Tenant:
-```yml
-apiVersion: minio.min.io/v2
-kind: Tenant
-metadata:
-  name: cnpg-backups
-spec:
-  [...]
-```
-would have services called `cnpg-backups-console` and `cnpg-backups-hl` respectively.
-
-The `console` service is for managing the tenant, while the `hl` service exposes the S3
-compatible API. If your tenant is configured with `requestAutoCert` you will communicate
-to these services over HTTPS, if not you will use HTTP.
-
-For authentication you can use your username and password, or create an access key.
-Whichever method you choose, it has to be stored as a secret.
-
-```sh
-kubectl create secret generic minio-creds \
-  --from-literal=MINIO_ACCESS_KEY=<minio access key or username> \
-  --from-literal=MINIO_SECRET_KEY=<minio secret key or password>
-```
-
-Finally, create the Barman ObjectStore:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    destinationPath: s3://BUCKET_NAME/
-    endpointURL: http://<tenant>-hl:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio-creds
-        key: MINIO_ACCESS_KEY
-      secretAccessKey:
-        name: minio-creds
-        key: MINIO_SECRET_KEY
-  [...]
-```
-
-:::important
-Verify on `s3://BUCKET_NAME/` the presence of archived WAL files before
-proceeding with a backup.
-:::
-
----

web/versioned_docs/version-0.10.0/troubleshooting.md

@@ -1,591 +0,0 @@
----
-sidebar_position: 90
----
-
-# Troubleshooting
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-This guide helps you diagnose and resolve common issues with the Barman Cloud
-plugin.
-
-:::important
-We are continuously improving the integration between CloudNativePG and the
-Barman Cloud plugin as it moves toward greater stability and maturity. For this
-reason, we recommend using the latest available version of both components.
-See the [*Requirements* section](intro.md#requirements) for details.
-:::
-
-:::note
-The following commands assume you installed the CloudNativePG operator in
-the default `cnpg-system` namespace. If you installed it in a different
-namespace, adjust the commands accordingly.
-:::
-
-## Viewing Logs
-
-To troubleshoot effectively, you’ll often need to review logs from multiple
-sources:
-
-```sh
-# View operator logs (includes plugin interaction logs)
-kubectl logs -n cnpg-system deployment/cnpg-controller-manager -f
-
-# View plugin manager logs
-kubectl logs -n cnpg-system deployment/barman-cloud -f
-
-# View sidecar container logs (Barman Cloud operations)
-kubectl logs -n <namespace> <cluster-pod-name> -c plugin-barman-cloud -f
-
-# View all containers in a pod
-kubectl logs -n <namespace> <cluster-pod-name> --all-containers=true
-
-# View previous container logs (if container restarted)
-kubectl logs -n <namespace> <cluster-pod-name> -c plugin-barman-cloud --previous
-```
-
-## Common Issues
-
-### Plugin Installation Issues
-
-#### Plugin pods not starting
-
-**Symptoms:**
-
-- Plugin pods stuck in `CrashLoopBackOff` or `Error`
-- Plugin deployment not ready
-
-**Possible causes and solutions:**
-
-1. **Certificate issues**
-
-   ```sh
-   # Check if cert-manager is installed and running
-   kubectl get pods -n cert-manager
-
-   # Check if the plugin certificate is created
-   kubectl get certificates -n cnpg-system
-   ```
-
-   If cert-manager is not installed, install it first:
-
-   ```sh
-   # Note: other installation methods for cert-manager are available
-   kubectl apply -f \
-     https://github.com/cert-manager/cert-manager/releases/latest/download/cert-manager.yaml
-   ```
-
-   If you are using your own certificates without cert-manager, you will need
-   to verify the entire certificate chain yourself.
-
-
-2. **Image pull errors**
-
-   ```sh
-   # Check pod events for image pull errors
-   kubectl describe pod -n cnpg-system -l app=barman-cloud
-   ```
-
-   Verify the image exists and you have proper credentials if using a private
-   registry.
-
-
-3. **Resource constraints**
-
-   ```sh
-   # Check node resources
-   kubectl top nodes
-   kubectl describe nodes
-   ```
-
-   Make sure your cluster has sufficient CPU and memory resources.
-
-### Backup Failures
-
-#### Quick Backup Troubleshooting Checklist
-
-When a backup fails, follow these steps in order:
-
-1. **Check backup status**:
-
-   ```sh
-   kubectl get backups.postgresql.cnpg.io -n <namespace>
-   ```
-2. **Get error details and target pod**:
-
-   ```sh
-   kubectl describe backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name>
-
-   kubectl get backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name> \
-     -o jsonpath='{.status.instanceID.podName}'
-   ```
-3. **Check the target pod’s sidecar logs**:
-
-   ```sh
-   TARGET_POD=$(kubectl get backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name> \
-     -o jsonpath='{.status.instanceID.podName}')
-
-   kubectl logs \
-     -n <namespace> $TARGET_POD -c plugin-barman-cloud \
-     --tail=100 | grep -E "ERROR|FATAL|panic"
-   ```
-4. **Check cluster events**:
-
-   ```sh
-   kubectl get events -n <namespace> \
-     --field-selector involvedObject.name=<cluster-name> \
-     --sort-by='.lastTimestamp'
-   ```
-5. **Verify plugin is running**:
-
-   ```sh
-   kubectl get pods \
-     -n cnpg-system -l app=barman-cloud
-   ```
-6. **Check operator logs**:
-
-   ```sh
-   kubectl logs \
-     -n cnpg-system deployment/cnpg-controller-manager \
-     --tail=100 | grep -i "backup\|plugin"
-   ```
-7. **Check plugin manager logs**:
-
-   ```sh
-   kubectl logs \
-     -n cnpg-system deployment/barman-cloud --tail=100
-   ```
-
-#### Backup job fails immediately
-
-**Symptoms:**
-
-- Backup pods terminate with error
-- No backup files appear in object storage
-- Backup shows `failed` phase with various error messages
-
-**Common failure modes and solutions:**
-
-1. **"requested plugin is not available" errors**
-
-   ```
-   requested plugin is not available: barman
-   requested plugin is not available: barman-cloud
-   requested plugin is not available: barman-cloud.cloudnative-pg.io
-   ```
-   
-   **Cause:** The plugin name in the Cluster configuration doesn’t match the
-   deployed plugin, or the plugin isn’t registered.
-   
-   **Solution:** 
-   
-   a. **Check plugin registration:**
-
-   ```sh
-   # If you have the `cnpg` plugin installed (v1.27.0+)
-   kubectl cnpg status -n <namespace> <cluster-name>
-   ```
-   
-   Look for the "Plugins status" section:
-   ```
-   Plugins status
-   Name                            Version  Status  Reported Operator Capabilities
-   ----                            -------  ------  ------------------------------
-   barman-cloud.cloudnative-pg.io  0.6.0    N/A     Reconciler Hooks, Lifecycle Service
-   ```
-   
-   b. **Verify plugin name in `Cluster` spec**:
-
-   ```yaml
-   apiVersion: postgresql.cnpg.io/v1
-   kind: Cluster
-   spec:
-     plugins:
-       - name: barman-cloud.cloudnative-pg.io
-         parameters:
-           barmanObjectName: <your-objectstore-name>
-   ```
-   
-   c. **Check plugin deployment is running**:
-
-   ```sh
-   kubectl get deployment -n cnpg-system barman-cloud
-   ```
-
-2. **"rpc error: code = Unknown desc = panic caught: assignment to entry in nil map" errors**
-   
-   **Cause:** Misconfiguration in the `ObjectStore` (e.g., typo or missing field).
-   
-   **Solution:** 
-
-   - Review sidecar logs for details
-   - Verify `ObjectStore` configuration and secrets
-   - Common issues include:
-     - Missing or incorrect secret references
-     - Typos in configuration parameters
-     - Missing required environment variables in secrets
-
-#### Backup performance issues
-
-**Symptoms:**
-
-- Backups take extremely long
-- Backups timeout
-
-**Plugin-specific considerations:**
-
-1. **Check `ObjectStore` parallelism settings**
-   - Adjust `maxParallel` in `ObjectStore` configuration
-   - Monitor sidecar container resource usage during backups
-
-2. **Verify plugin resource allocation**
-   - Check if the sidecar container has sufficient CPU/memory
-   - Review plugin container logs for resource-related warnings
-
-:::tip
-For Barman-specific features like compression, encryption, and performance
-tuning, refer to the [Barman documentation](https://docs.pgbarman.org/latest/).
-:::
-
-### WAL Archiving Issues
-
-#### WAL archiving stops
-
-**Symptoms:**
-
-- WAL files accumulate on the primary
-- Cluster shows WAL archiving warnings
-- Sidecar logs show WAL errors
-
-**Debugging steps:**
-
-1. **Check plugin sidecar logs for WAL archiving errors**
-   ```sh
-   # Check recent WAL archive operations in sidecar
-   kubectl logs -n <namespace> <primary-pod> -c plugin-barman-cloud \
-     --tail=50 | grep -i wal
-   ```
-
-2. **Check ObjectStore configuration for WAL settings**
-   - Ensure ObjectStore has proper WAL retention settings
-   - Verify credentials have permissions for WAL operations
-
-### Restore Issues
-
-#### Restore fails during recovery
-
-**Symptoms:**
-
-- New cluster stuck in recovery
-- Plugin sidecar shows restore errors
-- PostgreSQL won’t start
-
-**Debugging steps:**
-
-1. **Check plugin sidecar logs during restore**
-
-   ```sh
-   # Check the sidecar logs on the recovering cluster pods
-   kubectl logs -n <namespace> <cluster-pod-name> \
-     -c plugin-barman-cloud --tail=100
-   
-   # Look for restore-related errors
-   kubectl logs -n <namespace> <cluster-pod-name> \
-     -c plugin-barman-cloud | grep -E "restore|recovery|ERROR"
-   ```
-
-2. **Verify plugin can access backups**
-
-   ```sh
-   # Check if `ObjectStore` is properly configured for restore
-   kubectl get objectstores.barmancloud.cnpg.io \
-     -n <namespace> <objectstore-name> -o yaml
-   
-   # Check PostgreSQL recovery logs
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c postgres | grep -i recovery
-   ```
-
-:::tip
-For detailed Barman restore operations and troubleshooting, refer to the
-[Barman documentation](https://docs.pgbarman.org/latest/barman-cloud-restore.html).
-:::
-
-#### Point-in-time recovery (PITR) configuration issues
-
-**Symptoms:**
-
-- PITR doesn’t reach target time
-- WAL access errors
-- Recovery halts early
-
-**Debugging steps:**
-
-1. **Verify PITR configuration in the `Cluster` spec**
-
-   ```yaml
-   apiVersion: postgresql.cnpg.io/v1
-   kind: Cluster
-   metadata:
-     name: <cluster-restore-name>
-   spec:
-     storage:
-       size: 1Gi
-
-     bootstrap:
-       recovery:
-         source: origin
-         recoveryTarget:
-           targetTime: "2024-01-15T10:30:00Z"
-
-     externalClusters:
-       - name: origin
-         plugin:
-           enabled: true
-           name: barman-cloud.cloudnative-pg.io
-           parameters:
-             barmanObjectName: <object-store-name>
-             serverName: <source-cluster-name>
-   ```
-
-2. **Check sidecar logs for WAL-related errors**
-
-   ```sh
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c plugin-barman-cloud | grep -i wal
-   ```
-
-:::note
-Timestamps without an explicit timezone suffix
-(e.g., `2024-01-15 10:30:00`) are interpreted as UTC.
-:::
-
-:::warning
-Always specify an explicit timezone in your timestamp to avoid ambiguity.
-For example, use `2024-01-15T10:30:00Z` or `2024-01-15T10:30:00+02:00`
-instead of `2024-01-15 10:30:00`.
-:::
-
-:::note
-For detailed PITR configuration and WAL management, see the
-[Barman PITR documentation](https://docs.pgbarman.org/latest/).
-:::
-
-### Plugin Configuration Issues
-
-#### Plugin cannot connect to object storage
-
-**Symptoms:**
-
-- Sidecar logs show connection errors
-- Backups fail with authentication or network errors
-- `ObjectStore` resource reports errors
-
-**Solution:**
-
-1. **Verify `ObjectStore` CRD configuration and secrets**
-
-   ```sh
-   # Check ObjectStore resource status
-   kubectl get objectstores.barmancloud.cnpg.io \
-     -n <namespace> <objectstore-name> -o yaml
-   
-   # Verify the secret exists and has correct keys for your provider
-   kubectl get secret -n <namespace> <secret-name> \
-     -o jsonpath='{.data}' | jq 'keys'
-   ```
-
-2. **Check sidecar logs for connectivity issues**
-   ```sh
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c plugin-barman-cloud | grep -E "connect|timeout|SSL|cert"
-   ```
-
-3. **Adjust provider-specific settings (endpoint, path style, etc.)**
-   - See [Object Store Configuration](object_stores.md) for provider-specific settings
-   - Ensure `endpointURL` match your storage type
-   - Verify network policies allow egress to your storage provider
-
-## Diagnostic Commands
-
-### Using the `cnpg` plugin for `kubectl`
-
-The `cnpg` plugin for `kubectl` provides extended debugging capabilities.
-Keep it updated:
-
-```sh
-# Install or update the `cnpg` plugin
-kubectl krew install cnpg
-# Or using an alternative method: https://cloudnative-pg.io/documentation/current/kubectl-plugin/#install
-
-# Check plugin status (requires CNPG 1.27.0+)
-kubectl cnpg status <cluster-name> -n <namespace>
-
-# View cluster status in detail
-kubectl cnpg status <cluster-name> -n <namespace> --verbose
-```
-
-## Getting Help
-
-If problems persist:
-
-1. **Check the documentation**
-
-   - [Installation Guide](installation.mdx)
-   - [Object Store Configuration](object_stores.md) (for provider-specific settings)
-   - [Usage Examples](usage.md)
-
-
-2. **Gather diagnostic information**
-
-   ```sh
-   # Create a diagnostic bundle (⚠️ sanitize these before sharing!)
-   kubectl get objectstores.barmancloud.cnpg.io -A -o yaml > /tmp/objectstores.yaml
-   kubectl get clusters.postgresql.cnpg.io -A -o yaml > /tmp/clusters.yaml
-   kubectl logs -n cnpg-system deployment/barman-cloud --tail=1000 > /tmp/plugin.log
-   ```
-
-
-3. **Community support**
-
-   - CloudNativePG Slack: [#cloudnativepg-users](https://cloud-native.slack.com/messages/cloudnativepg-users)
-   - GitHub Issues: [plugin-barman-cloud](https://github.com/cloudnative-pg/plugin-barman-cloud/issues)
-
-
-4. **Include when reporting**
-
-   - CloudNativePG version
-   - Plugin version
-   - Kubernetes version
-   - Cloud provider and region
-   - Relevant configuration (⚠️ sanitize/redact sensitive information)
-   - Error messages and logs
-   - Steps to reproduce
-
-## Known Issues and Limitations
-
-### Current Known Issues
-
-1. **Migration compatibility**: After migrating from in-tree backup to the
-   plugin, the `kubectl cnpg backup` command syntax has changed
-   ([#353](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/353)):
-
-   ```sh
-   # Old command (in-tree, no longer works after migration)
-   kubectl cnpg backup -n <namespace> <cluster-name> \
-     --method=barmanObjectStore
-   
-   # New command (plugin-based)
-   kubectl cnpg backup -n <namespace> <cluster-name> \
-     --method=plugin --plugin-name=barman-cloud.cloudnative-pg.io
-   ```
-
-### Plugin Limitations
-
-1. **Installation method**: Currently only supports manifest and Kustomize
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   resources with PostgreSQL
-
-3. **Plugin restart behavior**: Restarting the sidecar container requires
-   restarting the entire PostgreSQL pod
-
-## Recap of General Debugging Steps
-
-### Check Backup Status and Identify the Target Instance
-
-```sh
-# List all backups and their status
-kubectl get backups.postgresql.cnpg.io -n <namespace>
-
-# Get detailed backup information including error messages and target instance
-kubectl describe backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name>
-
-# Extract the target pod name from a failed backup
-kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='{.status.instanceID.podName}'
-
-# Get more details including the target pod, method, phase, and error
-kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='Pod: {.status.instanceID.podName}{"\n"}Method: {.status.method}{"\n"}Phase: {.status.phase}{"\n"}Error: {.status.error}{"\n"}'
-
-# Check the cluster status for backup-related information
-kubectl cnpg status <cluster-name> -n <namespace> --verbose
-```
-
-### Check Sidecar Logs on the Backup Target Pod
-
-```sh
-# Identify which pod was the backup target (from the previous step)
-TARGET_POD=$(kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='{.status.instanceID.podName}')
-echo "Backup target pod: $TARGET_POD"
-
-# Check the sidecar logs on the specific target pod
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud --tail=100
-
-# Follow the logs in real time
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud -f
-
-# Check for specific errors in the target pod around the backup time
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud --since=10m | grep -E "ERROR|FATAL|panic|failed"
-
-# Alternative: List all cluster pods and their roles
-kubectl get pods -n <namespace> -l cnpg.io/cluster=<cluster-name> \
-  -o custom-columns=NAME:.metadata.name,ROLE:.metadata.labels.cnpg\\.io/instanceRole,INSTANCE:.metadata.labels.cnpg\\.io/instanceName
-
-# Check sidecar logs on ALL cluster pods (if the target is unclear)
-for pod in $(kubectl get pods -n <namespace> -l cnpg.io/cluster=<cluster-name> -o name); do
-  echo "=== Checking $pod ==="
-  kubectl logs -n <namespace> $pod -c plugin-barman-cloud \
-    --tail=20 | grep -i error || echo "No errors found"
-done
-```
-
-### Check Events for Backup-Related Issues
-
-```sh
-# Check events for the cluster
-kubectl get events -n <namespace> \
-  --field-selector involvedObject.name=<cluster-name>
-
-# Check events for failed backups
-kubectl get events -n <namespace> \
-  --field-selector involvedObject.kind=Backup
-
-# Get all recent events in the namespace
-kubectl get events -n <namespace> --sort-by='.lastTimestamp' | tail -20
-```
-
-### Verify `ObjectStore` Configuration
-
-```sh
-# Check the ObjectStore resource
-kubectl get objectstores.barmancloud.cnpg.io \
-  -n <namespace> <objectstore-name> -o yaml
-
-# Verify the secret exists and has the correct keys
-kubectl get secret -n <namespace> <secret-name> -o yaml
-# Alternatively
-kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys'
-```
-
-### Common Error Messages and Solutions
-
-* **"AccessDenied" or "403 Forbidden"** — Check cloud credentials and bucket permissions.
-* **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
-* **"Connection timeout"** — Check network connectivity and firewall rules.
-* **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/versioned_docs/version-0.11.0/images.md

@@ -1,37 +0,0 @@
----
-sidebar_position: 99
----
-
-# Container Images
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin is distributed using two container images:
-
-- One for deploying the plugin components
-- One for the sidecar that runs alongside each PostgreSQL instance in a
-  CloudNativePG `Cluster` using the plugin
-
-## Plugin Container Image
-
-The plugin image contains the logic required to operate the Barman Cloud Plugin
-within your Kubernetes environment with CloudNativePG. It is published on the
-GitHub Container Registry at `ghcr.io/cloudnative-pg/plugin-barman-cloud`.
-
-This image is built from the
-[`Dockerfile.plugin`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.plugin)
-in the plugin repository.
-
-## Sidecar Container Image
-
-The sidecar image is used within each PostgreSQL pod in the cluster. It
-includes the latest supported version of Barman Cloud and is responsible for
-performing WAL archiving and backups on behalf of CloudNativePG.
-
-It is available at `ghcr.io/cloudnative-pg/plugin-barman-cloud-sidecar` and is
-built from the
-[`Dockerfile.sidecar`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.sidecar).
-
-These sidecar images are designed to work seamlessly with the
-[`minimal` PostgreSQL container images](https://github.com/cloudnative-pg/postgres-containers?tab=readme-ov-file#minimal-images)
-maintained by the CloudNativePG Community.

web/versioned_docs/version-0.11.0/intro.md

@@ -1,86 +0,0 @@
----
-sidebar_position: 1
-sidebar_label: "Introduction"
----
-
-# Barman Cloud Plugin
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The **Barman Cloud Plugin** for [CloudNativePG](https://cloudnative-pg.io/)
-enables online continuous physical backups of PostgreSQL clusters to object storage
-using the `barman-cloud` suite from the [Barman](https://docs.pgbarman.org/release/latest/)
-project.
-
-:::important
-If you plan to migrate your existing CloudNativePG cluster to the new
-plugin-based approach using the Barman Cloud Plugin, see
-["Migrating from Built-in CloudNativePG Backup"](migration.md)
-for detailed instructions.
-:::
-
-## Requirements
-
-Before using the Barman Cloud Plugin, ensure that the following components are
-installed and properly configured:
-
-- [CloudNativePG](https://cloudnative-pg.io) version 1.26 or later
-
-  - We strongly recommend version 1.27.0 or later, which includes improved
-    error handling and status reporting for the plugin.
-  - If you are running an earlier release, refer to the
-    [upgrade guide](https://cloudnative-pg.io/documentation/current/installation_upgrade).
-
-- [cert-manager](https://cert-manager.io/)
-
-  - The recommended way to enable secure TLS communication between the plugin
-    and the operator.
-  - Alternatively, you can provide your own certificate bundles. See the
-    [CloudNativePG documentation on TLS configuration](https://cloudnative-pg.io/documentation/current/cnpg_i/#configuring-tls-certificates).
-
-- [`kubectl-cnpg`](https://cloudnative-pg.io/documentation/current/kubectl-plugin/)
-  plugin (optional but recommended)
-
-  - Simplifies debugging and monitoring with additional status and inspection
-    commands.
-  - Multiple installation options are available in the
-    [installation guide](https://cloudnative-pg.io/documentation/current/kubectl-plugin/#install).
-
-## Key Features
-
-This plugin provides the following capabilities:
-
-- Physical online backup of the data directory
-- Physical restore of the data directory
-- Write-Ahead Log (WAL) archiving
-- WAL restore
-- Full cluster recovery
-- Point-in-Time Recovery (PITR)
-- Seamless integration with replica clusters for bootstrap and WAL restore from archive
-
-:::important
-The Barman Cloud Plugin is designed to **replace the in-tree object storage support**
-previously provided via the `.spec.backup.barmanObjectStore` section in the
-`Cluster` resource.
-Backups created using the in-tree approach are fully supported and compatible
-with this plugin.
-:::
-
-## Supported Object Storage Providers
-
-The plugin works with all storage backends supported by `barman-cloud`, including:
-
-- **Amazon S3**
-- **Google Cloud Storage**
-- **Microsoft Azure Blob Storage**
-
-In addition, the following S3-compatible and simulator solutions have been
-tested and verified:
-
-- [MinIO](https://min.io/) – An S3-compatible storage solution
-- [Azurite](https://github.com/Azure/Azurite) – A simulator for Azure Blob Storage
-- [fake-gcs-server](https://github.com/fsouza/fake-gcs-server) – A simulator for Google Cloud Storage
-
-:::tip
-For more details, refer to [Object Store Providers](object_stores.md).
-:::

web/versioned_docs/version-0.11.0/migration.md

@@ -1,274 +0,0 @@
----
-sidebar_position: 40
----
-
-# Migrating from Built-in CloudNativePG Backup
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The in-tree support for Barman Cloud in CloudNativePG is **deprecated starting
-from version 1.26** and will be removed in a future release.
-
-If you're currently relying on the built-in Barman Cloud integration, you can
-migrate seamlessly to the new **plugin-based architecture** using the Barman
-Cloud Plugin, without data loss. Follow these steps:
-
-- [Install the Barman Cloud Plugin](installation.mdx)
-- Create an `ObjectStore` resource by translating the contents of the
-  `.spec.backup.barmanObjectStore` section from your existing `Cluster`
-  definition
-- Modify the `Cluster` resource in a single atomic change to switch from
-  in-tree backup to the plugin
-- Update any `ScheduledBackup` resources to use the plugin
-- Update the `externalClusters` configuration, where applicable
-
-:::tip
-For a working example, refer to [this commit](https://github.com/cloudnative-pg/cnpg-playground/commit/596f30e252896edf8f734991c3538df87630f6f7)
-from the [CloudNativePG Playground project](https://github.com/cloudnative-pg/cnpg-playground),
-which demonstrates a full migration.
-:::
-
----
-
-## Step 1: Define the `ObjectStore`
-
-Begin by creating an `ObjectStore` resource in the same namespace as your
-PostgreSQL `Cluster`.
-
-There is a **direct mapping** between the `.spec.backup.barmanObjectStore`
-section in CloudNativePG and the `.spec.configuration` field in the
-`ObjectStore` CR. The conversion is mostly mechanical, with one key difference:
-
-:::warning
-In the plugin architecture, retention policies are defined as part of the `ObjectStore`.
-In contrast, the in-tree implementation defined them at the `Cluster` level.
-:::
-
-If your `Cluster` used `.spec.backup.retentionPolicy`, move that configuration
-to `.spec.retentionPolicy` in the `ObjectStore`.
-
----
-
-### Example
-
-Here’s an excerpt from a traditional in-tree CloudNativePG backup configuration
-taken from the CloudNativePG Playground project:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-eu
-spec:
-  # [...]
-  backup:
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio-eu:9000
-      s3Credentials:
-        accessKeyId:
-          name: minio-eu
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: minio-eu
-          key: ACCESS_SECRET_KEY
-      wal:
-        compression: gzip
-```
-
-This configuration translates to the following `ObjectStore` resource for the
-plugin:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-eu
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio-eu:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio-eu
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: minio-eu
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-As you can see, the contents of `barmanObjectStore` have been copied directly
-under the `configuration` field of the `ObjectStore` resource, using the same
-secret references.
-
-## Step 2: Update the `Cluster` for plugin WAL archiving
-
-Once the `ObjectStore` resource is in place, update the `Cluster` resource as
-follows in a single atomic change:
-
-- Remove the `.spec.backup.barmanObjectStore` section
-- Remove `.spec.backup.retentionPolicy` if it was defined (as it is now in the
-  `ObjectStore`)
-- Remove the entire `spec.backup` section if it is now empty
-- Add `barman-cloud.cloudnative-pg.io` to the `plugins` list, as described in
-  [Configuring WAL archiving](usage.md#configuring-wal-archiving)
-
-This will trigger a rolling update of the `Cluster`, switching continuous
-backup from the in-tree implementation to the plugin-based approach.
-
-### Example
-
-The updated `pg-eu` cluster will have this configuration instead of the
-previous `backup` section:
-
-```yaml
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-eu
-```
-
----
-
-## Step 3: Update the `ScheduledBackup`
-
-After switching the `Cluster` to use the plugin, update your `ScheduledBackup`
-resources to match.
-
-Set the backup `method` to `plugin` and reference the plugin name via
-`pluginConfiguration`, as shown in ["Performing a base backup"](usage.md#performing-a-base-backup).
-
-### Example
-
-Original in-tree `ScheduledBackup`:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
-  name: pg-eu-backup
-spec:
-  cluster:
-    name: pg-eu
-  schedule: '0 0 0 * * *'
-  backupOwnerReference: self
-```
-
-Updated version using the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
-  name: pg-eu-backup
-spec:
-  cluster:
-    name: pg-eu
-  schedule: '0 0 0 * * *'
-  backupOwnerReference: self
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-```
-
----
-
-## Step 4: Update the `externalClusters` configuration
-
-If your `Cluster` relies on one or more external clusters that use the in-tree
-Barman Cloud integration, you need to update those configurations to use the
-plugin-based architecture.
-
-When a replica cluster fetches WAL files or base backups from an external
-source that used the built-in backup method, follow these steps:
-
-1. Create a corresponding `ObjectStore` resource for the external cluster, as
-   shown in [Step 1](#step-1-define-the-objectstore)
-2. Update the `externalClusters` section of your replica cluster to use the
-   plugin instead of the in-tree `barmanObjectStore` field
-
-### Example
-
-Consider the original configuration using in-tree Barman Cloud:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-us
-spec:
-  # [...]
-  externalClusters:
-  - name: pg-eu
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio-eu:9000
-      serverName: pg-eu
-      s3Credentials:
-        accessKeyId:
-          name: minio-eu
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: minio-eu
-          key: ACCESS_SECRET_KEY
-      wal:
-        compression: gzip
-```
-
-Create the `ObjectStore` resource for the external cluster:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-eu
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio-eu:9000
-    s3Credentials:
-    accessKeyId:
-        name: minio-eu
-        key: ACCESS_KEY_ID
-    secretAccessKey:
-        name: minio-eu
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-Update the external cluster configuration to use the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-us
-spec:
-  # [...]
-  externalClusters:
-  - name: pg-eu
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-eu
-        serverName: pg-eu
-```
-
-## Step 5: Verify your metrics
-
-When migrating from the in-core solution to the plugin-based approach, you need
-to monitor a different set of metrics, as described in the
-["Observability"](observability.md) section.
-
-The table below summarizes the name changes between the old in-core metrics and
-the new plugin-based ones:
-
-| Old metric name                                  | New metric name                                                  |
-| ------------------------------------------------ | ---------------------------------------------------------------- |
-| `cnpg_collector_last_failed_backup_timestamp`    | `barman_cloud_cloudnative_pg_io_last_failed_backup_timestamp`    |
-| `cnpg_collector_last_available_backup_timestamp` | `barman_cloud_cloudnative_pg_io_last_available_backup_timestamp` |
-| `cnpg_collector_first_recoverability_point`      | `barman_cloud_cloudnative_pg_io_first_recoverability_point`      |

web/versioned_docs/version-0.11.0/misc.md

@@ -1,97 +0,0 @@
----
-sidebar_position: 90
----
-
-# Miscellaneous
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-## Backup Object Tagging
-
-You can attach key-value metadata tags to backup artifacts—such as base
-backups, WAL files, and history files—via the `.spec.configuration` section of
-the `ObjectStore` resource.
-
-- `tags`: applied to base backups and WAL files
-- `historyTags`: applied to history files only
-
-### Example
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    [...]
-    tags:
-      backupRetentionPolicy: "expire"
-    historyTags:
-      backupRetentionPolicy: "keep"
-  [...]
-```
-
-## Extra Options for Backup and WAL Archiving
-
-You can pass additional command-line arguments to `barman-cloud-backup` and
-`barman-cloud-wal-archive` using the `additionalCommandArgs` field in the
-`ObjectStore` configuration.
-
-- `.spec.configuration.data.additionalCommandArgs`: for `barman-cloud-backup`
-- `.spec.configuration.wal.archiveAdditionalCommandArgs`: for `barman-cloud-wal-archive`
-
-Each field accepts a list of string arguments. If an argument is already
-configured elsewhere in the plugin, the duplicate will be ignored.
-
-### Example: Extra Backup Options
-
-```yaml
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    data:
-      additionalCommandArgs:
-        - "--min-chunk-size=5MB"
-        - "--read-timeout=60"
-```
-
-### Example: Extra WAL Archive Options
-
-```yaml
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    wal:
-      archiveAdditionalCommandArgs:
-        - "--max-concurrency=1"
-        - "--read-timeout=60"
-```
-
-For a complete list of supported options, refer to the
-[official Barman Cloud documentation](https://docs.pgbarman.org/release/latest/).
-
-## Enable the pprof debug server for the sidecar
-
-You can enable the instance sidecar's pprof debug HTTP server by adding the `--pprof-server=<address>` flag to the container's
-arguments via `.spec.instanceSidecarConfiguration.additionalContainerArgs`.
-
-Pass a bind address in the form `<host>:<port>` (for example, `0.0.0.0:6061`).
-An empty value disables the server (disabled by default).
-
-### Example
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  instanceSidecarConfiguration:
-    additionalContainerArgs:
-      - "--pprof-server=0.0.0.0:6061"
-```

web/versioned_docs/version-0.11.0/object_stores.md

@@ -1,498 +0,0 @@
----
-sidebar_position: 50
----
-
-# Object Store Providers
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin enables the storage of PostgreSQL cluster backup files
-in any object storage service supported by the
-[Barman Cloud infrastructure](https://docs.pgbarman.org/release/latest/).
-
-Currently, Barman Cloud supports the following providers:
-
-- [Amazon S3](#aws-s3)
-- [Microsoft Azure Blob Storage](#azure-blob-storage)
-- [Google Cloud Storage](#google-cloud-storage)
-
-You may also use any S3- or Azure-compatible implementation of the above
-services.
-
-To configure object storage with Barman Cloud, you must define an
-[`ObjectStore` object](plugin-barman-cloud.v1.md#objectstore), which
-establishes the connection between your PostgreSQL cluster and the object
-storage backend.
-
-Configuration details — particularly around authentication — will vary depending on
-the specific object storage provider you are using.
-
-The following sections detail the setup for each.
-
-:::note Authentication Methods
-The Barman Cloud Plugin does not independently test all authentication methods
-supported by `barman-cloud`. The plugin's responsibility is limited to passing
-the provided credentials to `barman-cloud`, which then handles authentication
-according to its own implementation. Users should refer to the
-[Barman Cloud documentation](https://docs.pgbarman.org/release/latest/) to
-verify that their chosen authentication method is supported and properly
-configured.
-:::
-
----
-
-## AWS S3
-
-[AWS Simple Storage Service (S3)](https://aws.amazon.com/s3/) is one of the
-most widely adopted object storage solutions.
-
-The Barman Cloud plugin for CloudNativePG integrates with S3 through two
-primary authentication mechanisms:
-
-- [IAM Roles for Service Accounts (IRSA)](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html) —
-  recommended for clusters running on EKS
-- Access keys — using `ACCESS_KEY_ID` and `ACCESS_SECRET_KEY` credentials
-
-### Access Keys
-
-To authenticate using access keys, you’ll need:
-
-- `ACCESS_KEY_ID`: the public key used to authenticate to S3
-- `ACCESS_SECRET_KEY`: the corresponding secret key
-- `ACCESS_SESSION_TOKEN`: (optional) a temporary session token, if required
-
-These credentials must be stored securely in a Kubernetes secret:
-
-```sh
-kubectl create secret generic aws-creds \
-  --from-literal=ACCESS_KEY_ID=<access key here> \
-  --from-literal=ACCESS_SECRET_KEY=<secret key here>
-# --from-literal=ACCESS_SESSION_TOKEN=<session token here> # if required
-```
-
-The credentials will be encrypted at rest if your Kubernetes environment
-supports it.
-
-You can then reference the secret in your `ObjectStore` definition:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: aws-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/path/to/folder"
-    s3Credentials:
-      accessKeyId:
-        name: aws-creds
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: aws-creds
-        key: ACCESS_SECRET_KEY
-  [...]
-```
-
-### IAM Role for Service Account (IRSA)
-
-To use IRSA with EKS, configure the service account of the PostgreSQL cluster
-with the appropriate annotation:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  [...]
-spec:
-  serviceAccountTemplate:
-    metadata:
-      annotations:
-        eks.amazonaws.com/role-arn: arn:[...]
-        [...]
-```
-
-### S3 Lifecycle Policy
-
-Barman Cloud uploads backup files to S3 but does not modify them afterward.
-To enhance data durability and protect against accidental or malicious loss,
-it's recommended to implement the following best practices:
-
-- Enable object versioning
-- Enable object locking to prevent objects from being deleted or overwritten
-  for a defined period or indefinitely (this provides an additional layer of
-  protection against accidental deletion and ransomware attacks)
-- Set lifecycle rules to expire current versions a few days after your Barman
-  retention window
-- Expire non-current versions after a longer period
-
-These strategies help you safeguard backups without requiring broad delete
-permissions, ensuring both security and compliance with minimal operational
-overhead.
-
-
-### S3-Compatible Storage Providers
-
-You can use S3-compatible services like **MinIO**, **Linode (Akamai) Object Storage**,
-or **DigitalOcean Spaces** by specifying a custom `endpointURL`.
-
-Example with Linode (Akamai) Object Storage (`us-east1`):
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: linode-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/"
-    endpointURL: "https://us-east1.linodeobjects.com"
-    s3Credentials:
-    [...]
-  [...]
-```
-
-Recent changes to the [boto3 implementation](https://github.com/boto/boto3/issues/4392)
-of [Amazon S3 Data Integrity Protections](https://docs.aws.amazon.com/sdkref/latest/guide/feature-dataintegrity.html)
-may lead to the `x-amz-content-sha256` error when using the Barman Cloud
-Plugin.
-
-If you encounter this issue (see [GitHub issue #393](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/393)),
-you can apply the following workaround by setting specific environment
-variables in the `ObjectStore` resource:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: linode-store
-spec:
-  instanceSidecarConfiguration:
-    env:
-      - name: AWS_REQUEST_CHECKSUM_CALCULATION
-        value: when_required
-      - name: AWS_RESPONSE_CHECKSUM_VALIDATION
-        value: when_required
-  [...]
-```
-
-These settings ensure that checksum calculations and validations are only
-applied when explicitly required, avoiding compatibility issues with certain
-S3-compatible storage providers.
-
-Example with DigitalOcean Spaces (SFO3, path-style):
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: digitalocean-store
-spec:
-  configuration:
-    destinationPath: "s3://BUCKET_NAME/path/to/folder"
-    endpointURL: "https://sfo3.digitaloceanspaces.com"
-    s3Credentials:
-    [...]
-  [...]
-```
-
-### Using Object Storage with a Private CA
-
-For object storage services (e.g., MinIO) that use HTTPS with certificates
-signed by a private CA, set the `endpointCA` field in the `ObjectStore`
-definition. Unless you already have it, create a Kubernetes `Secret` with the
-CA bundle:
-
-```sh
-kubectl create secret generic my-ca-secret --from-file=ca.crt
-```
-
-Then reference it:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    endpointURL: <myEndpointURL>
-    endpointCA:
-      name: my-ca-secret
-      key: ca.crt
-  [...]
-```
-
-<!-- TODO: does this also apply to the plugin? -->
-:::note
-If you want `ConfigMaps` and `Secrets` to be **automatically** reloaded by
-instances, you can add a label with the key `cnpg.io/reload` to the
-`Secrets`/`ConfigMaps`. Otherwise, you will have to reload the instances using the
-`kubectl cnpg reload` subcommand.
-:::
-
----
-
-## Azure Blob Storage
-
-[Azure Blob Storage](https://azure.microsoft.com/en-us/services/storage/blobs/)
-is Microsoft’s cloud-based object storage solution.
-
-Barman Cloud supports the following authentication methods:
-
-- [Connection String](https://learn.microsoft.com/en-us/azure/storage/common/storage-configure-connection-string)
-- Storage Account Name + [Storage Account Access Key](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage)
-- Storage Account Name + [Storage Account SAS Token](https://learn.microsoft.com/en-us/azure/storage/blobs/sas-service-create)
-- [Azure AD Managed Identity](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview)
-- [Default Azure Credentials](https://learn.microsoft.com/en-us/dotnet/api/azure.identity.defaultazurecredential?view=azure-dotnet)
-
-### Azure AD Managed Identity
-
-This method avoids storing credentials in Kubernetes by enabling the
-usage of [Azure Managed Identities](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) authentication mechanism.
-This can be enabled by setting the `inheritFromAzureAD` option to `true`.
-Managed Identity can be configured for the AKS Cluster by following
-the [Azure documentation](https://learn.microsoft.com/en-us/azure/aks/use-managed-identity?pivots=system-assigned).
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: azure-store
-spec:
-  configuration:
-    destinationPath: "<destination path here>"
-    azureCredentials:
-      inheritFromAzureAD: true
-  [...]
-```
-
-### Default Azure Credentials
-
-The `useDefaultAzureCredentials` option enables the default Azure credentials
-flow, which uses [`DefaultAzureCredential`](https://learn.microsoft.com/en-us/python/api/azure-identity/azure.identity.defaultazurecredential)
-to automatically discover and use available credentials in the following order:
-
-1. **Environment Variables** — `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, and `AZURE_TENANT_ID` for Service Principal authentication
-2. **Managed Identity** — Uses the managed identity assigned to the pod
-3. **Azure CLI** — Uses credentials from the Azure CLI if available
-4. **Azure PowerShell** — Uses credentials from Azure PowerShell if available
-
-This approach is particularly useful for getting started with development and testing; it allows
-the SDK to attempt multiple authentication mechanisms seamlessly across different environments.
-However, this is not recommended for production. Please refer to the
-[official Azure guidance](https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication/credential-chains?tabs=dac#usage-guidance-for-defaultazurecredential)
-for a comprehensive understanding of `DefaultAzureCredential`.
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: azure-store
-spec:
-  configuration:
-    destinationPath: "<destination path here>"
-    azureCredentials:
-      useDefaultAzureCredentials: true
-  [...]
-```
-
-### Access Key, SAS Token, or Connection String
-
-Store credentials in a Kubernetes secret:
-
-```sh
-kubectl create secret generic azure-creds \
-  --from-literal=AZURE_STORAGE_ACCOUNT=<storage account name> \
-  --from-literal=AZURE_STORAGE_KEY=<storage account key> \
-  --from-literal=AZURE_STORAGE_SAS_TOKEN=<SAS token> \
-  --from-literal=AZURE_STORAGE_CONNECTION_STRING=<connection string>
-```
-
-Then reference the required keys in your `ObjectStore`:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: azure-store
-spec:
-  configuration:
-    destinationPath: "<destination path here>"
-    azureCredentials:
-      connectionString:
-        name: azure-creds
-        key: AZURE_CONNECTION_STRING
-      storageAccount:
-        name: azure-creds
-        key: AZURE_STORAGE_ACCOUNT
-      storageKey:
-        name: azure-creds
-        key: AZURE_STORAGE_KEY
-      storageSasToken:
-        name: azure-creds
-        key: AZURE_STORAGE_SAS_TOKEN
-  [...]
-```
-
-For Azure Blob, the destination path format is:
-
-```
-<http|https>://<account-name>.<service-name>.core.windows.net/<container>/<blob>
-```
-
-### Azure-Compatible Providers
-
-If you're using a different implementation (e.g., Azurite or emulator):
-
-```
-<http|https>://<local-machine-address>:<port>/<account-name>/<container>/<blob>
-```
-
----
-
-## Google Cloud Storage
-
-[Google Cloud Storage](https://cloud.google.com/storage/) is supported with two
-authentication modes:
-
-- **GKE Workload Identity** (recommended inside Google Kubernetes Engine)
-- **Service Account JSON key** via the `GOOGLE_APPLICATION_CREDENTIALS` environment variable
-
-### GKE Workload Identity
-
-Use the [Workload Identity authentication](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
-when running in GKE:
-
-1. Set `googleCredentials.gkeEnvironment` to `true` in the `ObjectStore`
-   resource
-2. Annotate the `serviceAccountTemplate` in the `Cluster` resource with the GCP
-   service account
-
-For example, in the `ObjectStore` resource:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: google-store
-spec:
-  configuration:
-    destinationPath: "gs://<bucket>/<folder>"
-    googleCredentials:
-      gkeEnvironment: true
-```
-
-And in the `Cluster` resource:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-spec:
-  serviceAccountTemplate:
-    metadata:
-      annotations:
-        iam.gke.io/gcp-service-account: [...].iam.gserviceaccount.com
-```
-
-### Service Account JSON Key
-
-Follow Google’s [authentication setup](https://cloud.google.com/docs/authentication/getting-started),
-then:
-
-```sh
-kubectl create secret generic backup-creds --from-file=gcsCredentials=gcs_credentials_file.json
-```
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: google-store
-spec:
-  configuration:
-    destinationPath: "gs://<bucket>/<folder>"
-    googleCredentials:
-      applicationCredentials:
-        name: backup-creds
-        key: gcsCredentials
-  [...]
-```
-
-:::important
-This authentication method generates a JSON file within the container
-with all the credentials required to access your Google Cloud Storage
-bucket. As a result, if someone gains access to the `Pod`, they will also have
-write permissions to the bucket.
-:::
-
----
-
-
-## MinIO Object Store
-
-In order to use the Tenant resource you first need to deploy the
-[MinIO operator](https://docs.min.io/community/minio-object-store/operations/deployments/installation.html).
-For the latest documentation of MinIO, please refer to the
-[MinIO official documentation](https://docs.min.io/community/minio-object-store/).
-
-MinIO Object Store's API is compatible with S3, and the default configuration of the Tenant
-will create these services:
-- `<tenant>-console` on port 9090 (with autocert) or 9443 (without autocert)
-- `<tenant>-hl` on port 9000
-Where `<tenant>` is the `metadata.name` you assigned to your Tenant resource.
-
-:::note
-The `<tenant>-console` service will only be available if you have enabled the
-[MinIO Console](https://docs.min.io/community/minio-object-store/administration/minio-console.html).
-
-For example, the following Tenant:
-```yml
-apiVersion: minio.min.io/v2
-kind: Tenant
-metadata:
-  name: cnpg-backups
-spec:
-  [...]
-```
-would have services called `cnpg-backups-console` and `cnpg-backups-hl` respectively.
-
-The `console` service is for managing the tenant, while the `hl` service exposes the S3
-compatible API. If your tenant is configured with `requestAutoCert` you will communicate
-to these services over HTTPS, if not you will use HTTP.
-
-For authentication you can use your username and password, or create an access key.
-Whichever method you choose, it has to be stored as a secret.
-
-```sh
-kubectl create secret generic minio-creds \
-  --from-literal=MINIO_ACCESS_KEY=<minio access key or username> \
-  --from-literal=MINIO_SECRET_KEY=<minio secret key or password>
-```
-
-Finally, create the Barman ObjectStore:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    destinationPath: s3://BUCKET_NAME/
-    endpointURL: http://<tenant>-hl:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio-creds
-        key: MINIO_ACCESS_KEY
-      secretAccessKey:
-        name: minio-creds
-        key: MINIO_SECRET_KEY
-  [...]
-```
-
-:::important
-Verify on `s3://BUCKET_NAME/` the presence of archived WAL files before
-proceeding with a backup.
-:::
-
----

web/versioned_docs/version-0.11.0/observability.md

@@ -1,24 +0,0 @@
----
-sidebar_position: 55
----
-
-# Observability
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin exposes the following metrics through the native
-Prometheus exporter of the instance manager:
-
-- `barman_cloud_cloudnative_pg_io_last_failed_backup_timestamp`:
-  the UNIX timestamp of the most recent failed backup.
-
-- `barman_cloud_cloudnative_pg_io_last_available_backup_timestamp`:
-  the UNIX timestamp of the most recent successfully available backup.
-
-- `barman_cloud_cloudnative_pg_io_first_recoverability_point`:
-  the UNIX timestamp representing the earliest point in time from which the
-  cluster can be recovered.
-
-These metrics supersede the previously available in-core metrics that used the
-`cnpg_collector` prefix. The new metrics are exposed under the
-`barman_cloud_cloudnative_pg_io` prefix instead.

web/versioned_docs/version-0.11.0/parameters.md

@@ -1,19 +0,0 @@
----
-sidebar_position: 100
----
-
-# Parameters
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The following parameters are available for the Barman Cloud Plugin:
-
-- `barmanObjectName`: references the `ObjectStore` resource to be used by the
-  plugin.
-- `serverName`: Specifies the server name in the object store.
-
-:::important
-The `serverName` parameter in the `ObjectStore` resource is retained solely for
-API compatibility with the in-tree `barmanObjectStore` and must always be left empty.
-When needed, use the `serverName` plugin parameter in the Cluster configuration instead.
-:::

web/versioned_docs/version-0.11.0/plugin-barman-cloud.v1.md

@@ -1,108 +0,0 @@
-# API Reference
-
-## Packages
-- [barmancloud.cnpg.io/v1](#barmancloudcnpgiov1)
-
-
-## barmancloud.cnpg.io/v1
-
-Package v1 contains API Schema definitions for the barmancloud v1 API group
-
-### Resource Types
-- [ObjectStore](#objectstore)
-
-
-
-#### InstanceSidecarConfiguration
-
-
-
-InstanceSidecarConfiguration defines the configuration for the sidecar that runs in the instance pods.
-
-
-
-_Appears in:_
-- [ObjectStoreSpec](#objectstorespec)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `env` _[EnvVar](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#envvar-v1-core) array_ | The environment to be explicitly passed to the sidecar |  |  |  |
-| `retentionPolicyIntervalSeconds` _integer_ | The retentionCheckInterval defines the frequency at which the<br />system checks and enforces retention policies. |  | 1800 |  |
-| `resources` _[ResourceRequirements](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#resourcerequirements-v1-core)_ | Resources define cpu/memory requests and limits for the sidecar that runs in the instance pods. |  |  |  |
-| `additionalContainerArgs` _string array_ | AdditionalContainerArgs is an optional list of command-line arguments<br />to be passed to the sidecar container when it starts.<br />The provided arguments are appended to the container’s default arguments. |  |  |  |
-| `logLevel` _string_ | The log level for PostgreSQL instances. Valid values are: `error`, `warning`, `info` (default), `debug`, `trace` |  | info | Enum: [error warning info debug trace] <br /> |
-
-
-#### ObjectStore
-
-
-
-ObjectStore is the Schema for the objectstores API.
-
-
-
-
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `apiVersion` _string_ | `barmancloud.cnpg.io/v1` | True | | |
-| `kind` _string_ | `ObjectStore` | True | | |
-| `metadata` _[ObjectMeta](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#objectmeta-v1-meta)_ | Refer to Kubernetes API documentation for fields of `metadata`. | True |  |  |
-| `spec` _[ObjectStoreSpec](#objectstorespec)_ | Specification of the desired behavior of the ObjectStore.<br />More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status | True |  |  |
-| `status` _[ObjectStoreStatus](#objectstorestatus)_ | Most recently observed status of the ObjectStore. This data may not be up to<br />date. Populated by the system. Read-only.<br />More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |  |  |  |
-
-
-#### ObjectStoreSpec
-
-
-
-ObjectStoreSpec defines the desired state of ObjectStore.
-
-
-
-_Appears in:_
-- [ObjectStore](#objectstore)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `configuration` _[BarmanObjectStoreConfiguration](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration)_ | The configuration for the barman-cloud tool suite | True |  |  |
-| `retentionPolicy` _string_ | RetentionPolicy is the retention policy to be used for backups<br />and WALs (i.e. '60d'). The retention policy is expressed in the form<br />of `XXu` where `XX` is a positive integer and `u` is in `[dwm]` -<br />days, weeks, months. |  |  | Pattern: `^[1-9][0-9]*[dwm]$` <br /> |
-| `instanceSidecarConfiguration` _[InstanceSidecarConfiguration](#instancesidecarconfiguration)_ | The configuration for the sidecar that runs in the instance pods |  |  |  |
-
-
-#### ObjectStoreStatus
-
-
-
-ObjectStoreStatus defines the observed state of ObjectStore.
-
-
-
-_Appears in:_
-- [ObjectStore](#objectstore)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `serverRecoveryWindow` _object (keys:string, values:[RecoveryWindow](#recoverywindow))_ | ServerRecoveryWindow maps each server to its recovery window | True |  |  |
-
-
-#### RecoveryWindow
-
-
-
-RecoveryWindow represents the time span between the first
-recoverability point and the last successful backup of a PostgreSQL
-server, defining the period during which data can be restored.
-
-
-
-_Appears in:_
-- [ObjectStoreStatus](#objectstorestatus)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `firstRecoverabilityPoint` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The first recoverability point in a PostgreSQL server refers to<br />the earliest point in time to which the database can be<br />restored. | True |  |  |
-| `lastSuccessfulBackupTime` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The last successful backup time | True |  |  |
-| `lastFailedBackupTime` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The last failed backup time | True |  |  |
-
-

web/versioned_docs/version-0.11.0/resource-name-migration.md

@@ -1,219 +0,0 @@
----
-sidebar_position: 90
----
-
-# Resource name migration guide
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-:::warning
-Before proceeding with the migration process, please:
-1. **Read this guide in its entirety** to understand what changes will be made
-2. **Test in a non-production environment** first if possible
-3. **Ensure you have proper backups** of your cluster configuration
-
-This migration will delete old RBAC resources only after the
-`plugin-barman-cloud` upgrade. While the operation is designed to be safe, you
-should review and understand the changes before proceeding. The maintainers of
-this project are not responsible for any issues that may arise during
-migration.
-
-**Note:** This guide assumes you are using the default `cnpg-system` namespace.
-:::
-
-## Overview
-
-Starting from version **0.8.0**, the `plugin-barman-cloud` deployment manifests
-use more specific, prefixed resource names to avoid conflicts with other
-components deployed in the same Kubernetes cluster.
-
-## What Changed
-
-The following resources have been renamed to use proper prefixes.
-
-### Cluster-scoped Resources
-
-| Old Name                   | New Name                                 |
-|----------------------------|------------------------------------------|
-| `metrics-auth-role`        | `barman-plugin-metrics-auth-role`        |
-| `metrics-auth-rolebinding` | `barman-plugin-metrics-auth-rolebinding` |
-| `metrics-reader`           | `barman-plugin-metrics-reader`           |
-| `objectstore-viewer-role`  | `barman-plugin-objectstore-viewer-role`  |
-| `objectstore-editor-role`  | `barman-plugin-objectstore-editor-role`  |
-
-### Namespace-scoped Resources
-
-| Old Name                      | New Name                                    | Namespace     |
-|-------------------------------|---------------------------------------------|---------------|
-| `leader-election-role`        | `barman-plugin-leader-election-role`        | `cnpg-system` |
-| `leader-election-rolebinding` | `barman-plugin-leader-election-rolebinding` | `cnpg-system` |
-
-## Why This Change?
-
-Using generic names for cluster-wide resources is discouraged as they may
-conflict with other components deployed in the same cluster. The new names make
-it clear that these resources belong to the Barman Cloud plugin and help avoid
-naming collisions.
-
-## Migration Instructions
-
-This three steps migration process is straightforward and can be completed with
-a few `kubectl` commands.
-
-### Step 1: Upgrade plugin-barman-cloud
-
-Please refer to the [Installation](installation.mdx) section to deploy the new
-`plugin-barman-cloud` release.
-
-### Step 2: Delete Old Cluster-scoped Resources
-
-:::danger Verify Resources Before Deletion
-**IMPORTANT**: The old resource names are generic and could potentially belong
-to other components in your cluster.
-
-**Before deleting each resource, verify it belongs to the Barman Cloud plugin
-by checking:**
-- For `objectstore-*` roles: Look for `barmancloud.cnpg.io` in the API groups
-- For `metrics-*` roles: Check if they reference the `plugin-barman-cloud`
-  ServiceAccount in `cnpg-system` namespace
-- For other roles: Look for labels like `app.kubernetes.io/name: plugin-barman-cloud`
-
-If a resource doesn't have these indicators, **DO NOT DELETE IT** as it may
-belong to another application.
-
-Carefully review the output of each verification command before proceeding with
-the `delete`.
-:::
-
-:::tip Dry Run First
-You can add `--dry-run=client` to any `kubectl delete` command to preview what
-would be deleted without actually removing anything.
-:::
-
-**Only proceed if you've verified these resources belong to the Barman Cloud
-plugin (see warning above).**
-
-For each resource below, first verify it belongs to Barman Cloud, then delete
-it:
-
-```bash
-# 1. Check metrics-auth-rolebinding FIRST (we'll check the role after)
-# Look for references to plugin-barman-cloud ServiceAccount
-kubectl describe clusterrolebinding metrics-auth-rolebinding
-# If it references plugin-barman-cloud ServiceAccount in cnpg-system namespace,
-# delete it:
-kubectl delete clusterrolebinding metrics-auth-rolebinding
-
-# 2. Check metrics-auth-role
-# Look for references to authentication.k8s.io and authorization.k8s.io
-kubectl describe clusterrole metrics-auth-role
-# Verify it's not being used by any other rolebindings:
-kubectl get clusterrolebinding -o json \
-  | jq -r '.items[] | select(.roleRef.name=="metrics-auth-role") \
-  | .metadata.name'
-# If the above returns nothing (role is not in use) and the role looks like the
-# Barman Cloud one, delete it (see warnings section):
-kubectl delete clusterrole metrics-auth-role
-
-# 3. Check objectstore-viewer-role
-# Look for barmancloud.cnpg.io API group or
-# for `app.kubernetes.io/name: plugin-barman-cloud` label
-kubectl describe clusterrole objectstore-viewer-role
-# If it shows barmancloud.cnpg.io in API groups, delete it:
-kubectl delete clusterrole objectstore-viewer-role
-
-# 4. Check objectstore-editor-role
-# Look for barmancloud.cnpg.io API group or
-# for `app.kubernetes.io/name: plugin-barman-cloud` label
-kubectl describe clusterrole objectstore-editor-role
-# If it shows barmancloud.cnpg.io in API groups, delete it:
-kubectl delete clusterrole objectstore-editor-role
-
-# 5. Check metrics-reader (MOST DANGEROUS - very generic name)
-# First, check if it's being used by any rolebindings OTHER than barman's:
-kubectl get clusterrolebinding -o json | jq -r '.items[] \
-  | select(.roleRef.name=="metrics-reader") \
-  | "\(.metadata.name) -> \(.subjects[0].name) in \(.subjects[0].namespace)"'
-# If this shows ANY rolebindings, review them carefully. Only proceed if
-# they're all Barman-related.  Then check the role itself:
-kubectl describe clusterrole metrics-reader
-# If it ONLY has nonResourceURLs: /metrics and NO other rolebindings use it,
-# delete it:
-kubectl delete clusterrole metrics-reader
-```
-
-:::warning
-The `metrics-reader` role is particularly dangerous to delete blindly. Many
-monitoring systems use this exact name. Only delete it if:
-
-1. You've verified it ONLY grants access to `/metrics`
-2. No other rolebindings reference it (checked with the jq command above)
-3. You're certain it was created by the Barman Cloud plugin
-
-If you're unsure, it's safer to leave it and let the new
-`barman-plugin-metrics-reader` role coexist with it.
-:::
-
-If any resource is not found during the `describe` command, that's okay - it
-means it was never created or already deleted. Simply skip the delete command
-for that resource.
-
-### Step 3: Delete Old Namespace-scoped Resources
-
-Delete the old namespace-scoped resources in the `cnpg-system` namespace:
-
-```bash
-# Delete the old leader-election resources
-kubectl delete role leader-election-role -n cnpg-system
-kubectl delete rolebinding leader-election-rolebinding -n cnpg-system
-```
-
-If any resource is not found, that's okay - it means it was never created or
-already deleted.
-
-## Impact
-
-- **Permissions:** If you have custom RBAC rules or tools that reference the
-  old resource names, they will need to be updated.
-- **External Users:** If end users have been granted the
-  `objectstore-viewer-role` or `objectstore-editor-role`, they will need to be
-  re-granted the new role names (`barman-plugin-objectstore-viewer-role` and
-  `barman-plugin-objectstore-editor-role`).
-
-## Verification
-
-After migration, verify that the new resources are created:
-
-```bash
-# Check cluster-scoped resources
-kubectl get clusterrole | grep barman
-kubectl get clusterrolebinding | grep barman
-
-# Check namespace-scoped resources
-kubectl get role,rolebinding -n cnpg-system | grep barman
-```
-
-You should see the new prefixed resource names.
-
-## Troubleshooting
-
-### Plugin Not Starting After Migration
-
-If the plugin fails to start after migration, check:
-
-1. **ServiceAccount permissions:** Ensure the `plugin-barman-cloud` ServiceAccount is bound to the new roles:
-   ```bash
-   kubectl get clusterrolebinding barman-plugin-metrics-auth-rolebinding -o yaml
-   kubectl get rolebinding barman-plugin-leader-election-rolebinding -n cnpg-system -o yaml
-   ```
-
-2. **Role references:** Verify that the rolebindings reference the correct role names:
-   ```bash
-   kubectl describe rolebinding barman-plugin-leader-election-rolebinding -n cnpg-system
-   kubectl describe clusterrolebinding barman-plugin-metrics-auth-rolebinding
-   ```
-
-## Support
-
-If you encounter issues during migration, please open an issue on the [GitHub
-repository](https://github.com/cloudnative-pg/plugin-barman-cloud/issues).

web/versioned_docs/version-0.11.0/retention.md

@@ -1,38 +0,0 @@
----
-sidebar_position: 60
----
-
-# Retention Policies
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin supports **automated cleanup of obsolete backups** via
-retention policies, configured in the `.spec.retentionPolicy` field of the
-`ObjectStore` resource.
-
-:::note
-This feature uses the `barman-cloud-backup-delete` command with the
-`--retention-policy "RECOVERY WINDOW OF {{ value }} {{ unit }}"` syntax.
-:::
-
-#### Example: 30-Day Retention Policy
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  [...]
-  retentionPolicy: "30d"
-````
-
-:::note
-A **recovery window retention policy** ensures the cluster can be restored to
-any point in time between the calculated *Point of Recoverability* (PoR) and
-the latest WAL archive. The PoR is defined as `current time - recovery window`.
-The **first valid backup** is the most recent backup completed before the PoR.
-Backups older than that are marked as *obsolete* and deleted after the next
-backup completes.
-:::
-

web/versioned_docs/version-0.11.0/troubleshooting.md

@@ -1,591 +0,0 @@
----
-sidebar_position: 90
----
-
-# Troubleshooting
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-This guide helps you diagnose and resolve common issues with the Barman Cloud
-plugin.
-
-:::important
-We are continuously improving the integration between CloudNativePG and the
-Barman Cloud plugin as it moves toward greater stability and maturity. For this
-reason, we recommend using the latest available version of both components.
-See the [*Requirements* section](intro.md#requirements) for details.
-:::
-
-:::note
-The following commands assume you installed the CloudNativePG operator in
-the default `cnpg-system` namespace. If you installed it in a different
-namespace, adjust the commands accordingly.
-:::
-
-## Viewing Logs
-
-To troubleshoot effectively, you’ll often need to review logs from multiple
-sources:
-
-```sh
-# View operator logs (includes plugin interaction logs)
-kubectl logs -n cnpg-system deployment/cnpg-controller-manager -f
-
-# View plugin manager logs
-kubectl logs -n cnpg-system deployment/barman-cloud -f
-
-# View sidecar container logs (Barman Cloud operations)
-kubectl logs -n <namespace> <cluster-pod-name> -c plugin-barman-cloud -f
-
-# View all containers in a pod
-kubectl logs -n <namespace> <cluster-pod-name> --all-containers=true
-
-# View previous container logs (if container restarted)
-kubectl logs -n <namespace> <cluster-pod-name> -c plugin-barman-cloud --previous
-```
-
-## Common Issues
-
-### Plugin Installation Issues
-
-#### Plugin pods not starting
-
-**Symptoms:**
-
-- Plugin pods stuck in `CrashLoopBackOff` or `Error`
-- Plugin deployment not ready
-
-**Possible causes and solutions:**
-
-1. **Certificate issues**
-
-   ```sh
-   # Check if cert-manager is installed and running
-   kubectl get pods -n cert-manager
-
-   # Check if the plugin certificate is created
-   kubectl get certificates -n cnpg-system
-   ```
-
-   If cert-manager is not installed, install it first:
-
-   ```sh
-   # Note: other installation methods for cert-manager are available
-   kubectl apply -f \
-     https://github.com/cert-manager/cert-manager/releases/latest/download/cert-manager.yaml
-   ```
-
-   If you are using your own certificates without cert-manager, you will need
-   to verify the entire certificate chain yourself.
-
-
-2. **Image pull errors**
-
-   ```sh
-   # Check pod events for image pull errors
-   kubectl describe pod -n cnpg-system -l app=barman-cloud
-   ```
-
-   Verify the image exists and you have proper credentials if using a private
-   registry.
-
-
-3. **Resource constraints**
-
-   ```sh
-   # Check node resources
-   kubectl top nodes
-   kubectl describe nodes
-   ```
-
-   Make sure your cluster has sufficient CPU and memory resources.
-
-### Backup Failures
-
-#### Quick Backup Troubleshooting Checklist
-
-When a backup fails, follow these steps in order:
-
-1. **Check backup status**:
-
-   ```sh
-   kubectl get backups.postgresql.cnpg.io -n <namespace>
-   ```
-2. **Get error details and target pod**:
-
-   ```sh
-   kubectl describe backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name>
-
-   kubectl get backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name> \
-     -o jsonpath='{.status.instanceID.podName}'
-   ```
-3. **Check the target pod’s sidecar logs**:
-
-   ```sh
-   TARGET_POD=$(kubectl get backups.postgresql.cnpg.io \
-     -n <namespace> <backup-name> \
-     -o jsonpath='{.status.instanceID.podName}')
-
-   kubectl logs \
-     -n <namespace> $TARGET_POD -c plugin-barman-cloud \
-     --tail=100 | grep -E "ERROR|FATAL|panic"
-   ```
-4. **Check cluster events**:
-
-   ```sh
-   kubectl get events -n <namespace> \
-     --field-selector involvedObject.name=<cluster-name> \
-     --sort-by='.lastTimestamp'
-   ```
-5. **Verify plugin is running**:
-
-   ```sh
-   kubectl get pods \
-     -n cnpg-system -l app=barman-cloud
-   ```
-6. **Check operator logs**:
-
-   ```sh
-   kubectl logs \
-     -n cnpg-system deployment/cnpg-controller-manager \
-     --tail=100 | grep -i "backup\|plugin"
-   ```
-7. **Check plugin manager logs**:
-
-   ```sh
-   kubectl logs \
-     -n cnpg-system deployment/barman-cloud --tail=100
-   ```
-
-#### Backup job fails immediately
-
-**Symptoms:**
-
-- Backup pods terminate with error
-- No backup files appear in object storage
-- Backup shows `failed` phase with various error messages
-
-**Common failure modes and solutions:**
-
-1. **"requested plugin is not available" errors**
-
-   ```
-   requested plugin is not available: barman
-   requested plugin is not available: barman-cloud
-   requested plugin is not available: barman-cloud.cloudnative-pg.io
-   ```
-   
-   **Cause:** The plugin name in the Cluster configuration doesn’t match the
-   deployed plugin, or the plugin isn’t registered.
-   
-   **Solution:** 
-   
-   a. **Check plugin registration:**
-
-   ```sh
-   # If you have the `cnpg` plugin installed (v1.27.0+)
-   kubectl cnpg status -n <namespace> <cluster-name>
-   ```
-   
-   Look for the "Plugins status" section:
-   ```
-   Plugins status
-   Name                            Version  Status  Reported Operator Capabilities
-   ----                            -------  ------  ------------------------------
-   barman-cloud.cloudnative-pg.io  0.6.0    N/A     Reconciler Hooks, Lifecycle Service
-   ```
-   
-   b. **Verify plugin name in `Cluster` spec**:
-
-   ```yaml
-   apiVersion: postgresql.cnpg.io/v1
-   kind: Cluster
-   spec:
-     plugins:
-       - name: barman-cloud.cloudnative-pg.io
-         parameters:
-           barmanObjectName: <your-objectstore-name>
-   ```
-   
-   c. **Check plugin deployment is running**:
-
-   ```sh
-   kubectl get deployment -n cnpg-system barman-cloud
-   ```
-
-2. **"rpc error: code = Unknown desc = panic caught: assignment to entry in nil map" errors**
-   
-   **Cause:** Misconfiguration in the `ObjectStore` (e.g., typo or missing field).
-   
-   **Solution:** 
-
-   - Review sidecar logs for details
-   - Verify `ObjectStore` configuration and secrets
-   - Common issues include:
-     - Missing or incorrect secret references
-     - Typos in configuration parameters
-     - Missing required environment variables in secrets
-
-#### Backup performance issues
-
-**Symptoms:**
-
-- Backups take extremely long
-- Backups timeout
-
-**Plugin-specific considerations:**
-
-1. **Check `ObjectStore` parallelism settings**
-   - Adjust `maxParallel` in `ObjectStore` configuration
-   - Monitor sidecar container resource usage during backups
-
-2. **Verify plugin resource allocation**
-   - Check if the sidecar container has sufficient CPU/memory
-   - Review plugin container logs for resource-related warnings
-
-:::tip
-For Barman-specific features like compression, encryption, and performance
-tuning, refer to the [Barman documentation](https://docs.pgbarman.org/latest/).
-:::
-
-### WAL Archiving Issues
-
-#### WAL archiving stops
-
-**Symptoms:**
-
-- WAL files accumulate on the primary
-- Cluster shows WAL archiving warnings
-- Sidecar logs show WAL errors
-
-**Debugging steps:**
-
-1. **Check plugin sidecar logs for WAL archiving errors**
-   ```sh
-   # Check recent WAL archive operations in sidecar
-   kubectl logs -n <namespace> <primary-pod> -c plugin-barman-cloud \
-     --tail=50 | grep -i wal
-   ```
-
-2. **Check ObjectStore configuration for WAL settings**
-   - Ensure ObjectStore has proper WAL retention settings
-   - Verify credentials have permissions for WAL operations
-
-### Restore Issues
-
-#### Restore fails during recovery
-
-**Symptoms:**
-
-- New cluster stuck in recovery
-- Plugin sidecar shows restore errors
-- PostgreSQL won’t start
-
-**Debugging steps:**
-
-1. **Check plugin sidecar logs during restore**
-
-   ```sh
-   # Check the sidecar logs on the recovering cluster pods
-   kubectl logs -n <namespace> <cluster-pod-name> \
-     -c plugin-barman-cloud --tail=100
-   
-   # Look for restore-related errors
-   kubectl logs -n <namespace> <cluster-pod-name> \
-     -c plugin-barman-cloud | grep -E "restore|recovery|ERROR"
-   ```
-
-2. **Verify plugin can access backups**
-
-   ```sh
-   # Check if `ObjectStore` is properly configured for restore
-   kubectl get objectstores.barmancloud.cnpg.io \
-     -n <namespace> <objectstore-name> -o yaml
-   
-   # Check PostgreSQL recovery logs
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c postgres | grep -i recovery
-   ```
-
-:::tip
-For detailed Barman restore operations and troubleshooting, refer to the
-[Barman documentation](https://docs.pgbarman.org/latest/barman-cloud-restore.html).
-:::
-
-#### Point-in-time recovery (PITR) configuration issues
-
-**Symptoms:**
-
-- PITR doesn’t reach target time
-- WAL access errors
-- Recovery halts early
-
-**Debugging steps:**
-
-1. **Verify PITR configuration in the `Cluster` spec**
-
-   ```yaml
-   apiVersion: postgresql.cnpg.io/v1
-   kind: Cluster
-   metadata:
-     name: <cluster-restore-name>
-   spec:
-     storage:
-       size: 1Gi
-
-     bootstrap:
-       recovery:
-         source: origin
-         recoveryTarget:
-           targetTime: "2024-01-15T10:30:00Z"
-
-     externalClusters:
-       - name: origin
-         plugin:
-           enabled: true
-           name: barman-cloud.cloudnative-pg.io
-           parameters:
-             barmanObjectName: <object-store-name>
-             serverName: <source-cluster-name>
-   ```
-
-2. **Check sidecar logs for WAL-related errors**
-
-   ```sh
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c plugin-barman-cloud | grep -i wal
-   ```
-
-:::note
-Timestamps without an explicit timezone suffix
-(e.g., `2024-01-15 10:30:00`) are interpreted as UTC.
-:::
-
-:::warning
-Always specify an explicit timezone in your timestamp to avoid ambiguity.
-For example, use `2024-01-15T10:30:00Z` or `2024-01-15T10:30:00+02:00`
-instead of `2024-01-15 10:30:00`.
-:::
-
-:::note
-For detailed PITR configuration and WAL management, see the
-[Barman PITR documentation](https://docs.pgbarman.org/latest/).
-:::
-
-### Plugin Configuration Issues
-
-#### Plugin cannot connect to object storage
-
-**Symptoms:**
-
-- Sidecar logs show connection errors
-- Backups fail with authentication or network errors
-- `ObjectStore` resource reports errors
-
-**Solution:**
-
-1. **Verify `ObjectStore` CRD configuration and secrets**
-
-   ```sh
-   # Check ObjectStore resource status
-   kubectl get objectstores.barmancloud.cnpg.io \
-     -n <namespace> <objectstore-name> -o yaml
-   
-   # Verify the secret exists and has correct keys for your provider
-   kubectl get secret -n <namespace> <secret-name> \
-     -o jsonpath='{.data}' | jq 'keys'
-   ```
-
-2. **Check sidecar logs for connectivity issues**
-   ```sh
-   kubectl logs -n <namespace> <cluster-pod> \
-     -c plugin-barman-cloud | grep -E "connect|timeout|SSL|cert"
-   ```
-
-3. **Adjust provider-specific settings (endpoint, path style, etc.)**
-   - See [Object Store Configuration](object_stores.md) for provider-specific settings
-   - Ensure `endpointURL` is set correctly for your storage provider
-   - Verify network policies allow egress to your storage provider
-
-## Diagnostic Commands
-
-### Using the `cnpg` plugin for `kubectl`
-
-The `cnpg` plugin for `kubectl` provides extended debugging capabilities.
-Keep it updated:
-
-```sh
-# Install or update the `cnpg` plugin
-kubectl krew install cnpg
-# Or using an alternative method: https://cloudnative-pg.io/documentation/current/kubectl-plugin/#install
-
-# Check plugin status (requires CNPG 1.27.0+)
-kubectl cnpg status <cluster-name> -n <namespace>
-
-# View cluster status in detail
-kubectl cnpg status <cluster-name> -n <namespace> --verbose
-```
-
-## Getting Help
-
-If problems persist:
-
-1. **Check the documentation**
-
-   - [Installation Guide](installation.mdx)
-   - [Object Store Configuration](object_stores.md) (for provider-specific settings)
-   - [Usage Examples](usage.md)
-
-
-2. **Gather diagnostic information**
-
-   ```sh
-   # Create a diagnostic bundle (⚠️ sanitize these before sharing!)
-   kubectl get objectstores.barmancloud.cnpg.io -A -o yaml > /tmp/objectstores.yaml
-   kubectl get clusters.postgresql.cnpg.io -A -o yaml > /tmp/clusters.yaml
-   kubectl logs -n cnpg-system deployment/barman-cloud --tail=1000 > /tmp/plugin.log
-   ```
-
-
-3. **Community support**
-
-   - CloudNativePG Slack: [#cloudnativepg-users](https://cloud-native.slack.com/messages/cloudnativepg-users)
-   - GitHub Issues: [plugin-barman-cloud](https://github.com/cloudnative-pg/plugin-barman-cloud/issues)
-
-
-4. **Include when reporting**
-
-   - CloudNativePG version
-   - Plugin version
-   - Kubernetes version
-   - Cloud provider and region
-   - Relevant configuration (⚠️ sanitize/redact sensitive information)
-   - Error messages and logs
-   - Steps to reproduce
-
-## Known Issues and Limitations
-
-### Current Known Issues
-
-1. **Migration compatibility**: After migrating from in-tree backup to the
-   plugin, the `kubectl cnpg backup` command syntax has changed
-   ([#353](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/353)):
-
-   ```sh
-   # Old command (in-tree, no longer works after migration)
-   kubectl cnpg backup -n <namespace> <cluster-name> \
-     --method=barmanObjectStore
-   
-   # New command (plugin-based)
-   kubectl cnpg backup -n <namespace> <cluster-name> \
-     --method=plugin --plugin-name=barman-cloud.cloudnative-pg.io
-   ```
-
-### Plugin Limitations
-
-1. **Installation method**: Currently only supports manifest and Kustomize
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   resources with PostgreSQL
-
-3. **Plugin restart behavior**: Restarting the sidecar container requires
-   restarting the entire PostgreSQL pod
-
-## Recap of General Debugging Steps
-
-### Check Backup Status and Identify the Target Instance
-
-```sh
-# List all backups and their status
-kubectl get backups.postgresql.cnpg.io -n <namespace>
-
-# Get detailed backup information including error messages and target instance
-kubectl describe backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name>
-
-# Extract the target pod name from a failed backup
-kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='{.status.instanceID.podName}'
-
-# Get more details including the target pod, method, phase, and error
-kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='Pod: {.status.instanceID.podName}{"\n"}Method: {.status.method}{"\n"}Phase: {.status.phase}{"\n"}Error: {.status.error}{"\n"}'
-
-# Check the cluster status for backup-related information
-kubectl cnpg status <cluster-name> -n <namespace> --verbose
-```
-
-### Check Sidecar Logs on the Backup Target Pod
-
-```sh
-# Identify which pod was the backup target (from the previous step)
-TARGET_POD=$(kubectl get backups.postgresql.cnpg.io \
-  -n <namespace> <backup-name> \
-  -o jsonpath='{.status.instanceID.podName}')
-echo "Backup target pod: $TARGET_POD"
-
-# Check the sidecar logs on the specific target pod
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud --tail=100
-
-# Follow the logs in real time
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud -f
-
-# Check for specific errors in the target pod around the backup time
-kubectl logs -n <namespace> $TARGET_POD \
-  -c plugin-barman-cloud --since=10m | grep -E "ERROR|FATAL|panic|failed"
-
-# Alternative: List all cluster pods and their roles
-kubectl get pods -n <namespace> -l cnpg.io/cluster=<cluster-name> \
-  -o custom-columns=NAME:.metadata.name,ROLE:.metadata.labels.cnpg\\.io/instanceRole,INSTANCE:.metadata.labels.cnpg\\.io/instanceName
-
-# Check sidecar logs on ALL cluster pods (if the target is unclear)
-for pod in $(kubectl get pods -n <namespace> -l cnpg.io/cluster=<cluster-name> -o name); do
-  echo "=== Checking $pod ==="
-  kubectl logs -n <namespace> $pod -c plugin-barman-cloud \
-    --tail=20 | grep -i error || echo "No errors found"
-done
-```
-
-### Check Events for Backup-Related Issues
-
-```sh
-# Check events for the cluster
-kubectl get events -n <namespace> \
-  --field-selector involvedObject.name=<cluster-name>
-
-# Check events for failed backups
-kubectl get events -n <namespace> \
-  --field-selector involvedObject.kind=Backup
-
-# Get all recent events in the namespace
-kubectl get events -n <namespace> --sort-by='.lastTimestamp' | tail -20
-```
-
-### Verify `ObjectStore` Configuration
-
-```sh
-# Check the ObjectStore resource
-kubectl get objectstores.barmancloud.cnpg.io \
-  -n <namespace> <objectstore-name> -o yaml
-
-# Verify the secret exists and has the correct keys
-kubectl get secret -n <namespace> <secret-name> -o yaml
-# Alternatively
-kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys'
-```
-
-### Common Error Messages and Solutions
-
-* **"AccessDenied" or "403 Forbidden"** — Check cloud credentials and bucket permissions.
-* **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
-* **"Connection timeout"** — Check network connectivity and firewall rules.
-* **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/versioned_docs/version-0.11.0/upgrades.mdx

@@ -1,16 +0,0 @@
----
-sidebar_position: 25
----
-
-# Upgrades
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-You can upgrade the plugin simply by installing the new version. Unless
-explicitly stated below or in the release notes, no special steps are required.
-
-## Upgrading to version 0.8.x from previous versions
-
-Version **0.8.0** introduces breaking changes to resource naming.
-To complete the upgrade successfully, follow the instructions in the
-["Resource name migration guide"](resource-name-migration.md).

web/versioned_docs/version-0.11.0/usage.md

@@ -1,283 +0,0 @@
----
-sidebar_position: 30
----
-
-# Using the Barman Cloud Plugin
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-After [installing the plugin](installation.mdx) in the same namespace as the
-CloudNativePG operator, enabling your PostgreSQL cluster to use the Barman
-Cloud Plugin involves just a few steps:
-
-- Defining the object store containing your WAL archive and base backups, using
-  your preferred [provider](object_stores.md)
-- Instructing the Postgres cluster to use the Barman Cloud Plugin
-
-From that moment, you’ll be able to issue on-demand backups or define a backup
-schedule, as well as rely on the object store for recovery operations.
-
-The rest of this page details each step, using MinIO as object store provider.
-
-## Defining the `ObjectStore`
-
-An `ObjectStore` resource must be created for each object store used in your
-PostgreSQL architecture. Here's an example configuration using MinIO:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: minio
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-The `.spec.configuration` schema follows the same format as the
-[in-tree barman-cloud support](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration).
-Refer to [the CloudNativePG documentation](https://cloudnative-pg.io/documentation/current/appendixes/backup_barmanobjectstore/)
-for additional details.
-
-:::important
-The `serverName` parameter in the `ObjectStore` resource is retained solely for
-API compatibility with the in-tree `barmanObjectStore` and must always be left empty.
-When needed, use the `serverName` plugin parameter in the Cluster configuration instead.
-:::
-
-## Configuring WAL Archiving
-
-Once the `ObjectStore` is defined, you can configure your PostgreSQL cluster
-to archive WALs by referencing the store in the `.spec.plugins` section:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-example
-spec:
-  instances: 3
-  imagePullPolicy: Always
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-store
-  storage:
-    size: 1Gi
-```
-
-This configuration enables both WAL archiving and data directory backups.
-
-## Performing a Base Backup
-
-Once WAL archiving is enabled, the cluster is ready for backups. Backups can be
-created either declaratively (with YAML manifests) or imperatively (with the
-`cnpg` plugin).
-
-### Declarative approach (YAML manifest)
-
-Create a backup resource by applying a YAML manifest:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Backup
-metadata:
-  name: backup-example
-spec:
-  cluster:
-    name: cluster-example
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-```
-
-### Imperative approach (using the `cnpg` plugin)
-
-The quickest way to trigger an on-demand backup is with the `cnpg` plugin:
-
-```bash
-kubectl cnpg backup -n <namespace> <cluster-name> \
-  --method=plugin \
-  --plugin-name=barman-cloud.cloudnative-pg.io
-```
-
-:::note Migration from in-tree backups
-If you are migrating from the in-tree backup system, note the change in syntax:
-
-```bash
-# Old command (in-tree backup)
-kubectl cnpg backup -n <namespace> <cluster-name> --method=barmanObjectStore
-
-# New command (plugin-based backup)
-kubectl cnpg backup -n <namespace> <cluster-name> \
-  --method=plugin \
-  --plugin-name=barman-cloud.cloudnative-pg.io
-```
-:::
-
-## Restoring a Cluster
-
-To restore a cluster from an object store, create a new `Cluster` resource that
-references the store containing the backup. Below is an example configuration:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-restore
-spec:
-  instances: 3
-  imagePullPolicy: IfNotPresent
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store
-        serverName: cluster-example
-  storage:
-    size: 1Gi
-```
-
-:::important
-The above configuration does **not** enable WAL archiving for the restored cluster.
-:::
-
-To enable WAL archiving for the restored cluster, include the `.spec.plugins`
-section alongside the `externalClusters.plugin` section, as shown below:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-restore
-spec:
-  instances: 3
-  imagePullPolicy: IfNotPresent
-  bootstrap:
-    recovery:
-      source: source
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      # Backup Object Store (push, read-write)
-      barmanObjectName: minio-store-bis
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        # Recovery Object Store (pull, read-only)
-        barmanObjectName: minio-store
-        serverName: cluster-example
-  storage:
-    size: 1Gi
-```
-
-The same object store may be used for both transaction log archiving and
-restoring a cluster, or you can configure separate stores for these purposes.
-
-## Configuring Replica Clusters
-
-You can set up a distributed topology by combining the previously defined
-configurations with the `.spec.replica` section. Below is an example of how to
-define a replica cluster:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-dc-a
-spec:
-  instances: 3
-  primaryUpdateStrategy: unsupervised
-
-  storage:
-    storageClass: csi-hostpath-sc
-    size: 1Gi
-
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-store-a
-
-  replica:
-    self: cluster-dc-a
-    primary: cluster-dc-a
-    source: cluster-dc-b
-
-  externalClusters:
-  - name: cluster-dc-a
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store-a
-
-  - name: cluster-dc-b
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store-b
-```
-
-## Configuring the plugin instance sidecar
-
-The Barman Cloud Plugin runs as a sidecar container next to each PostgreSQL
-instance pod. It manages backup, WAL archiving, and restore processes.
-
-Configuration comes from multiple `ObjectStore` resources:
-
-1. The one referenced in the
-   `.spec.plugins` section of the `Cluster`. This is the
-   object store used for WAL archiving and base backups.
-2. The one referenced in the external cluster
-   used in the `.spec.replica.source` section of the `Cluster`. This is
-   used by the log-shipping designated primary to get the WAL files.
-3. The one referenced in the
-   `.spec.bootstrap.recovery.source` section of the `Cluster`. Used by
-   the initial recovery job to create the cluster from an existing backup.
-
-You can fine-tune sidecar behavior in the `.spec.instanceSidecarConfiguration`
-of your ObjectStore. These settings apply to all PostgreSQL instances that use
-this object store. Any updates take effect at the next `Cluster` reconciliation,
-and could generate a rollout of the `Cluster`.
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-  # [...]
-  instanceSidecarConfiguration:
-    retentionPolicyIntervalSeconds: 1800
-    resources:
-      requests:
-        memory: "XXX"
-        cpu: "YYY"
-      limits:
-        memory: "XXX"
-        cpu: "YYY"
-```
-
-:::note
-If more than one `ObjectStore` applies, the `instanceSidecarConfiguration` of
-the one set in `.spec.plugins` has priority.
-:::

web/versioned_docs/version-0.12.0/compression.md

@@ -1,43 +0,0 @@
----
-sidebar_position: 80
----
-
-# Compression
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-By default, backups and WAL files are archived **uncompressed**. However, the
-Barman Cloud Plugin supports multiple compression algorithms via
-`barman-cloud-backup` and `barman-cloud-wal-archive`, allowing you to optimize
-for space, speed, or a balance of both.
-
-### Supported Compression Algorithms
-
-- `bzip2`
-- `gzip`
-- `lz4` (WAL only)
-- `snappy`
-- `xz` (WAL only)
-- `zstd` (WAL only)
-
-Compression settings for base backups and WAL archives are configured
-independently. For implementation details, refer to the corresponding API
-definitions:
-
-- [`DataBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#DataBackupConfiguration)
-- [`WALBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#WalBackupConfiguration)
-
-:::important
-Compression impacts both performance and storage efficiency. Choose the right
-algorithm based on your recovery time objectives (RTO), storage capacity, and
-network throughput.
-:::
-
-## Compression Benchmark (on MinIO)
-
-| Compression | Backup Time (ms) | Restore Time (ms) | Uncompressed Size (MB) | Compressed Size (MB) | Ratio |
-| ----------- | ---------------- | ----------------- | ---------------------- | -------------------- | ----- |
-| None        | 10,927           | 7,553             | 395                    | 395                  | 1.0:1 |
-| bzip2       | 25,404           | 13,886            | 395                    | 67                   | 5.9:1 |
-| gzip        | 116,281          | 3,077             | 395                    | 91                   | 4.3:1 |
-| snappy      | 8,134            | 8,341             | 395                    | 166                  | 2.4:1 |

web/versioned_docs/version-0.12.0/concepts.md

@@ -1,177 +0,0 @@
----
-sidebar_position: 10
----
-
-# Main Concepts
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-:::important
-Before proceeding, make sure to review the following sections of the
-CloudNativePG documentation:
-
-- [**Backup**](https://cloudnative-pg.io/documentation/current/backup/)
-- [**WAL Archiving**](https://cloudnative-pg.io/documentation/current/wal_archiving/)
-- [**Recovery**](https://cloudnative-pg.io/documentation/current/recovery/)
-:::
-
-The **Barman Cloud Plugin** enables **hot (online) backups** of PostgreSQL
-clusters in CloudNativePG through [`barman-cloud`](https://pgbarman.org),
-supporting continuous physical backups and WAL archiving to an **object
-store**—without interrupting write operations.
-
-It also supports both **full recovery** and **Point-in-Time Recovery (PITR)**
-of a PostgreSQL cluster.
-
-## The Object Store
-
-At the core is the [`ObjectStore` custom resource (CRD)](plugin-barman-cloud.v1.md#objectstorespec),
-which acts as the interface between the PostgreSQL cluster and the target
-object storage system. It allows you to configure:
-
-- **Authentication and bucket location** via the `.spec.configuration` section
-- **WAL archiving** settings—such as compression type, parallelism, and
-  server-side encryption—under `.spec.configuration.wal`
-- **Base backup options**—with similar settings for compression, concurrency,
-  and encryption—under `.spec.configuration.data`
-- **Retention policies** to manage the life-cycle of archived WALs and backups
-  via `.spec.configuration.retentionPolicy`
-
-WAL files are archived in the `wals` directory, while base backups are stored
-as **tarballs** in the `base` directory, following the
-[Barman Cloud convention](https://docs.pgbarman.org/cloud/latest/usage/#object-store-layout).
-
-The plugin also offers advanced capabilities, including
-[backup tagging](misc.md#backup-object-tagging) and
-[extra options for backups and WAL archiving](misc.md#extra-options-for-backup-and-wal-archiving).
-
-:::tip
-For details, refer to the
-[API reference for the `ObjectStore` resource](plugin-barman-cloud.v1.md#objectstorespec).
-:::
-
-## Integration with a CloudNativePG Cluster
-
-CloudNativePG can delegate continuous backup and recovery responsibilities to
-the **Barman Cloud Plugin** by configuring the `.spec.plugins` section of a
-`Cluster` resource. This setup requires a corresponding `ObjectStore` resource
-to be defined.
-
-:::important
-While it is technically possible to reuse the same `ObjectStore` for multiple
-`Cluster` resources within the same namespace, it is strongly recommended to
-dedicate one object store per PostgreSQL cluster to ensure data isolation and
-operational clarity.
-:::
-
-The following example demonstrates how to configure a CloudNativePG cluster
-named `cluster-example` to use a previously defined `ObjectStore` (also named
-`cluster-example`) in the same namespace. Setting `isWALArchiver: true` enables
-WAL archiving through the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-example
-spec:
-  # Other cluster settings...
-  plugins:
-    - name: barman-cloud.cloudnative-pg.io
-      isWALArchiver: true
-      parameters:
-        barmanObjectName: cluster-example
-```
-
-## Backup of a Postgres Cluster
-
-Once the object store is defined and the `Cluster` is configured to use the
-Barman Cloud Plugin, **WAL archiving is activated immediately** on the
-PostgreSQL primary.
-
-Physical base backups are seamlessly managed by CloudNativePG using the
-`Backup` and `ScheduledBackup` resources, respectively for
-[on-demand](https://cloudnative-pg.io/documentation/current/backup/#on-demand-backups)
-and
-[scheduled](https://cloudnative-pg.io/documentation/current/backup/#scheduled-backups)
-backups.
-
-To use the Barman Cloud Plugin, you must set the `method` to `plugin` and
-configure the `pluginConfiguration` section as shown:
-
-```yaml
-[...]
-spec:
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-  [...]
-```
-
-With this configuration, CloudNativePG supports:
-
-- Backups from both **primary** and **standby** instances
-- Backups from **designated primaries** in a distributed topology using
-  [replica clusters](https://cloudnative-pg.io/documentation/current/replica_cluster/)
-
-:::tip
-For details on how to back up from a standby, refer to the official documentation:
-[Backup from a standby](https://cloudnative-pg.io/documentation/current/backup/#backup-from-a-standby).
-:::
-
-:::important
-Both backup and WAL archiving operations are executed by sidecar containers
-running in the same pod as the PostgreSQL `Cluster` primary instance—except
-when backups are taken from a standby, in which case the sidecar runs alongside
-the standby pod.
-The sidecar containers use a [dedicated container image](images.md) that
-includes only the supported version of Barman Cloud.
-:::
-
-## Recovery of a Postgres Cluster
-
-In PostgreSQL, *recovery* refers to the process of starting a database instance
-from an existing backup.  The Barman Cloud Plugin integrates with CloudNativePG
-to support both **full recovery** and **Point-in-Time Recovery (PITR)** from an
-object store.
-
-Recovery in this context is *not in-place*: it bootstraps a brand-new
-PostgreSQL cluster from a backup and replays the necessary WAL files to reach
-the desired recovery target.
-
-To perform a recovery, define an *external cluster* that references the
-appropriate `ObjectStore`, and use it as the source in the `bootstrap` section
-of the target cluster:
-
-```yaml
-[...]
-spec:
-  [...]
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: cluster-example
-        serverName: cluster-example
-  [...]
-```
-
-The critical element here is the `externalClusters` section of the `Cluster`
-resource, where the `plugin` stanza instructs CloudNativePG to use the Barman
-Cloud Plugin to access the object store for recovery.
-
-This same mechanism can be used for a variety of scenarios enabled by the
-CloudNativePG API, including:
-
-* **Full cluster recovery** from the latest backup
-* **Point-in-Time Recovery (PITR)**
-* Bootstrapping **replica clusters** in a distributed topology
-
-:::tip
-For complete instructions and advanced use cases, refer to the official
-[Recovery documentation](https://cloudnative-pg.io/documentation/current/recovery/).
-:::

web/versioned_docs/version-0.12.0/images.md

@@ -1,37 +0,0 @@
----
-sidebar_position: 99
----
-
-# Container Images
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin is distributed using two container images:
-
-- One for deploying the plugin components
-- One for the sidecar that runs alongside each PostgreSQL instance in a
-  CloudNativePG `Cluster` using the plugin
-
-## Plugin Container Image
-
-The plugin image contains the logic required to operate the Barman Cloud Plugin
-within your Kubernetes environment with CloudNativePG. It is published on the
-GitHub Container Registry at `ghcr.io/cloudnative-pg/plugin-barman-cloud`.
-
-This image is built from the
-[`Dockerfile.plugin`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.plugin)
-in the plugin repository.
-
-## Sidecar Container Image
-
-The sidecar image is used within each PostgreSQL pod in the cluster. It
-includes the latest supported version of Barman Cloud and is responsible for
-performing WAL archiving and backups on behalf of CloudNativePG.
-
-It is available at `ghcr.io/cloudnative-pg/plugin-barman-cloud-sidecar` and is
-built from the
-[`Dockerfile.sidecar`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.sidecar).
-
-These sidecar images are designed to work seamlessly with the
-[`minimal` PostgreSQL container images](https://github.com/cloudnative-pg/postgres-containers?tab=readme-ov-file#minimal-images)
-maintained by the CloudNativePG Community.

web/versioned_docs/version-0.12.0/installation.mdx

@@ -1,109 +0,0 @@
----
-sidebar_position: 20
----
-
-# Installation
-
-:::important
-1. The plugin **must** be installed in the same namespace as the CloudNativePG
-   operator (typically `cnpg-system`).
-
-2. Keep in mind that the operator's **listening namespaces** may differ from its
-   installation namespace. Double-check this to avoid configuration issues.
-:::
-
-## Verifying the Requirements
-
-Before installing the plugin, make sure the [requirements](intro.md#requirements) are met.
-
-### CloudNativePG Version
-
-Ensure you're running a version of CloudNativePG that is compatible with the
-plugin. If installed in the default `cnpg-system` namespace, you can verify the
-version with:
-
-```sh
-kubectl get deployment -n cnpg-system cnpg-controller-manager \
-  -o jsonpath="{.spec.template.spec.containers[*].image}"
-```
-
-Example output:
-
-```output
-ghcr.io/cloudnative-pg/cloudnative-pg:1.26.0
-```
-
-The version **must be 1.26 or newer**.
-
-### cert-manager
-
-Use the [cmctl](https://cert-manager.io/docs/reference/cmctl/#installation)
-tool to confirm that `cert-manager` is installed and available:
-
-```sh
-cmctl check api
-```
-
-Example output:
-
-```output
-The cert-manager API is ready
-```
-
-Both checks are required before proceeding with the installation.
-
-## Installing the Barman Cloud Plugin
-
-import { InstallationSnippet } from '@site/src/components/Installation';
-
-Install the plugin using `kubectl` by applying the manifest for the latest
-release:
-
-<InstallationSnippet />
-
-Example output:
-
-```output
-customresourcedefinition.apiextensions.k8s.io/objectstores.barmancloud.cnpg.io created
-serviceaccount/plugin-barman-cloud created
-role.rbac.authorization.k8s.io/leader-election-role created
-clusterrole.rbac.authorization.k8s.io/metrics-auth-role created
-clusterrole.rbac.authorization.k8s.io/metrics-reader created
-clusterrole.rbac.authorization.k8s.io/objectstore-editor-role created
-clusterrole.rbac.authorization.k8s.io/objectstore-viewer-role created
-clusterrole.rbac.authorization.k8s.io/plugin-barman-cloud created
-rolebinding.rbac.authorization.k8s.io/leader-election-rolebinding created
-clusterrolebinding.rbac.authorization.k8s.io/metrics-auth-rolebinding created
-clusterrolebinding.rbac.authorization.k8s.io/plugin-barman-cloud-binding created
-secret/plugin-barman-cloud-8tfddg42gf created
-service/barman-cloud created
-deployment.apps/barman-cloud configured
-certificate.cert-manager.io/barman-cloud-client created
-certificate.cert-manager.io/barman-cloud-server created
-issuer.cert-manager.io/selfsigned-issuer created
-```
-
-Finally, check that the deployment is up and running:
-
-```sh
-kubectl rollout status deployment \
-  -n cnpg-system barman-cloud
-```
-
-Example output:
-
-```output
-deployment "barman-cloud" successfully rolled out
-```
-
-This confirms that the plugin is deployed and ready to use.
-
-## Testing the latest development snapshot
-
-You can also test the latest development snapshot of the plugin with the
-following command:
-
-```sh
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/versioned_docs/version-0.12.0/intro.md

@@ -1,86 +0,0 @@
----
-sidebar_position: 1
-sidebar_label: "Introduction"
----
-
-# Barman Cloud Plugin
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The **Barman Cloud Plugin** for [CloudNativePG](https://cloudnative-pg.io/)
-enables online continuous physical backups of PostgreSQL clusters to object storage
-using the `barman-cloud` suite from the [Barman](https://docs.pgbarman.org/release/latest/)
-project.
-
-:::important
-If you plan to migrate your existing CloudNativePG cluster to the new
-plugin-based approach using the Barman Cloud Plugin, see
-["Migrating from Built-in CloudNativePG Backup"](migration.md)
-for detailed instructions.
-:::
-
-## Requirements
-
-Before using the Barman Cloud Plugin, ensure that the following components are
-installed and properly configured:
-
-- [CloudNativePG](https://cloudnative-pg.io) version 1.26 or later
-
-  - We strongly recommend version 1.27.0 or later, which includes improved
-    error handling and status reporting for the plugin.
-  - If you are running an earlier release, refer to the
-    [upgrade guide](https://cloudnative-pg.io/documentation/current/installation_upgrade).
-
-- [cert-manager](https://cert-manager.io/)
-
-  - The recommended way to enable secure TLS communication between the plugin
-    and the operator.
-  - Alternatively, you can provide your own certificate bundles. See the
-    [CloudNativePG documentation on TLS configuration](https://cloudnative-pg.io/documentation/current/cnpg_i/#configuring-tls-certificates).
-
-- [`kubectl-cnpg`](https://cloudnative-pg.io/documentation/current/kubectl-plugin/)
-  plugin (optional but recommended)
-
-  - Simplifies debugging and monitoring with additional status and inspection
-    commands.
-  - Multiple installation options are available in the
-    [installation guide](https://cloudnative-pg.io/documentation/current/kubectl-plugin/#install).
-
-## Key Features
-
-This plugin provides the following capabilities:
-
-- Physical online backup of the data directory
-- Physical restore of the data directory
-- Write-Ahead Log (WAL) archiving
-- WAL restore
-- Full cluster recovery
-- Point-in-Time Recovery (PITR)
-- Seamless integration with replica clusters for bootstrap and WAL restore from archive
-
-:::important
-The Barman Cloud Plugin is designed to **replace the in-tree object storage support**
-previously provided via the `.spec.backup.barmanObjectStore` section in the
-`Cluster` resource.
-Backups created using the in-tree approach are fully supported and compatible
-with this plugin.
-:::
-
-## Supported Object Storage Providers
-
-The plugin works with all storage backends supported by `barman-cloud`, including:
-
-- **Amazon S3**
-- **Google Cloud Storage**
-- **Microsoft Azure Blob Storage**
-
-In addition, the following S3-compatible and simulator solutions have been
-tested and verified:
-
-- [MinIO](https://min.io/) – An S3-compatible storage solution
-- [Azurite](https://github.com/Azure/Azurite) – A simulator for Azure Blob Storage
-- [fake-gcs-server](https://github.com/fsouza/fake-gcs-server) – A simulator for Google Cloud Storage
-
-:::tip
-For more details, refer to [Object Store Providers](object_stores.md).
-:::

web/versioned_docs/version-0.12.0/migration.md

@@ -1,274 +0,0 @@
----
-sidebar_position: 40
----
-
-# Migrating from Built-in CloudNativePG Backup
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The in-tree support for Barman Cloud in CloudNativePG is **deprecated starting
-from version 1.26** and will be removed in a future release.
-
-If you're currently relying on the built-in Barman Cloud integration, you can
-migrate seamlessly to the new **plugin-based architecture** using the Barman
-Cloud Plugin, without data loss. Follow these steps:
-
-- [Install the Barman Cloud Plugin](installation.mdx)
-- Create an `ObjectStore` resource by translating the contents of the
-  `.spec.backup.barmanObjectStore` section from your existing `Cluster`
-  definition
-- Modify the `Cluster` resource in a single atomic change to switch from
-  in-tree backup to the plugin
-- Update any `ScheduledBackup` resources to use the plugin
-- Update the `externalClusters` configuration, where applicable
-
-:::tip
-For a working example, refer to [this commit](https://github.com/cloudnative-pg/cnpg-playground/commit/596f30e252896edf8f734991c3538df87630f6f7)
-from the [CloudNativePG Playground project](https://github.com/cloudnative-pg/cnpg-playground),
-which demonstrates a full migration.
-:::
-
----
-
-## Step 1: Define the `ObjectStore`
-
-Begin by creating an `ObjectStore` resource in the same namespace as your
-PostgreSQL `Cluster`.
-
-There is a **direct mapping** between the `.spec.backup.barmanObjectStore`
-section in CloudNativePG and the `.spec.configuration` field in the
-`ObjectStore` CR. The conversion is mostly mechanical, with one key difference:
-
-:::warning
-In the plugin architecture, retention policies are defined as part of the `ObjectStore`.
-In contrast, the in-tree implementation defined them at the `Cluster` level.
-:::
-
-If your `Cluster` used `.spec.backup.retentionPolicy`, move that configuration
-to `.spec.retentionPolicy` in the `ObjectStore`.
-
----
-
-### Example
-
-Here’s an excerpt from a traditional in-tree CloudNativePG backup configuration
-taken from the CloudNativePG Playground project:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-eu
-spec:
-  # [...]
-  backup:
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio-eu:9000
-      s3Credentials:
-        accessKeyId:
-          name: minio-eu
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: minio-eu
-          key: ACCESS_SECRET_KEY
-      wal:
-        compression: gzip
-```
-
-This configuration translates to the following `ObjectStore` resource for the
-plugin:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-eu
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio-eu:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio-eu
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: minio-eu
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-As you can see, the contents of `barmanObjectStore` have been copied directly
-under the `configuration` field of the `ObjectStore` resource, using the same
-secret references.
-
-## Step 2: Update the `Cluster` for plugin WAL archiving
-
-Once the `ObjectStore` resource is in place, update the `Cluster` resource as
-follows in a single atomic change:
-
-- Remove the `.spec.backup.barmanObjectStore` section
-- Remove `.spec.backup.retentionPolicy` if it was defined (as it is now in the
-  `ObjectStore`)
-- Remove the entire `spec.backup` section if it is now empty
-- Add `barman-cloud.cloudnative-pg.io` to the `plugins` list, as described in
-  [Configuring WAL archiving](usage.md#configuring-wal-archiving)
-
-This will trigger a rolling update of the `Cluster`, switching continuous
-backup from the in-tree implementation to the plugin-based approach.
-
-### Example
-
-The updated `pg-eu` cluster will have this configuration instead of the
-previous `backup` section:
-
-```yaml
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-eu
-```
-
----
-
-## Step 3: Update the `ScheduledBackup`
-
-After switching the `Cluster` to use the plugin, update your `ScheduledBackup`
-resources to match.
-
-Set the backup `method` to `plugin` and reference the plugin name via
-`pluginConfiguration`, as shown in ["Performing a base backup"](usage.md#performing-a-base-backup).
-
-### Example
-
-Original in-tree `ScheduledBackup`:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
-  name: pg-eu-backup
-spec:
-  cluster:
-    name: pg-eu
-  schedule: '0 0 0 * * *'
-  backupOwnerReference: self
-```
-
-Updated version using the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
-  name: pg-eu-backup
-spec:
-  cluster:
-    name: pg-eu
-  schedule: '0 0 0 * * *'
-  backupOwnerReference: self
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-```
-
----
-
-## Step 4: Update the `externalClusters` configuration
-
-If your `Cluster` relies on one or more external clusters that use the in-tree
-Barman Cloud integration, you need to update those configurations to use the
-plugin-based architecture.
-
-When a replica cluster fetches WAL files or base backups from an external
-source that used the built-in backup method, follow these steps:
-
-1. Create a corresponding `ObjectStore` resource for the external cluster, as
-   shown in [Step 1](#step-1-define-the-objectstore)
-2. Update the `externalClusters` section of your replica cluster to use the
-   plugin instead of the in-tree `barmanObjectStore` field
-
-### Example
-
-Consider the original configuration using in-tree Barman Cloud:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-us
-spec:
-  # [...]
-  externalClusters:
-  - name: pg-eu
-    barmanObjectStore:
-      destinationPath: s3://backups/
-      endpointURL: http://minio-eu:9000
-      serverName: pg-eu
-      s3Credentials:
-        accessKeyId:
-          name: minio-eu
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: minio-eu
-          key: ACCESS_SECRET_KEY
-      wal:
-        compression: gzip
-```
-
-Create the `ObjectStore` resource for the external cluster:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-eu
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio-eu:9000
-    s3Credentials:
-    accessKeyId:
-        name: minio-eu
-        key: ACCESS_KEY_ID
-    secretAccessKey:
-        name: minio-eu
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-Update the external cluster configuration to use the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: pg-us
-spec:
-  # [...]
-  externalClusters:
-  - name: pg-eu
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-eu
-        serverName: pg-eu
-```
-
-## Step 5: Verify your metrics
-
-When migrating from the in-core solution to the plugin-based approach, you need
-to monitor a different set of metrics, as described in the
-["Observability"](observability.md) section.
-
-The table below summarizes the name changes between the old in-core metrics and
-the new plugin-based ones:
-
-| Old metric name                                  | New metric name                                                  |
-| ------------------------------------------------ | ---------------------------------------------------------------- |
-| `cnpg_collector_last_failed_backup_timestamp`    | `barman_cloud_cloudnative_pg_io_last_failed_backup_timestamp`    |
-| `cnpg_collector_last_available_backup_timestamp` | `barman_cloud_cloudnative_pg_io_last_available_backup_timestamp` |
-| `cnpg_collector_first_recoverability_point`      | `barman_cloud_cloudnative_pg_io_first_recoverability_point`      |

web/versioned_docs/version-0.12.0/misc.md

@@ -1,97 +0,0 @@
----
-sidebar_position: 90
----
-
-# Miscellaneous
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-## Backup Object Tagging
-
-You can attach key-value metadata tags to backup artifacts—such as base
-backups, WAL files, and history files—via the `.spec.configuration` section of
-the `ObjectStore` resource.
-
-- `tags`: applied to base backups and WAL files
-- `historyTags`: applied to history files only
-
-### Example
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    [...]
-    tags:
-      backupRetentionPolicy: "expire"
-    historyTags:
-      backupRetentionPolicy: "keep"
-  [...]
-```
-
-## Extra Options for Backup and WAL Archiving
-
-You can pass additional command-line arguments to `barman-cloud-backup` and
-`barman-cloud-wal-archive` using the `additionalCommandArgs` field in the
-`ObjectStore` configuration.
-
-- `.spec.configuration.data.additionalCommandArgs`: for `barman-cloud-backup`
-- `.spec.configuration.wal.archiveAdditionalCommandArgs`: for `barman-cloud-wal-archive`
-
-Each field accepts a list of string arguments. If an argument is already
-configured elsewhere in the plugin, the duplicate will be ignored.
-
-### Example: Extra Backup Options
-
-```yaml
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    data:
-      additionalCommandArgs:
-        - "--min-chunk-size=5MB"
-        - "--read-timeout=60"
-```
-
-### Example: Extra WAL Archive Options
-
-```yaml
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  configuration:
-    wal:
-      archiveAdditionalCommandArgs:
-        - "--max-concurrency=1"
-        - "--read-timeout=60"
-```
-
-For a complete list of supported options, refer to the
-[official Barman Cloud documentation](https://docs.pgbarman.org/release/latest/).
-
-## Enable the pprof debug server for the sidecar
-
-You can enable the instance sidecar's pprof debug HTTP server by adding the `--pprof-server=<address>` flag to the container's
-arguments via `.spec.instanceSidecarConfiguration.additionalContainerArgs`.
-
-Pass a bind address in the form `<host>:<port>` (for example, `0.0.0.0:6061`).
-An empty value disables the server (disabled by default).
-
-### Example
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  instanceSidecarConfiguration:
-    additionalContainerArgs:
-      - "--pprof-server=0.0.0.0:6061"
-```

web/versioned_docs/version-0.12.0/observability.md

@@ -1,24 +0,0 @@
----
-sidebar_position: 55
----
-
-# Observability
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin exposes the following metrics through the native
-Prometheus exporter of the instance manager:
-
-- `barman_cloud_cloudnative_pg_io_last_failed_backup_timestamp`:
-  the UNIX timestamp of the most recent failed backup.
-
-- `barman_cloud_cloudnative_pg_io_last_available_backup_timestamp`:
-  the UNIX timestamp of the most recent successfully available backup.
-
-- `barman_cloud_cloudnative_pg_io_first_recoverability_point`:
-  the UNIX timestamp representing the earliest point in time from which the
-  cluster can be recovered.
-
-These metrics supersede the previously available in-core metrics that used the
-`cnpg_collector` prefix. The new metrics are exposed under the
-`barman_cloud_cloudnative_pg_io` prefix instead.

web/versioned_docs/version-0.12.0/parameters.md

@@ -1,19 +0,0 @@
----
-sidebar_position: 100
----
-
-# Parameters
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The following parameters are available for the Barman Cloud Plugin:
-
-- `barmanObjectName`: references the `ObjectStore` resource to be used by the
-  plugin.
-- `serverName`: Specifies the server name in the object store.
-
-:::important
-The `serverName` parameter in the `ObjectStore` resource is retained solely for
-API compatibility with the in-tree `barmanObjectStore` and must always be left empty.
-When needed, use the `serverName` plugin parameter in the Cluster configuration instead.
-:::

web/versioned_docs/version-0.12.0/plugin-barman-cloud.v1.md

@@ -1,108 +0,0 @@
-# API Reference
-
-## Packages
-- [barmancloud.cnpg.io/v1](#barmancloudcnpgiov1)
-
-
-## barmancloud.cnpg.io/v1
-
-Package v1 contains API Schema definitions for the barmancloud v1 API group
-
-### Resource Types
-- [ObjectStore](#objectstore)
-
-
-
-#### InstanceSidecarConfiguration
-
-
-
-InstanceSidecarConfiguration defines the configuration for the sidecar that runs in the instance pods.
-
-
-
-_Appears in:_
-- [ObjectStoreSpec](#objectstorespec)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `env` _[EnvVar](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#envvar-v1-core) array_ | The environment to be explicitly passed to the sidecar |  |  |  |
-| `retentionPolicyIntervalSeconds` _integer_ | The retentionCheckInterval defines the frequency at which the<br />system checks and enforces retention policies. |  | 1800 |  |
-| `resources` _[ResourceRequirements](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#resourcerequirements-v1-core)_ | Resources define cpu/memory requests and limits for the sidecar that runs in the instance pods. |  |  |  |
-| `additionalContainerArgs` _string array_ | AdditionalContainerArgs is an optional list of command-line arguments<br />to be passed to the sidecar container when it starts.<br />The provided arguments are appended to the container’s default arguments. |  |  |  |
-| `logLevel` _string_ | The log level for PostgreSQL instances. Valid values are: `error`, `warning`, `info` (default), `debug`, `trace` |  | info | Enum: [error warning info debug trace] <br /> |
-
-
-#### ObjectStore
-
-
-
-ObjectStore is the Schema for the objectstores API.
-
-
-
-
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `apiVersion` _string_ | `barmancloud.cnpg.io/v1` | True | | |
-| `kind` _string_ | `ObjectStore` | True | | |
-| `metadata` _[ObjectMeta](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#objectmeta-v1-meta)_ | Refer to Kubernetes API documentation for fields of `metadata`. | True |  |  |
-| `spec` _[ObjectStoreSpec](#objectstorespec)_ | Specification of the desired behavior of the ObjectStore.<br />More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status | True |  |  |
-| `status` _[ObjectStoreStatus](#objectstorestatus)_ | Most recently observed status of the ObjectStore. This data may not be up to<br />date. Populated by the system. Read-only.<br />More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status |  |  |  |
-
-
-#### ObjectStoreSpec
-
-
-
-ObjectStoreSpec defines the desired state of ObjectStore.
-
-
-
-_Appears in:_
-- [ObjectStore](#objectstore)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `configuration` _[BarmanObjectStoreConfiguration](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration)_ | The configuration for the barman-cloud tool suite | True |  |  |
-| `retentionPolicy` _string_ | RetentionPolicy is the retention policy to be used for backups<br />and WALs (i.e. '60d'). The retention policy is expressed in the form<br />of `XXu` where `XX` is a positive integer and `u` is in `[dwm]` -<br />days, weeks, months. |  |  | Pattern: `^[1-9][0-9]*[dwm]$` <br /> |
-| `instanceSidecarConfiguration` _[InstanceSidecarConfiguration](#instancesidecarconfiguration)_ | The configuration for the sidecar that runs in the instance pods |  |  |  |
-
-
-#### ObjectStoreStatus
-
-
-
-ObjectStoreStatus defines the observed state of ObjectStore.
-
-
-
-_Appears in:_
-- [ObjectStore](#objectstore)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `serverRecoveryWindow` _object (keys:string, values:[RecoveryWindow](#recoverywindow))_ | ServerRecoveryWindow maps each server to its recovery window | True |  |  |
-
-
-#### RecoveryWindow
-
-
-
-RecoveryWindow represents the time span between the first
-recoverability point and the last successful backup of a PostgreSQL
-server, defining the period during which data can be restored.
-
-
-
-_Appears in:_
-- [ObjectStoreStatus](#objectstorestatus)
-
-| Field | Description | Required | Default | Validation |
-| --- | --- | --- | --- | --- |
-| `firstRecoverabilityPoint` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The first recoverability point in a PostgreSQL server refers to<br />the earliest point in time to which the database can be<br />restored. | True |  |  |
-| `lastSuccessfulBackupTime` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The last successful backup time | True |  |  |
-| `lastFailedBackupTime` _[Time](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.32/#time-v1-meta)_ | The last failed backup time | True |  |  |
-
-

web/versioned_docs/version-0.12.0/resource-name-migration.md

@@ -1,219 +0,0 @@
----
-sidebar_position: 90
----
-
-# Resource name migration guide
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-:::warning
-Before proceeding with the migration process, please:
-1. **Read this guide in its entirety** to understand what changes will be made
-2. **Test in a non-production environment** first if possible
-3. **Ensure you have proper backups** of your cluster configuration
-
-This migration will delete old RBAC resources only after the
-`plugin-barman-cloud` upgrade. While the operation is designed to be safe, you
-should review and understand the changes before proceeding. The maintainers of
-this project are not responsible for any issues that may arise during
-migration.
-
-**Note:** This guide assumes you are using the default `cnpg-system` namespace.
-:::
-
-## Overview
-
-Starting from version **0.8.0**, the `plugin-barman-cloud` deployment manifests
-use more specific, prefixed resource names to avoid conflicts with other
-components deployed in the same Kubernetes cluster.
-
-## What Changed
-
-The following resources have been renamed to use proper prefixes.
-
-### Cluster-scoped Resources
-
-| Old Name                   | New Name                                 |
-|----------------------------|------------------------------------------|
-| `metrics-auth-role`        | `barman-plugin-metrics-auth-role`        |
-| `metrics-auth-rolebinding` | `barman-plugin-metrics-auth-rolebinding` |
-| `metrics-reader`           | `barman-plugin-metrics-reader`           |
-| `objectstore-viewer-role`  | `barman-plugin-objectstore-viewer-role`  |
-| `objectstore-editor-role`  | `barman-plugin-objectstore-editor-role`  |
-
-### Namespace-scoped Resources
-
-| Old Name                      | New Name                                    | Namespace     |
-|-------------------------------|---------------------------------------------|---------------|
-| `leader-election-role`        | `barman-plugin-leader-election-role`        | `cnpg-system` |
-| `leader-election-rolebinding` | `barman-plugin-leader-election-rolebinding` | `cnpg-system` |
-
-## Why This Change?
-
-Using generic names for cluster-wide resources is discouraged as they may
-conflict with other components deployed in the same cluster. The new names make
-it clear that these resources belong to the Barman Cloud plugin and help avoid
-naming collisions.
-
-## Migration Instructions
-
-This three steps migration process is straightforward and can be completed with
-a few `kubectl` commands.
-
-### Step 1: Upgrade plugin-barman-cloud
-
-Please refer to the [Installation](installation.mdx) section to deploy the new
-`plugin-barman-cloud` release.
-
-### Step 2: Delete Old Cluster-scoped Resources
-
-:::danger Verify Resources Before Deletion
-**IMPORTANT**: The old resource names are generic and could potentially belong
-to other components in your cluster.
-
-**Before deleting each resource, verify it belongs to the Barman Cloud plugin
-by checking:**
-- For `objectstore-*` roles: Look for `barmancloud.cnpg.io` in the API groups
-- For `metrics-*` roles: Check if they reference the `plugin-barman-cloud`
-  ServiceAccount in `cnpg-system` namespace
-- For other roles: Look for labels like `app.kubernetes.io/name: plugin-barman-cloud`
-
-If a resource doesn't have these indicators, **DO NOT DELETE IT** as it may
-belong to another application.
-
-Carefully review the output of each verification command before proceeding with
-the `delete`.
-:::
-
-:::tip Dry Run First
-You can add `--dry-run=client` to any `kubectl delete` command to preview what
-would be deleted without actually removing anything.
-:::
-
-**Only proceed if you've verified these resources belong to the Barman Cloud
-plugin (see warning above).**
-
-For each resource below, first verify it belongs to Barman Cloud, then delete
-it:
-
-```bash
-# 1. Check metrics-auth-rolebinding FIRST (we'll check the role after)
-# Look for references to plugin-barman-cloud ServiceAccount
-kubectl describe clusterrolebinding metrics-auth-rolebinding
-# If it references plugin-barman-cloud ServiceAccount in cnpg-system namespace,
-# delete it:
-kubectl delete clusterrolebinding metrics-auth-rolebinding
-
-# 2. Check metrics-auth-role
-# Look for references to authentication.k8s.io and authorization.k8s.io
-kubectl describe clusterrole metrics-auth-role
-# Verify it's not being used by any other rolebindings:
-kubectl get clusterrolebinding -o json \
-  | jq -r '.items[] | select(.roleRef.name=="metrics-auth-role") \
-  | .metadata.name'
-# If the above returns nothing (role is not in use) and the role looks like the
-# Barman Cloud one, delete it (see warnings section):
-kubectl delete clusterrole metrics-auth-role
-
-# 3. Check objectstore-viewer-role
-# Look for barmancloud.cnpg.io API group or
-# for `app.kubernetes.io/name: plugin-barman-cloud` label
-kubectl describe clusterrole objectstore-viewer-role
-# If it shows barmancloud.cnpg.io in API groups, delete it:
-kubectl delete clusterrole objectstore-viewer-role
-
-# 4. Check objectstore-editor-role
-# Look for barmancloud.cnpg.io API group or
-# for `app.kubernetes.io/name: plugin-barman-cloud` label
-kubectl describe clusterrole objectstore-editor-role
-# If it shows barmancloud.cnpg.io in API groups, delete it:
-kubectl delete clusterrole objectstore-editor-role
-
-# 5. Check metrics-reader (MOST DANGEROUS - very generic name)
-# First, check if it's being used by any rolebindings OTHER than barman's:
-kubectl get clusterrolebinding -o json | jq -r '.items[] \
-  | select(.roleRef.name=="metrics-reader") \
-  | "\(.metadata.name) -> \(.subjects[0].name) in \(.subjects[0].namespace)"'
-# If this shows ANY rolebindings, review them carefully. Only proceed if
-# they're all Barman-related.  Then check the role itself:
-kubectl describe clusterrole metrics-reader
-# If it ONLY has nonResourceURLs: /metrics and NO other rolebindings use it,
-# delete it:
-kubectl delete clusterrole metrics-reader
-```
-
-:::warning
-The `metrics-reader` role is particularly dangerous to delete blindly. Many
-monitoring systems use this exact name. Only delete it if:
-
-1. You've verified it ONLY grants access to `/metrics`
-2. No other rolebindings reference it (checked with the jq command above)
-3. You're certain it was created by the Barman Cloud plugin
-
-If you're unsure, it's safer to leave it and let the new
-`barman-plugin-metrics-reader` role coexist with it.
-:::
-
-If any resource is not found during the `describe` command, that's okay - it
-means it was never created or already deleted. Simply skip the delete command
-for that resource.
-
-### Step 3: Delete Old Namespace-scoped Resources
-
-Delete the old namespace-scoped resources in the `cnpg-system` namespace:
-
-```bash
-# Delete the old leader-election resources
-kubectl delete role leader-election-role -n cnpg-system
-kubectl delete rolebinding leader-election-rolebinding -n cnpg-system
-```
-
-If any resource is not found, that's okay - it means it was never created or
-already deleted.
-
-## Impact
-
-- **Permissions:** If you have custom RBAC rules or tools that reference the
-  old resource names, they will need to be updated.
-- **External Users:** If end users have been granted the
-  `objectstore-viewer-role` or `objectstore-editor-role`, they will need to be
-  re-granted the new role names (`barman-plugin-objectstore-viewer-role` and
-  `barman-plugin-objectstore-editor-role`).
-
-## Verification
-
-After migration, verify that the new resources are created:
-
-```bash
-# Check cluster-scoped resources
-kubectl get clusterrole | grep barman
-kubectl get clusterrolebinding | grep barman
-
-# Check namespace-scoped resources
-kubectl get role,rolebinding -n cnpg-system | grep barman
-```
-
-You should see the new prefixed resource names.
-
-## Troubleshooting
-
-### Plugin Not Starting After Migration
-
-If the plugin fails to start after migration, check:
-
-1. **ServiceAccount permissions:** Ensure the `plugin-barman-cloud` ServiceAccount is bound to the new roles:
-   ```bash
-   kubectl get clusterrolebinding barman-plugin-metrics-auth-rolebinding -o yaml
-   kubectl get rolebinding barman-plugin-leader-election-rolebinding -n cnpg-system -o yaml
-   ```
-
-2. **Role references:** Verify that the rolebindings reference the correct role names:
-   ```bash
-   kubectl describe rolebinding barman-plugin-leader-election-rolebinding -n cnpg-system
-   kubectl describe clusterrolebinding barman-plugin-metrics-auth-rolebinding
-   ```
-
-## Support
-
-If you encounter issues during migration, please open an issue on the [GitHub
-repository](https://github.com/cloudnative-pg/plugin-barman-cloud/issues).

web/versioned_docs/version-0.12.0/retention.md

@@ -1,38 +0,0 @@
----
-sidebar_position: 60
----
-
-# Retention Policies
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin supports **automated cleanup of obsolete backups** via
-retention policies, configured in the `.spec.retentionPolicy` field of the
-`ObjectStore` resource.
-
-:::note
-This feature uses the `barman-cloud-backup-delete` command with the
-`--retention-policy "RECOVERY WINDOW OF {{ value }} {{ unit }}"` syntax.
-:::
-
-#### Example: 30-Day Retention Policy
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: my-store
-spec:
-  [...]
-  retentionPolicy: "30d"
-````
-
-:::note
-A **recovery window retention policy** ensures the cluster can be restored to
-any point in time between the calculated *Point of Recoverability* (PoR) and
-the latest WAL archive. The PoR is defined as `current time - recovery window`.
-The **first valid backup** is the most recent backup completed before the PoR.
-Backups older than that are marked as *obsolete* and deleted after the next
-backup completes.
-:::
-

web/versioned_docs/version-0.12.0/upgrades.mdx

@@ -1,16 +0,0 @@
----
-sidebar_position: 25
----
-
-# Upgrades
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-You can upgrade the plugin simply by installing the new version. Unless
-explicitly stated below or in the release notes, no special steps are required.
-
-## Upgrading to version 0.8.x from previous versions
-
-Version **0.8.0** introduces breaking changes to resource naming.
-To complete the upgrade successfully, follow the instructions in the
-["Resource name migration guide"](resource-name-migration.md).

web/versioned_docs/version-0.12.0/usage.md

@@ -1,283 +0,0 @@
----
-sidebar_position: 30
----
-
-# Using the Barman Cloud Plugin
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-After [installing the plugin](installation.mdx) in the same namespace as the
-CloudNativePG operator, enabling your PostgreSQL cluster to use the Barman
-Cloud Plugin involves just a few steps:
-
-- Defining the object store containing your WAL archive and base backups, using
-  your preferred [provider](object_stores.md)
-- Instructing the Postgres cluster to use the Barman Cloud Plugin
-
-From that moment, you’ll be able to issue on-demand backups or define a backup
-schedule, as well as rely on the object store for recovery operations.
-
-The rest of this page details each step, using MinIO as object store provider.
-
-## Defining the `ObjectStore`
-
-An `ObjectStore` resource must be created for each object store used in your
-PostgreSQL architecture. Here's an example configuration using MinIO:
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-    destinationPath: s3://backups/
-    endpointURL: http://minio:9000
-    s3Credentials:
-      accessKeyId:
-        name: minio
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: minio
-        key: ACCESS_SECRET_KEY
-    wal:
-      compression: gzip
-```
-
-The `.spec.configuration` schema follows the same format as the
-[in-tree barman-cloud support](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#BarmanObjectStoreConfiguration).
-Refer to [the CloudNativePG documentation](https://cloudnative-pg.io/documentation/current/appendixes/backup_barmanobjectstore/)
-for additional details.
-
-:::important
-The `serverName` parameter in the `ObjectStore` resource is retained solely for
-API compatibility with the in-tree `barmanObjectStore` and must always be left empty.
-When needed, use the `serverName` plugin parameter in the Cluster configuration instead.
-:::
-
-## Configuring WAL Archiving
-
-Once the `ObjectStore` is defined, you can configure your PostgreSQL cluster
-to archive WALs by referencing the store in the `.spec.plugins` section:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-example
-spec:
-  instances: 3
-  imagePullPolicy: Always
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-store
-  storage:
-    size: 1Gi
-```
-
-This configuration enables both WAL archiving and data directory backups.
-
-## Performing a Base Backup
-
-Once WAL archiving is enabled, the cluster is ready for backups. Backups can be
-created either declaratively (with YAML manifests) or imperatively (with the
-`cnpg` plugin).
-
-### Declarative approach (YAML manifest)
-
-Create a backup resource by applying a YAML manifest:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Backup
-metadata:
-  name: backup-example
-spec:
-  cluster:
-    name: cluster-example
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-```
-
-### Imperative approach (using the `cnpg` plugin)
-
-The quickest way to trigger an on-demand backup is with the `cnpg` plugin:
-
-```bash
-kubectl cnpg backup -n <namespace> <cluster-name> \
-  --method=plugin \
-  --plugin-name=barman-cloud.cloudnative-pg.io
-```
-
-:::note Migration from in-tree backups
-If you are migrating from the in-tree backup system, note the change in syntax:
-
-```bash
-# Old command (in-tree backup)
-kubectl cnpg backup -n <namespace> <cluster-name> --method=barmanObjectStore
-
-# New command (plugin-based backup)
-kubectl cnpg backup -n <namespace> <cluster-name> \
-  --method=plugin \
-  --plugin-name=barman-cloud.cloudnative-pg.io
-```
-:::
-
-## Restoring a Cluster
-
-To restore a cluster from an object store, create a new `Cluster` resource that
-references the store containing the backup. Below is an example configuration:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-restore
-spec:
-  instances: 3
-  imagePullPolicy: IfNotPresent
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store
-        serverName: cluster-example
-  storage:
-    size: 1Gi
-```
-
-:::important
-The above configuration does **not** enable WAL archiving for the restored cluster.
-:::
-
-To enable WAL archiving for the restored cluster, include the `.spec.plugins`
-section alongside the `externalClusters.plugin` section, as shown below:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-restore
-spec:
-  instances: 3
-  imagePullPolicy: IfNotPresent
-  bootstrap:
-    recovery:
-      source: source
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      # Backup Object Store (push, read-write)
-      barmanObjectName: minio-store-bis
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        # Recovery Object Store (pull, read-only)
-        barmanObjectName: minio-store
-        serverName: cluster-example
-  storage:
-    size: 1Gi
-```
-
-The same object store may be used for both transaction log archiving and
-restoring a cluster, or you can configure separate stores for these purposes.
-
-## Configuring Replica Clusters
-
-You can set up a distributed topology by combining the previously defined
-configurations with the `.spec.replica` section. Below is an example of how to
-define a replica cluster:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-dc-a
-spec:
-  instances: 3
-  primaryUpdateStrategy: unsupervised
-
-  storage:
-    storageClass: csi-hostpath-sc
-    size: 1Gi
-
-  plugins:
-  - name: barman-cloud.cloudnative-pg.io
-    isWALArchiver: true
-    parameters:
-      barmanObjectName: minio-store-a
-
-  replica:
-    self: cluster-dc-a
-    primary: cluster-dc-a
-    source: cluster-dc-b
-
-  externalClusters:
-  - name: cluster-dc-a
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store-a
-
-  - name: cluster-dc-b
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: minio-store-b
-```
-
-## Configuring the plugin instance sidecar
-
-The Barman Cloud Plugin runs as a sidecar container next to each PostgreSQL
-instance pod. It manages backup, WAL archiving, and restore processes.
-
-Configuration comes from multiple `ObjectStore` resources:
-
-1. The one referenced in the
-   `.spec.plugins` section of the `Cluster`. This is the
-   object store used for WAL archiving and base backups.
-2. The one referenced in the external cluster
-   used in the `.spec.replica.source` section of the `Cluster`. This is
-   used by the log-shipping designated primary to get the WAL files.
-3. The one referenced in the
-   `.spec.bootstrap.recovery.source` section of the `Cluster`. Used by
-   the initial recovery job to create the cluster from an existing backup.
-
-You can fine-tune sidecar behavior in the `.spec.instanceSidecarConfiguration`
-of your ObjectStore. These settings apply to all PostgreSQL instances that use
-this object store. Any updates take effect at the next `Cluster` reconciliation,
-and could generate a rollout of the `Cluster`.
-
-```yaml
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: minio-store
-spec:
-  configuration:
-  # [...]
-  instanceSidecarConfiguration:
-    retentionPolicyIntervalSeconds: 1800
-    resources:
-      requests:
-        memory: "XXX"
-        cpu: "YYY"
-      limits:
-        memory: "XXX"
-        cpu: "YYY"
-```
-
-:::note
-If more than one `ObjectStore` applies, the `instanceSidecarConfiguration` of
-the one set in `.spec.plugins` has priority.
-:::

web/versioned_docs/version-0.13.0/installation.mdx

@@ -54,10 +54,47 @@ Both checks are required before proceeding with the installation.
 
 ## Installing the Barman Cloud Plugin
 
-import { InstallationSnippet } from '@site/src/components/Installation';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+import { InstallationSnippet, ManifestVersion } from '@site/src/components/Installation';
+import { HelmInstallationSnippet } from '@site/src/components/HelmInstallation';
 
-Install the plugin using `kubectl` by applying the manifest for the latest
+<Tabs groupId="install-method">
-release:
+  <TabItem value="helm" label="Helm Chart" default>
+
+The plugin can be installed using the provided [Helm chart](https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud):
+
+<HelmInstallationSnippet />
+
+Example output:
+
+```output
+Release "plugin-barman-cloud" does not exist. Installing it now.
+NAME: plugin-barman-cloud
+LAST DEPLOYED: Wed Jul  1 09:05:16 2026
+NAMESPACE: cnpg-system
+STATUS: deployed
+REVISION: 1
+DESCRIPTION: Install complete
+TEST SUITE: None
+```
+
+Finally, check that the deployment is up and running:
+
+```sh
+kubectl -n cnpg-system rollout status deploy/plugin-barman-cloud
+```
+
+Example output:
+
+```output
+deployment "plugin-barman-cloud" successfully rolled out
+```
+
+  </TabItem>
+  <TabItem value="kubectl" label="Manifest (kubectl)">
+
+Install the plugin using `kubectl` by applying the manifest for <ManifestVersion />:
 
 <InstallationSnippet />
 
@@ -86,8 +123,7 @@ issuer.cert-manager.io/selfsigned-issuer created
 Finally, check that the deployment is up and running:
 
 ```sh
-kubectl rollout status deployment \
+kubectl -n cnpg-system rollout status deploy/barman-cloud
-  -n cnpg-system barman-cloud
 ```
 
 Example output:
@@ -96,14 +132,15 @@ Example output:
 deployment "barman-cloud" successfully rolled out
 ```
 
+  </TabItem>
+</Tabs>
+
+---
+
 This confirms that the plugin is deployed and ready to use.
 
 ## Testing the latest development snapshot
 
-You can also test the latest development snapshot of the plugin with the
+import { DevSnapshotSection } from '@site/src/components/Installation';
-following command:
 
-```sh
+<DevSnapshotSection />
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/versioned_docs/version-0.13.0/troubleshooting.md

@@ -485,14 +485,10 @@ If problems persist:
 
 ### Plugin Limitations
 
-1. **Installation method**: Currently only supports manifest and Kustomize
+1. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
    resources with PostgreSQL
 
-3. **Plugin restart behavior**: Restarting the sidecar container requires
+2. **Plugin restart behavior**: Restarting the sidecar container requires
    restarting the entire PostgreSQL pod
 
 ## Recap of General Debugging Steps
@@ -588,4 +584,3 @@ kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys
 * **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
 * **"Connection timeout"** — Check network connectivity and firewall rules.
 * **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/versioned_docs/version-0.14.0/installation.mdx

@@ -54,10 +54,47 @@ Both checks are required before proceeding with the installation.
 
 ## Installing the Barman Cloud Plugin
 
-import { InstallationSnippet } from '@site/src/components/Installation';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+import { InstallationSnippet, ManifestVersion } from '@site/src/components/Installation';
+import { HelmInstallationSnippet } from '@site/src/components/HelmInstallation';
 
-Install the plugin using `kubectl` by applying the manifest for the latest
+<Tabs groupId="install-method">
-release:
+  <TabItem value="helm" label="Helm Chart" default>
+
+The plugin can be installed using the provided [Helm chart](https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud):
+
+<HelmInstallationSnippet />
+
+Example output:
+
+```output
+Release "plugin-barman-cloud" does not exist. Installing it now.
+NAME: plugin-barman-cloud
+LAST DEPLOYED: Wed Jul  1 09:05:16 2026
+NAMESPACE: cnpg-system
+STATUS: deployed
+REVISION: 1
+DESCRIPTION: Install complete
+TEST SUITE: None
+```
+
+Finally, check that the deployment is up and running:
+
+```sh
+kubectl -n cnpg-system rollout status deploy/plugin-barman-cloud
+```
+
+Example output:
+
+```output
+deployment "plugin-barman-cloud" successfully rolled out
+```
+
+  </TabItem>
+  <TabItem value="kubectl" label="Manifest (kubectl)">
+
+Install the plugin using `kubectl` by applying the manifest for <ManifestVersion />:
 
 <InstallationSnippet />
 
@@ -86,8 +123,7 @@ issuer.cert-manager.io/selfsigned-issuer created
 Finally, check that the deployment is up and running:
 
 ```sh
-kubectl rollout status deployment \
+kubectl -n cnpg-system rollout status deploy/barman-cloud
-  -n cnpg-system barman-cloud
 ```
 
 Example output:
@@ -96,14 +132,13 @@ Example output:
 deployment "barman-cloud" successfully rolled out
 ```
 
+  </TabItem>
+</Tabs>
+
 This confirms that the plugin is deployed and ready to use.
 
 ## Testing the latest development snapshot
 
-You can also test the latest development snapshot of the plugin with the
+import { DevSnapshotSection } from '@site/src/components/Installation';
-following command:
 
-```sh
+<DevSnapshotSection />
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/versioned_docs/version-0.14.0/troubleshooting.md

@@ -485,14 +485,10 @@ If problems persist:
 
 ### Plugin Limitations
 
-1. **Installation method**: Currently only supports manifest and Kustomize
+1. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
    resources with PostgreSQL
 
-3. **Plugin restart behavior**: Restarting the sidecar container requires
+2. **Plugin restart behavior**: Restarting the sidecar container requires
    restarting the entire PostgreSQL pod
 
 ## Recap of General Debugging Steps
@@ -588,4 +584,3 @@ kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys
 * **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
 * **"Connection timeout"** — Check network connectivity and firewall rules.
 * **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/versioned_docs/version-0.15.0/compression.md

@@ -15,7 +15,7 @@ for space, speed, or a balance of both.
 
 - `bzip2`
 - `gzip`
-- `lz4` (WAL only)
+- `lz4`
 - `snappy`
 - `xz` (WAL only)
 - `zstd` (WAL only)
@@ -41,3 +41,5 @@ network throughput.
 | bzip2       | 25,404           | 13,886            | 395                    | 67                   | 5.9:1 |
 | gzip        | 116,281          | 3,077             | 395                    | 91                   | 4.3:1 |
 | snappy      | 8,134            | 8,341             | 395                    | 166                  | 2.4:1 |
+
+Numbers come from a 2021 Barman proof of concept ([EnterpriseDB/barman#344](https://github.com/EnterpriseDB/barman/issues/344#issuecomment-992547396)), which predates `lz4` support for base backups. `lz4` is not yet benchmarked.

web/versioned_docs/version-0.15.0/concepts.md

@@ -35,7 +35,7 @@ object storage system. It allows you to configure:
 - **Base backup options**—with similar settings for compression, concurrency,
   and encryption—under `.spec.configuration.data`
 - **Retention policies** to manage the life-cycle of archived WALs and backups
-  via `.spec.configuration.retentionPolicy`
+  via `.spec.retentionPolicy`
 
 WAL files are archived in the `wals` directory, while base backups are stored
 as **tarballs** in the `base` directory, following the
@@ -43,7 +43,7 @@ as **tarballs** in the `base` directory, following the
 
 The plugin also offers advanced capabilities, including
 [backup tagging](misc.md#backup-object-tagging) and
-[extra options for backups and WAL archiving](misc.md#extra-options-for-backup-and-wal-archiving).
+[extra options for backups and WAL archiving](misc.md#extra-options-for-backup-wal-archiving-and-restore).
 
 :::tip
 For details, refer to the

web/versioned_docs/version-0.15.0/installation.mdx

@@ -54,10 +54,49 @@ Both checks are required before proceeding with the installation.
 
 ## Installing the Barman Cloud Plugin
 
-import { InstallationSnippet } from '@site/src/components/Installation';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+import { InstallationSnippet, ManifestVersion } from '@site/src/components/Installation';
+import { HelmInstallationSnippet } from '@site/src/components/HelmInstallation';
 
-Install the plugin using `kubectl` by applying the manifest for the latest
+<Tabs groupId="install-method" queryString>
-release:
+  <TabItem value="helm" label="Helm Chart" default>
+
+The plugin can be installed using the provided [Helm chart](https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud).
+This installs the latest published chart release; to test an unreleased
+development snapshot instead, switch to the [**Manifest (kubectl)**](./?install-method=kubectl#installing-the-barman-cloud-plugin) tab.
+
+<HelmInstallationSnippet />
+
+Example output:
+
+```output
+Release "plugin-barman-cloud" does not exist. Installing it now.
+NAME: plugin-barman-cloud
+LAST DEPLOYED: Wed Jul  1 09:05:16 2026
+NAMESPACE: cnpg-system
+STATUS: deployed
+REVISION: 1
+DESCRIPTION: Install complete
+TEST SUITE: None
+```
+
+Finally, check that the deployment is up and running:
+
+```sh
+kubectl -n cnpg-system rollout status deploy/plugin-barman-cloud
+```
+
+Example output:
+
+```output
+deployment "plugin-barman-cloud" successfully rolled out
+```
+
+  </TabItem>
+  <TabItem value="kubectl" label="Manifest (kubectl)">
+
+Install the plugin using `kubectl` by applying the manifest for <ManifestVersion />:
 
 <InstallationSnippet />
 
@@ -86,8 +125,7 @@ issuer.cert-manager.io/selfsigned-issuer created
 Finally, check that the deployment is up and running:
 
 ```sh
-kubectl rollout status deployment \
+kubectl -n cnpg-system rollout status deploy/barman-cloud
-  -n cnpg-system barman-cloud
 ```
 
 Example output:
@@ -96,14 +134,15 @@ Example output:
 deployment "barman-cloud" successfully rolled out
 ```
 
+  </TabItem>
+</Tabs>
+
+---
+
 This confirms that the plugin is deployed and ready to use.
 
 ## Testing the latest development snapshot
 
-You can also test the latest development snapshot of the plugin with the
+import { DevSnapshotSection } from '@site/src/components/Installation';
-following command:
 
-```sh
+<DevSnapshotSection />
-kubectl apply -f \
-  https://raw.githubusercontent.com/cloudnative-pg/plugin-barman-cloud/refs/heads/main/manifest.yaml
-```

web/versioned_docs/version-0.15.0/misc.md

@@ -32,17 +32,20 @@ spec:
   [...]
 ```
 
-## Extra Options for Backup and WAL Archiving
+## Extra Options for Backup, WAL Archiving, and Restore
 
-You can pass additional command-line arguments to `barman-cloud-backup` and
+You can pass additional command-line arguments to the underlying
-`barman-cloud-wal-archive` using the `additionalCommandArgs` field in the
+`barman-cloud-*` commands using the corresponding fields in the `ObjectStore`
-`ObjectStore` configuration.
+configuration.
 
 - `.spec.configuration.data.additionalCommandArgs`: for `barman-cloud-backup`
+- `.spec.configuration.data.restoreAdditionalCommandArgs`: for `barman-cloud-restore`
 - `.spec.configuration.wal.archiveAdditionalCommandArgs`: for `barman-cloud-wal-archive`
+- `.spec.configuration.wal.restoreAdditionalCommandArgs`: for `barman-cloud-wal-restore`
 
-Each field accepts a list of string arguments. If an argument is already
+Each field accepts a list of string arguments. If an argument conflicts with
-configured elsewhere in the plugin, the duplicate will be ignored.
+one already set by the plugin, the user-provided value will be ignored. These
+fields are intended to pass options the plugin does not configure automatically.
 
 ### Example: Extra Backup Options
 
@@ -58,6 +61,19 @@ spec:
         - "--read-timeout=60"
 ```
 
+### Example: Extra Restore Options
+
+```yaml
+kind: ObjectStore
+metadata:
+  name: my-store
+spec:
+  configuration:
+    data:
+      restoreAdditionalCommandArgs:
+        - "--read-timeout=900"
+```
+
 ### Example: Extra WAL Archive Options
 
 ```yaml
@@ -72,6 +88,19 @@ spec:
         - "--read-timeout=60"
 ```
 
+### Example: Extra WAL Restore Options
+
+```yaml
+kind: ObjectStore
+metadata:
+  name: my-store
+spec:
+  configuration:
+    wal:
+      restoreAdditionalCommandArgs:
+        - "--read-timeout=60"
+```
+
 For a complete list of supported options, refer to the
 [official Barman Cloud documentation](https://docs.pgbarman.org/release/latest/).
 

web/versioned_docs/version-0.15.0/troubleshooting.md

@@ -485,14 +485,10 @@ If problems persist:
 
 ### Plugin Limitations
 
-1. **Installation method**: Currently only supports manifest and Kustomize
+1. **Sidecar resource sharing**: The plugin sidecar container shares pod
-   installation ([#351](https://github.com/cloudnative-pg/plugin-barman-cloud/issues/351) -
-   Helm chart requested)
-
-2. **Sidecar resource sharing**: The plugin sidecar container shares pod
    resources with PostgreSQL
 
-3. **Plugin restart behavior**: Restarting the sidecar container requires
+2. **Plugin restart behavior**: Restarting the sidecar container requires
    restarting the entire PostgreSQL pod
 
 ## Recap of General Debugging Steps
@@ -588,4 +584,3 @@ kubectl get secret -n <namespace> <secret-name> -o jsonpath='{.data}' | jq 'keys
 * **"NoSuchBucket"** — Verify the bucket exists and the endpoint URL is correct.
 * **"Connection timeout"** — Check network connectivity and firewall rules.
 * **"SSL certificate problem"** — For self-signed certificates, verify the CA bundle configuration.
-

web/versioned_docs/version-0.3.0/welcome.md

@@ -1,15 +0,0 @@
----
-sidebar_position: 1
-sidebar_label: "Welcome"
----
-
-# Barman Cloud CNPG-I plugin
-
-**Status:** EXPERIMENTAL
-
-Welcome to the documentation of the [barman-cloud](https://pgbarman.org/) CNPG-I
-plugin for [CloudNativePG](https://cloudnative-pg.io/).
-
-Documentation for version **0.3.0** of the plugin is available in the
-[README](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/v0.3.0/README.md)
-on GitHub.

web/versioned_docs/version-0.4.0/compression.md

@@ -1,43 +0,0 @@
----
-sidebar_position: 80
----
-
-# Compression
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-By default, backups and WAL files are archived **uncompressed**. However, the
-Barman Cloud Plugin supports multiple compression algorithms via
-`barman-cloud-backup` and `barman-cloud-wal-archive`, allowing you to optimize
-for space, speed, or a balance of both.
-
-### Supported Compression Algorithms
-
-- `bzip2`
-- `gzip`
-- `lz4` (WAL only)
-- `snappy`
-- `xz` (WAL only)
-- `zstd` (WAL only)
-
-Compression settings for base backups and WAL archives are configured
-independently. For implementation details, refer to the corresponding API
-definitions:
-
-- [`DataBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#DataBackupConfiguration)
-- [`WALBackupConfiguration`](https://pkg.go.dev/github.com/cloudnative-pg/barman-cloud/pkg/api#WalBackupConfiguration)
-
-:::important
-Compression impacts both performance and storage efficiency. Choose the right
-algorithm based on your recovery time objectives (RTO), storage capacity, and
-network throughput.
-:::
-
-## Compression Benchmark (on MinIO)
-
-| Compression | Backup Time (ms) | Restore Time (ms) | Uncompressed Size (MB) | Compressed Size (MB) | Ratio |
-| ----------- | ---------------- | ----------------- | ---------------------- | -------------------- | ----- |
-| None        | 10,927           | 7,553             | 395                    | 395                  | 1.0:1 |
-| bzip2       | 25,404           | 13,886            | 395                    | 67                   | 5.9:1 |
-| gzip        | 116,281          | 3,077             | 395                    | 91                   | 4.3:1 |
-| snappy      | 8,134            | 8,341             | 395                    | 166                  | 2.4:1 |

web/versioned_docs/version-0.4.0/concepts.md

@@ -1,177 +0,0 @@
----
-sidebar_position: 10
----
-
-# Main Concepts
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-:::important
-Before proceeding, make sure to review the following sections of the
-CloudNativePG documentation:
-
-- [**Backup**](https://cloudnative-pg.io/documentation/current/backup/)
-- [**WAL Archiving**](https://cloudnative-pg.io/documentation/current/wal_archiving/)
-- [**Recovery**](https://cloudnative-pg.io/documentation/current/recovery/)
-:::
-
-The **Barman Cloud Plugin** enables **hot (online) backups** of PostgreSQL
-clusters in CloudNativePG through [`barman-cloud`](https://pgbarman.org),
-supporting continuous physical backups and WAL archiving to an **object
-store**—without interrupting write operations.
-
-It also supports both **full recovery** and **Point-in-Time Recovery (PITR)**
-of a PostgreSQL cluster.
-
-## The Object Store
-
-At the core is the [`ObjectStore` custom resource (CRD)](plugin-barman-cloud.v1.md#objectstorespec),
-which acts as the interface between the PostgreSQL cluster and the target
-object storage system. It allows you to configure:
-
-- **Authentication and bucket location** via the `.spec.configuration` section
-- **WAL archiving** settings—such as compression type, parallelism, and
-  server-side encryption—under `.spec.configuration.wal`
-- **Base backup options**—with similar settings for compression, concurrency,
-  and encryption—under `.spec.configuration.data`
-- **Retention policies** to manage the life-cycle of archived WALs and backups
-  via `.spec.configuration.retentionPolicy`
-
-WAL files are archived in the `wals` directory, while base backups are stored
-as **tarballs** in the `base` directory, following the
-[Barman Cloud convention](https://docs.pgbarman.org/cloud/latest/usage/#object-store-layout).
-
-The plugin also offers advanced capabilities, including
-[backup tagging](misc.md#backup-object-tagging) and
-[extra options for backups and WAL archiving](misc.md#extra-options-for-backup-and-wal-archiving).
-
-:::tip
-For details, refer to the
-[API reference for the `ObjectStore` resource](plugin-barman-cloud.v1.md#objectstorespec).
-:::
-
-## Integration with a CloudNativePG Cluster
-
-CloudNativePG can delegate continuous backup and recovery responsibilities to
-the **Barman Cloud Plugin** by configuring the `.spec.plugins` section of a
-`Cluster` resource. This setup requires a corresponding `ObjectStore` resource
-to be defined.
-
-:::important
-While it is technically possible to reuse the same `ObjectStore` for multiple
-`Cluster` resources within the same namespace, it is strongly recommended to
-dedicate one object store per PostgreSQL cluster to ensure data isolation and
-operational clarity.
-:::
-
-The following example demonstrates how to configure a CloudNativePG cluster
-named `cluster-example` to use a previously defined `ObjectStore` (also named
-`cluster-example`) in the same namespace. Setting `isWALArchiver: true` enables
-WAL archiving through the plugin:
-
-```yaml
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: cluster-example
-spec:
-  # Other cluster settings...
-  plugins:
-    - name: barman-cloud.cloudnative-pg.io
-      isWALArchiver: true
-      parameters:
-        barmanObjectName: cluster-example
-```
-
-## Backup of a Postgres Cluster
-
-Once the object store is defined and the `Cluster` is configured to use the
-Barman Cloud Plugin, **WAL archiving is activated immediately** on the
-PostgreSQL primary.
-
-Physical base backups are seamlessly managed by CloudNativePG using the
-`Backup` and `ScheduledBackup` resources, respectively for
-[on-demand](https://cloudnative-pg.io/documentation/current/backup/#on-demand-backups)
-and
-[scheduled](https://cloudnative-pg.io/documentation/current/backup/#scheduled-backups)
-backups.
-
-To use the Barman Cloud Plugin, you must set the `method` to `plugin` and
-configure the `pluginConfiguration` section as shown:
-
-```yaml
-[...]
-spec:
-  method: plugin
-  pluginConfiguration:
-    name: barman-cloud.cloudnative-pg.io
-  [...]
-```
-
-With this configuration, CloudNativePG supports:
-
-- Backups from both **primary** and **standby** instances
-- Backups from **designated primaries** in a distributed topology using
-  [replica clusters](https://cloudnative-pg.io/documentation/current/replica_cluster/)
-
-:::tip
-For details on how to back up from a standby, refer to the official documentation:
-[Backup from a standby](https://cloudnative-pg.io/documentation/current/backup/#backup-from-a-standby).
-:::
-
-:::important
-Both backup and WAL archiving operations are executed by sidecar containers
-running in the same pod as the PostgreSQL `Cluster` primary instance—except
-when backups are taken from a standby, in which case the sidecar runs alongside
-the standby pod.
-The sidecar containers use a [dedicated container image](images.md) that
-includes only the supported version of Barman Cloud.
-:::
-
-## Recovery of a Postgres Cluster
-
-In PostgreSQL, *recovery* refers to the process of starting a database instance
-from an existing backup.  The Barman Cloud Plugin integrates with CloudNativePG
-to support both **full recovery** and **Point-in-Time Recovery (PITR)** from an
-object store.
-
-Recovery in this context is *not in-place*: it bootstraps a brand-new
-PostgreSQL cluster from a backup and replays the necessary WAL files to reach
-the desired recovery target.
-
-To perform a recovery, define an *external cluster* that references the
-appropriate `ObjectStore`, and use it as the source in the `bootstrap` section
-of the target cluster:
-
-```yaml
-[...]
-spec:
-  [...]
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-  - name: source
-    plugin:
-      name: barman-cloud.cloudnative-pg.io
-      parameters:
-        barmanObjectName: cluster-example
-        serverName: cluster-example
-  [...]
-```
-
-The critical element here is the `externalClusters` section of the `Cluster`
-resource, where the `plugin` stanza instructs CloudNativePG to use the Barman
-Cloud Plugin to access the object store for recovery.
-
-This same mechanism can be used for a variety of scenarios enabled by the
-CloudNativePG API, including:
-
-* **Full cluster recovery** from the latest backup
-* **Point-in-Time Recovery (PITR)**
-* Bootstrapping **replica clusters** in a distributed topology
-
-:::tip
-For complete instructions and advanced use cases, refer to the official
-[Recovery documentation](https://cloudnative-pg.io/documentation/current/recovery/).
-:::

web/versioned_docs/version-0.4.0/images.md

@@ -1,37 +0,0 @@
----
-sidebar_position: 99
----
-
-# Container Images
-
-<!-- SPDX-License-Identifier: CC-BY-4.0 -->
-
-The Barman Cloud Plugin is distributed using two container images:
-
-- One for deploying the plugin components
-- One for the sidecar that runs alongside each PostgreSQL instance in a
-  CloudNativePG `Cluster` using the plugin
-
-## Plugin Container Image
-
-The plugin image contains the logic required to operate the Barman Cloud Plugin
-within your Kubernetes environment with CloudNativePG. It is published on the
-GitHub Container Registry at `ghcr.io/cloudnative-pg/plugin-barman-cloud`.
-
-This image is built from the
-[`Dockerfile.plugin`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.plugin)
-in the plugin repository.
-
-## Sidecar Container Image
-
-The sidecar image is used within each PostgreSQL pod in the cluster. It
-includes the latest supported version of Barman Cloud and is responsible for
-performing WAL archiving and backups on behalf of CloudNativePG.
-
-It is available at `ghcr.io/cloudnative-pg/plugin-barman-cloud-sidecar` and is
-built from the
-[`Dockerfile.sidecar`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/containers/Dockerfile.sidecar).
-
-These sidecar images are designed to work seamlessly with the
-[`minimal` PostgreSQL container images](https://github.com/cloudnative-pg/postgres-containers?tab=readme-ov-file#minimal-images)
-maintained by the CloudNativePG Community.