tower 0.13.0 + tower-ui 0.12.0 — restore any backup, list from S3

templates/backend-deployment.yaml

@@ -73,6 +73,19 @@ spec:
                   name: {{ .Values.config.existingSecret }}
                   key: CLOUDFLARE_ZONE_ID
                   optional: true
+            # OpenBao token — scoped read-only on v3/data/*. Used to
+            # fetch S3 creds at request time for the backup list +
+            # restore-by-key endpoints. Optional: missing token =
+            # backup-list endpoint returns runs without S3 file
+            # listings (degrades gracefully).
+            - name: TOWER_VAULT_ADDR
+              value: "https://vault.odoosky.org"
+            - name: TOWER_VAULT_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.config.existingSecret }}
+                  key: VAULT_TOKEN
+                  optional: true
           readinessProbe:
             httpGet:
               path: /healthz