A CloudNativePG backup configuration must get four independent details right: where objects live, how the pod authenticates, which certificate authority it trusts, and how the S3 client addresses the ...