diff --git a/helm/minio/values.yaml b/helm/minio/values.yaml
index 67d167f..c567ea1 100644
--- a/helm/minio/values.yaml
+++ b/helm/minio/values.yaml
@@ -9,5 +9,4 @@ resources:
   requests:
     cpu: 250m
     memory: 512Mi
-rootPassword: _!Str0ngP@ssw0rd
-rootUser: admin
+existingSecret: minio-admin-secret
diff --git a/k8s/external-secrets/minio.yaml b/k8s/external-secrets/minio.yaml
new file mode 100644
index 0000000..2cc4452
--- /dev/null
+++ b/k8s/external-secrets/minio.yaml
@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: minio-secret
+  namespace: minio
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: minio-admin-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: rootUser
+      remoteRef:
+        key: secret/minio
+        property: rootUser
+    - secretKey: rootPassword
+      remoteRef:
+        key: secret/minio
+        property: rootPassword