---
apiVersion: batch/v1
kind: Job
metadata:
  name: minio-secret-generator
  namespace: minio-tenant-default
spec:
  backoffLimit: 3
  template:
    spec:
      containers:
        - args:
            - /scripts/generate-secrets.sh
          command:
            - /bin/bash
          image: ghcr.io/silogen/kubectl:latest
          name: minio-secret-generator
          volumeMounts:
            - mountPath: /scripts
              name: script-volume
      restartPolicy: OnFailure
      serviceAccountName: minio-secret-readonly
      volumes:
        - configMap:
            defaultMode: 493
            name: minio-secret-generator-script
          name: script-volume