diff --git a/minio/values-tenant.yaml b/minio/values-tenant.yaml
index cf1b99a..d40089a 100644
--- a/minio/values-tenant.yaml
+++ b/minio/values-tenant.yaml
@@ -328,4 +328,151 @@ tenant:
   # An array of `Volumes <https://kubernetes.io/docs/concepts/storage/volumes/>`__ which the Operator can mount to Tenant pods.
   #
   # The volumes must exist *and* be accessible to the Tenant pods.
-  additionalVolumes: [ ]
\ No newline at end of file
+  additionalVolumes: [ ]
+  ###
+  # An array of volume mount points associated to each Tenant container.
+  # 
+  # Specify each item in the array as follows:
+  #
+  # .. code-block:: yaml
+  #
+  #    volumeMounts:
+  #    - name: volumename
+  #      mountPath: /path/to/mount
+  #
+  # The ``name`` field must correspond to an entry in the ``additionalVolumes`` array.
+  additionalVolumeMounts: [ ]
+  # Define configuration for KES (stateless and distributed key-management system)
+  # Refer https://github.com/minio/kes
+  #kes:
+  #  ## Image field:
+  #  # Image from tag (original behavior), for example:
+  #  # image:
+  #  #   repository: quay.io/minio/kes
+  #  #   tag: 2024-08-16T14-39-28Z
+  #  # Image from digest (added after original behavior), for example:
+  #  # image:
+  #  #   repository: quay.io/minio/kes@sha256
+  #  #   digest: fb15af611149892f357a8a99d1bcd8bf5dae713bd64c15e6eb27fbdb88fc208b
+  #  image:
+  #    repository: quay.io/minio/kes
+  #    tag: 2024-08-16T14-39-28Z
+  #    pullPolicy: IfNotPresent
+  #  env: [ ]
+  #  replicas: 2
+  #  configuration: |-
+  #    address: :7373
+  #    tls:
+  #      key: /tmp/kes/server.key   # Path to the TLS private key
+  #      cert: /tmp/kes/server.crt # Path to the TLS certificate
+  #      proxy:
+  #        identities: []
+  #        header:
+  #          cert: X-Tls-Client-Cert
+  #    admin:
+  #      identity: ${MINIO_KES_IDENTITY}
+  #    cache:
+  #      expiry:
+  #        any: 5m0s
+  #        unused: 20s
+  #    log:
+  #      error: on
+  #      audit: off
+  #    keystore:
+  #      # KES configured with fs (File System mode) doesn't work in Kubernetes environments and is not recommended
+  #      # use a real KMS
+  #      # fs:
+  #      #   path: "./keys" # Path to directory. Keys will be stored as files. Not Recommended for Production.
+  #      vault:
+  #        endpoint: "http://vault.default.svc.cluster.local:8200" # The Vault endpoint
+  #        namespace: "" # An optional Vault namespace. See: https://www.vaultproject.io/docs/enterprise/namespaces/index.html
+  #        prefix: "my-minio"    # An optional K/V prefix. The server will store keys under this prefix.
+  #        approle:    # AppRole credentials. See: https://www.vaultproject.io/docs/auth/approle.html
+  #          id: "<YOUR APPROLE ID HERE>"      # Your AppRole Role ID
+  #          secret: "<YOUR APPROLE SECRET ID HERE>"  # Your AppRole Secret ID
+  #          retry: 15s  # Duration until the server tries to re-authenticate after connection loss.
+  #        tls:        # The Vault client TLS configuration for mTLS authentication and certificate verification
+  #          key: ""     # Path to the TLS client private key for mTLS authentication to Vault
+  #          cert: ""    # Path to the TLS client certificate for mTLS authentication to Vault
+  #          ca: ""      # Path to one or multiple PEM root CA certificates
+  #        status:     # Vault status configuration. The server will periodically reach out to Vault to check its status.
+  #          ping: 10s   # Duration until the server checks Vault's status again.
+  #      # aws:
+  #      #   # The AWS SecretsManager key store. The server will store
+  #      #   # secret keys at the AWS SecretsManager encrypted with
+  #      #   # AWS-KMS. See: https://aws.amazon.com/secrets-manager
+  #      #   secretsmanager:
+  #      #     endpoint: ""   # The AWS SecretsManager endpoint      - e.g.: secretsmanager.us-east-2.amazonaws.com
+  #      #     region: ""     # The AWS region of the SecretsManager - e.g.: us-east-2
+  #      #     kmskey: ""     # The AWS-KMS key ID used to en/decrypt secrets at the SecretsManager. By default (if not set) the default AWS-KMS key will be used.
+  #      #     credentials:   # The AWS credentials for accessing secrets at the AWS SecretsManager.
+  #      #       accesskey: ""  # Your AWS Access Key
+  #      #       secretkey: ""  # Your AWS Secret Key
+  #      #       token: ""      # Your AWS session token (usually optional)
+  #  imagePullPolicy: "IfNotPresent"
+  #  externalCertSecret: null
+  #  clientCertSecret: null
+  #  # Key name to be created on the KMS, default is "my-minio-key"
+  #  keyName: ""
+  #  resources: { }
+  #  nodeSelector: { }
+  #  affinity:
+  #    nodeAffinity: { }
+  #    podAffinity: { }
+  #    podAntiAffinity: { }
+  #  tolerations: [ ]
+  #  annotations: { }
+  #  labels: { }
+  #  serviceAccountName: ""
+  #  securityContext:
+  #    runAsUser: 1000
+  #    runAsGroup: 1000
+  #    runAsNonRoot: true
+  #    fsGroup: 1000
+  #  containerSecurityContext:
+  #    runAsUser: 1000
+  #    runAsGroup: 1000
+  #    runAsNonRoot: true
+  #    allowPrivilegeEscalation: false
+  #    capabilities:
+  #      drop:
+  #        - ALL
+  #    seccompProfile:
+  #      type: RuntimeDefault
+
+###
+# Configures `Ingress <https://kubernetes.io/docs/concepts/services-networking/ingress/>`__ for the Tenant S3 API and Console.
+#
+# Set the keys to conform to the Ingress controller and configuration of your choice.
+ingress:
+  api:
+    enabled: false
+    ingressClassName: ""
+    labels: { }
+    annotations: { }
+    tls: [ ]
+    host: minio.local
+    path: /
+    pathType: Prefix
+  console:
+    enabled: false
+    ingressClassName: ""
+    labels: { }
+    annotations: { }
+    tls: [ ]
+    host: minio-console.local
+    path: /
+    pathType: Prefix
+# Use an extraResources template section to include additional Kubernetes resources
+# with the Helm deployment.
+#extraResources:
+#  - |
+#    apiVersion: v1
+#    kind: Secret
+#    type: Opaque
+#    metadata:
+#      name: {{ dig "tenant" "configSecret" "name" "" (.Values | merge (dict)) }}
+#    stringData:
+#      config.env: |-
+#        export MINIO_ROOT_USER='minio'
+#        export MINIO_ROOT_PASSWORD='minio123'