From 8624902722dea34da7eb5e14d7a56c6762ef71bb Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Thu, 24 Jul 2025 12:54:48 -0500
Subject: [PATCH] Expose backup secrets to Longhorn

---
 manifests/secrets/longhorn.yaml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/manifests/secrets/longhorn.yaml b/manifests/secrets/longhorn.yaml
index 28d7402..4c8f037 100644
--- a/manifests/secrets/longhorn.yaml
+++ b/manifests/secrets/longhorn.yaml
@@ -31,3 +31,31 @@ spec:
       remoteRef:
         key: cbf2bf72-c129-437a-8a75-b30f005d29ec
         property: password
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: longhorn-minio
+  namespace: longhorn-system
+spec:
+  target:
+    name: longhorn-minio
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        AWS_ACCESS_KEY_ID: "{{ .username }}"
+        AWS_SECRET_ACCESS_KEY: "{{ .password }}"
+        AWS_ENDPOINTS: "http://s3.thehellings.lan:9000/"
+  secretStoreRef:
+    name: bitwarden-login
+    kind: ClusterSecretStore
+  data:
+    - secretKey: username
+      remoteRef:
+        key: 685b29c6-9264-4e60-ba4a-b2ea005a5d7b
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: 685b29c6-9264-4e60-ba4a-b2ea005a5d7b
+        property: password