{{- $existingSecret := lookup "v1" "Secret" .Release.Namespace "s3-credentials" -}}
apiVersion: v1
kind: Secret
metadata:
  name: s3-credentials
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/tenant: 'tenant-{{ .Values.name }}'
type: Opaque
stringData:
  MINIO_ACCESS_KEY_ID: 'tenant-{{ .Values.name }}-user'
  # If the secret exist, keep. Otherwise create a new random one. (To prevent a new password at each sync).
  MINIO_SECRET_ACCESS_KEY: {{ if and $existingSecret $existingSecret.data (hasKey $existingSecret.data "MINIO_SECRET_ACCESS_KEY") }}{{ index $existingSecret.data "MINIO_SECRET_ACCESS_KEY" | b64dec }}{{ else }}{{ randAlphaNum 24 }}{{ end }}
  S3_ENDPOINT: "http://minio.minio.svc.cluster.local:9000"
  BUCKET_REF: "ref-tenant-{{ .Values.name }}"
  BUCKET_WORK: "work-tenant-{{ .Values.name }}"