diff --git a/charts/tenant/templates/minio-setup.yaml b/charts/tenant/templates/minio-setup.yaml
index 165d5c5..2f286f0 100644
--- a/charts/tenant/templates/minio-setup.yaml
+++ b/charts/tenant/templates/minio-setup.yaml
@@ -74,8 +74,11 @@ spec:
 
               # Create target secret with matching credentials
               kubectl create secret generic tenant-{{ .Values.name }}-s3-credentials \
+                --from-literal=S3_ENDPOINT="http://minio.minio.svc.cluster.local:9000" \
                 --from-literal=AWS_ACCESS_KEY_ID={{ .Values.name }}-user \
                 --from-literal=AWS_SECRET_ACCESS_KEY="$SCOPED_SECRET" \
+                --from-literal=BUCKET_REF="ref-tenant-{{ .Values.name }}" \
+                --from-literal=BUCKET_WORK="work-tenant-{{ .Values.name }}" \
                 -n minio --dry-run=client -o yaml | kubectl apply -f -
 
               # Annotate for Emberstack Reflector