From 8dbd740c4acb553d2729df2a7cacf7cb42248df4 Mon Sep 17 00:00:00 2001
From: git_admin <m@havari.me>
Date: Sun, 26 Apr 2026 21:43:28 +0300
Subject: [PATCH] =?UTF-8?q?tower=200.13.0=20+=20tower-ui=200.12.0=20?=
 =?UTF-8?q?=E2=80=94=20restore=20any=20backup,=20list=20from=20S3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/backend-deployment.yaml | 13 +++++++++++++
 values.yaml                       |  4 ++--
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/templates/backend-deployment.yaml b/templates/backend-deployment.yaml
index 9207659..59e305f 100644
--- a/templates/backend-deployment.yaml
+++ b/templates/backend-deployment.yaml
@@ -73,6 +73,19 @@ spec:
                   name: {{ .Values.config.existingSecret }}
                   key: CLOUDFLARE_ZONE_ID
                   optional: true
+            # OpenBao token — scoped read-only on v3/data/*. Used to
+            # fetch S3 creds at request time for the backup list +
+            # restore-by-key endpoints. Optional: missing token =
+            # backup-list endpoint returns runs without S3 file
+            # listings (degrades gracefully).
+            - name: TOWER_VAULT_ADDR
+              value: "https://vault.odoosky.org"
+            - name: TOWER_VAULT_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.config.existingSecret }}
+                  key: VAULT_TOKEN
+                  optional: true
           readinessProbe:
             httpGet:
               path: /healthz
diff --git a/values.yaml b/values.yaml
index 5005703..44e6382 100644
--- a/values.yaml
+++ b/values.yaml
@@ -4,7 +4,7 @@ backend:
   enabled: true
   image:
     repository: docker.io/odoosky/tower
-    tag: "0.12.0"
+    tag: "0.13.0"
     pullPolicy: IfNotPresent  # IfNotPresent because the image is in
                               # containerd's k8s.io namespace already
                               # (lab1 single-server). Replace with
@@ -22,7 +22,7 @@ frontend:
   enabled: true
   image:
     repository: docker.io/odoosky/tower-ui
-    tag: "0.11.0"
+    tag: "0.12.0"
     pullPolicy: IfNotPresent
   replicas: 1
   resources: