--- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: default-minio-user namespace: minio-tenant-default spec: dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: minio-password-generator refreshInterval: "0" target: name: default-user template: data: API_ACCESS_KEY: api-default-user API_SECRET_KEY: '{{ .password }}' CONSOLE_ACCESS_KEY: default-user CONSOLE_SECRET_KEY: '{{ .password }}'