From 5753098d107a0a06f7195d84e2aa683302c418c5 Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Thu, 8 Jan 2026 17:57:18 +0900
Subject: [PATCH] FIX(minio): correct ClusterExternalSecret defaults

- Add default values (conversionStrategy, decodingStrategy, metadataPolicy)
- Match ClusterExternalSecret controller defaults
- Fix ArgoCD OutOfSync caused by controller defaults
---
 minio/manifests/secret.yaml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/minio/manifests/secret.yaml b/minio/manifests/secret.yaml
index df0ebd2..90f90bc 100644
--- a/minio/manifests/secret.yaml
+++ b/minio/manifests/secret.yaml
@@ -37,28 +37,41 @@ spec:
   namespaceSelector:
     matchLabels:
       minio-s3: enabled
-  refreshInterval: 1h
   externalSecretSpec:
+    refreshInterval: 1h0m0s
     secretStoreRef:
       kind: ClusterSecretStore
       name: vault-backend
     target:
       name: minio-s3-credentials
       creationPolicy: Owner
+      deletionPolicy: Retain
     data:
       - secretKey: AWS_ACCESS_KEY_ID
         remoteRef:
           key: minio-s3-credentials
           property: AWS_ACCESS_KEY_ID
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_SECRET_ACCESS_KEY
         remoteRef:
           key: minio-s3-credentials
           property: AWS_SECRET_ACCESS_KEY
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_REGION
         remoteRef:
           key: minio-s3-credentials
           property: AWS_REGION
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_S3_ENDPOINT
         remoteRef:
           key: minio-s3-credentials
           property: AWS_S3_ENDPOINT
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None