apiVersion: batch/v1
kind: Job
metadata:
  name: convert-tls-secret
  namespace: minio-tenant
spec:
  template:
    spec:
      restartPolicy: OnFailure
      containers:
        - name: sync-secret
          image: bitnami/kubectl:latest
          command:
            - /bin/sh
            - -c
            - |
              kubectl get secret panic-minio-tls -n minio-tenant -o json | jq '{
                apiVersion: "v1",
                kind: "Secret",
                metadata: {
                  name: "panic-minio-tls-converted",
                  namespace: "minio-tenant"
                },
                type: "Opaque",
                data: {
                  "public.crt": .data["tls.crt"],
                  "private.key": .data["tls.key"]
                }
              }' | kubectl apply -f -