diff --git a/Makefile b/Makefile
index d8ce287..c9b5fa6 100644
--- a/Makefile
+++ b/Makefile
@@ -2,9 +2,9 @@
 
 CHART_METADATA_IMAGE ?= artifactory.algol60.net/csm-docker/stable/chart-metadata
 YQ_IMAGE ?= artifactory.algol60.net/docker.io/mikefarah/yq:4
-HELM_IMAGE ?= artifactory.algol60.net/docker.io/alpine/helm:3.7.1
-HELM_UNITTEST_IMAGE ?= artifactory.algol60.net/docker.io/quintush/helm-unittest
-HELM_DOCS_IMAGE ?= artifactory.algol60.net/docker.io/jnorwood/helm-docs:v1.5.0
+HELM_IMAGE ?= artifactory.algol60.net/csm-docker/stable/docker.io/alpine/helm:3.9.4
+HELM_UNITTEST_IMAGE ?= artifactory.algol60.net/csm-docker/stable/docker.io/quintush/helm-unittest:latest
+HELM_DOCS_IMAGE ?= artifactory.algol60.net/csm-docker/stable/docker.io/jnorwood/helm-docs:v1.5.0
 
 all: lint dep-up test package
 
@@ -28,7 +28,7 @@ dep-up:
 test:
 	docker run --rm \
 		-v ${PWD}/charts:/apps \
-		${HELM_UNITTEST_IMAGE} -3 \
+		${HELM_UNITTEST_IMAGE} \
 		cray-psp
 
 package:
diff --git a/charts/cray-psp/Chart.yaml b/charts/cray-psp/Chart.yaml
index ecc2336..07af96e 100644
--- a/charts/cray-psp/Chart.yaml
+++ b/charts/cray-psp/Chart.yaml
@@ -1,7 +1,7 @@
 #
 # MIT License
 #
-# (C) Copyright 2022 Hewlett Packard Enterprise Development LP
+# (C) Copyright 2022-2023 Hewlett Packard Enterprise Development LP
 #
 # Permission is hereby granted, free of charge, to any person obtaining a
 # copy of this software and associated documentation files (the "Software"),
@@ -23,7 +23,7 @@
 #
 apiVersion: v2
 name: cray-psp
-version: 0.4.2
+version: 0.4.3
 description: Apply net-raw PSP
 keywords:
   - cray-psp
diff --git a/charts/cray-psp/templates/psp/cray-etcd-s3-sync.yaml b/charts/cray-psp/templates/psp/cray-etcd-s3-sync.yaml
new file mode 100644
index 0000000..148fee9
--- /dev/null
+++ b/charts/cray-psp/templates/psp/cray-etcd-s3-sync.yaml
@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: cray-etcd-s3-sync-psp
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: restricted-transition-net-raw-psp
+subjects:
+- kind: ServiceAccount
+  name: etcd-backup-restore
+  namespace: services