FIX(minio): correct ClusterExternalSecret defaults

- Add default values (conversionStrategy, decodingStrategy, metadataPolicy)
- Match ClusterExternalSecret controller defaults
- Fix ArgoCD OutOfSync caused by controller defaults

minio/manifests/secret.yaml

@@ -37,28 +37,41 @@ spec:
   namespaceSelector:
     matchLabels:
       minio-s3: enabled
-  refreshInterval: 1h
   externalSecretSpec:
+    refreshInterval: 1h0m0s
     secretStoreRef:
       kind: ClusterSecretStore
       name: vault-backend
     target:
       name: minio-s3-credentials
       creationPolicy: Owner
+      deletionPolicy: Retain
     data:
       - secretKey: AWS_ACCESS_KEY_ID
         remoteRef:
           key: minio-s3-credentials
           property: AWS_ACCESS_KEY_ID
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_SECRET_ACCESS_KEY
         remoteRef:
           key: minio-s3-credentials
           property: AWS_SECRET_ACCESS_KEY
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_REGION
         remoteRef:
           key: minio-s3-credentials
           property: AWS_REGION
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None
       - secretKey: AWS_S3_ENDPOINT
         remoteRef:
           key: minio-s3-credentials
           property: AWS_S3_ENDPOINT
+          conversionStrategy: Default
+          decodingStrategy: None
+          metadataPolicy: None