apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: tempo-s3-secret
  namespace: tempo
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: vault-backend
    kind: ClusterSecretStore
  target:
    name: tempo-s3-secret
    template:
      engineVersion: v2
      data:
        S3_ACCESS_KEY: "{{ .access_key }}"
        S3_SECRET_KEY: "{{ .secret_key }}"
  data:
    - secretKey: access_key
      remoteRef:
        key: minio
        property: ROOT_USER
    - secretKey: secret_key
      remoteRef:
        key: minio
        property: ROOT_PASSWORD