From 30ccf13c82dc31f8b6f8d23d3b8c15808c8a82ad Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Thu, 2 Apr 2026 00:51:50 +0000
Subject: [PATCH] fix: Use postRenderer to replace broken kuberlr-kubectl image
 in rancher-backup hook

The chart's post-install hook hardcodes rancher/kuberlr-kubectl which
can't download kubectl. Use Flux postRenderers to patch the job image
to bitnami/kubectl at render time.
---
 .../rancher-backup/helmrelease-rancher-backup.yaml   | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/infrastructure/addons/rancher-backup/helmrelease-rancher-backup.yaml b/infrastructure/addons/rancher-backup/helmrelease-rancher-backup.yaml
index 44ced17..88066c5 100644
--- a/infrastructure/addons/rancher-backup/helmrelease-rancher-backup.yaml
+++ b/infrastructure/addons/rancher-backup/helmrelease-rancher-backup.yaml
@@ -20,11 +20,9 @@ spec:
     createNamespace: true
     remediation:
       retries: 3
-    skipHooks: true
   upgrade:
     remediation:
       retries: 3
-    skipHooks: true
   values:
     image:
       repository: rancher/backup-restore-operator
@@ -32,3 +30,13 @@ spec:
       image:
         repository: bitnami/kubectl
         tag: "1.34"
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              kind: Job
+              name: rancher-backup-patch-sa
+            patch: |
+              - op: replace
+                path: /spec/template/spec/containers/0/image
+                value: bitnami/kubectl:1.34