diff --git a/demos/spark-k8s-anomaly-detection-taxi-data/load-test-data.yaml b/demos/spark-k8s-anomaly-detection-taxi-data/load-test-data.yaml
index 299d473a..0276431c 100644
--- a/demos/spark-k8s-anomaly-detection-taxi-data/load-test-data.yaml
+++ b/demos/spark-k8s-anomaly-detection-taxi-data/load-test-data.yaml
@@ -10,13 +10,40 @@ spec:
         - name: load-ny-taxi-data
           image: "bitnami/minio:2022-debian-10"
           # yamllint disable-line rule:line-length
-          command: ["bash", "-c", "cd /tmp && for month in 2020-09 2020-10 2020-11 2020-12; do curl -O https://repo.stackable.tech/repository/misc/ny-taxi-data/fhvhv_tripdata_$month.parquet && mc --insecure alias set minio http://minio:9000/ $(cat /minio-s3-credentials/accessKey) $(cat /minio-s3-credentials/secretKey) && mc cp fhvhv_tripdata_$month.parquet minio/demo/ny-taxi-data/raw/ && mc mb --ignore-existing minio/prediction; done"]
+          command:
+            - "bash"
+            - "-ce"
+            - |
+              cd /tmp
+              for month in 2020-09 2020-10 2020-11 2020-12; do
+                curl -O https://repo.stackable.tech/repository/misc/ny-taxi-data/fhvhv_tripdata_$month.parquet
+                mc alias set minio https://minio.default.svc.cluster.local:9000/ $(cat /minio-s3-credentials/accessKey) $(cat /minio-s3-credentials/secretKey)
+                mc cp fhvhv_tripdata_$month.parquet minio/demo/ny-taxi-data/raw/
+                mc mb --ignore-existing minio/prediction;
+              done
           volumeMounts:
             - name: minio-s3-credentials
               mountPath: /minio-s3-credentials
+            - name: tls
+              mountPath: /.mc/certs/CAs
       volumes:
         - name: minio-s3-credentials
           secret:
             secretName: minio-s3-credentials
+        - name: tls
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: |-
+                    service=minio
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
       restartPolicy: OnFailure
   backoffLimit: 50
diff --git a/stacks/stacks-v2.yaml b/stacks/stacks-v2.yaml
index 3296ce73..b4bf0069 100644
--- a/stacks/stacks-v2.yaml
+++ b/stacks/stacks-v2.yaml
@@ -254,7 +254,7 @@ stacks:
       - minio
       - s3
     manifests:
-      - helmChart: https://raw.githubusercontent.com/stackabletech/demos/main/stacks/_templates/minio.yaml
+      - plainYaml: https://raw.githubusercontent.com/stackabletech/demos/main/stacks/_templates/minio-tls/rendered-chart.yaml
       - helmChart: https://raw.githubusercontent.com/stackabletech/demos/main/stacks/_templates/postgresql-hive.yaml
       - helmChart: https://raw.githubusercontent.com/stackabletech/demos/main/stacks/_templates/postgresql-hive-iceberg.yaml
       - helmChart: https://raw.githubusercontent.com/stackabletech/demos/main/stacks/_templates/postgresql-superset.yaml