apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: velero-minio-credentials
  namespace: velero
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault-backend
    kind: ClusterSecretStore
  target:
    name: velero-minio-credentials
    creationPolicy: Owner
  data:
  - secretKey: cloud
    remoteRef:
      key: velero/minio-credentials
    template:
      engine: gotmpl
      data: |
        [default]
        aws_access_key_id={{ .aws_access_key_id }}
        aws_secret_access_key={{ .aws_secret_access_key }}