diff --git a/apis/objectstorage.k8s.io/v1alpha1/openapi_generated.go b/apis/objectstorage.k8s.io/v1alpha1/openapi_generated.go
index 424fbde3..251d973f 100644
--- a/apis/objectstorage.k8s.io/v1alpha1/openapi_generated.go
+++ b/apis/objectstorage.k8s.io/v1alpha1/openapi_generated.go
@@ -528,10 +528,9 @@ func schema_container_object_storage_interface_api_apis_objectstoragek8sio_v1alp
 							Format: "",
 						},
 					},
-					"mintedSecretName": {
+					"mintedSecret": {
 						SchemaProps: spec.SchemaProps{
-							Type:   []string{"string"},
-							Format: "",
+							Ref: ref("k8s.io/api/core/v1.SecretReference"),
 						},
 					},
 					"accountID": {
@@ -549,6 +548,8 @@ func schema_container_object_storage_interface_api_apis_objectstoragek8sio_v1alp
 				},
 			},
 		},
+		Dependencies: []string{
+			"k8s.io/api/core/v1.SecretReference"},
 	}
 }
 
diff --git a/apis/objectstorage.k8s.io/v1alpha1/types.go b/apis/objectstorage.k8s.io/v1alpha1/types.go
index ce9bf614..76c87436 100644
--- a/apis/objectstorage.k8s.io/v1alpha1/types.go
+++ b/apis/objectstorage.k8s.io/v1alpha1/types.go
@@ -250,7 +250,7 @@ type BucketAccessStatus struct {
 	Message string `json:"message,omitempty"`
 
 	// +optional
-	MintedSecretName string `json:"mintedSecretName,omitempty"`
+	MintedSecret *corev1.SecretReference `json:"mintedSecret,omitempty"`
 
 	// +optional
 	AccountID string `json:"accountID,omitempty"`
diff --git a/apis/objectstorage.k8s.io/v1alpha1/zz_generated.deepcopy.go b/apis/objectstorage.k8s.io/v1alpha1/zz_generated.deepcopy.go
index 920365ec..9ea478a4 100644
--- a/apis/objectstorage.k8s.io/v1alpha1/zz_generated.deepcopy.go
+++ b/apis/objectstorage.k8s.io/v1alpha1/zz_generated.deepcopy.go
@@ -75,7 +75,7 @@ func (in *BucketAccess) DeepCopyInto(out *BucketAccess) {
 	out.TypeMeta = in.TypeMeta
 	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
 	in.Spec.DeepCopyInto(&out.Spec)
-	out.Status = in.Status
+	in.Status.DeepCopyInto(&out.Status)
 	return
 }
 
@@ -330,6 +330,11 @@ func (in *BucketAccessSpec) DeepCopy() *BucketAccessSpec {
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *BucketAccessStatus) DeepCopyInto(out *BucketAccessStatus) {
 	*out = *in
+	if in.MintedSecret != nil {
+		in, out := &in.MintedSecret, &out.MintedSecret
+		*out = new(v1.SecretReference)
+		**out = **in
+	}
 	return
 }
 
diff --git a/crds/objectstorage.k8s.io_bucketaccesses.yaml b/crds/objectstorage.k8s.io_bucketaccesses.yaml
index dd84ec95..ee6d9c75 100644
--- a/crds/objectstorage.k8s.io_bucketaccesses.yaml
+++ b/crds/objectstorage.k8s.io_bucketaccesses.yaml
@@ -97,8 +97,16 @@ spec:
                 type: string
               message:
                 type: string
-              mintedSecretName:
-                type: string
+              mintedSecret:
+                description: SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace
+                properties:
+                  name:
+                    description: Name is unique within a namespace to reference a secret resource.
+                    type: string
+                  namespace:
+                    description: Namespace defines the space within which the secret name must be unique.
+                    type: string
+                type: object
             type: object
         type: object
     served: true