clean install v9 login-client secret not found instanceHost not found zitadel-login pod

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: zitadel
spec:
  chart:
    spec:
      chart: zitadel
      version: "9.13.0"
      sourceRef:
        kind: HelmRepository
        name: zitadel
        namespace: zitadel
  values:
    env:
      - name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_ADDRESS
        value: admin@admin.com
      - name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD
        value: RootPassword1!
    replicaCount: 1
    zitadel:
      masterkey: vault:secret/data/zitadel#MASTERKEY
      configmapConfig:
        ExternalSecure: false
        TLS:
          Enabled: false
      secretConfig:
        ExternalDomain: &host "zitadel.xxx,xxx"
        ExternalSecure: true
        ExternalPort: 443
        Database:
          ...