feat: minio use external secret for credentials

helm/minio/values.yaml

@@ -9,5 +9,4 @@ resources:
   requests:
     cpu: 250m
     memory: 512Mi
-rootPassword: _!Str0ngP@ssw0rd
+existingSecret: minio-admin-secret
-rootUser: admin

k8s/external-secrets/minio.yaml

@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: minio-secret
+  namespace: minio
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: minio-admin-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: rootUser
+      remoteRef:
+        key: secret/minio
+        property: rootUser
+    - secretKey: rootPassword
+      remoteRef:
+        key: secret/minio
+        property: rootPassword