diff --git a/deploy/prod_secrets.yaml b/deploy/prod_secrets.yaml
index 87db1e60a5262c2d6a01d5fa06a722dd2d0f2c1c_ZGVwbG95L3Byb2Rfc2VjcmV0cy55YW1s..d6faddfabe1f46a2950c18703d2db2957c9b2dbd_ZGVwbG95L3Byb2Rfc2VjcmV0cy55YW1s 100644
--- a/deploy/prod_secrets.yaml
+++ b/deploy/prod_secrets.yaml
@@ -1,9 +1,11 @@
 cwPassword: ENC[AES256_GCM,data:7dhH310IvVLap97ETpNxvA==,iv:jNVjpKOpwGcsnH0rSWCJ2UMK7PAu2zZPkCb+qvunbCg=,tag:JXhlDgKXkM/FQRMytZJDVw==,type:str]
 cwDbPassword: ENC[AES256_GCM,data:wR5PM4hCe+7+kmQnhP+nPi55tWlcHvPK+ZpHntPxes/qt/AWFNcJnOCKga0=,iv:xA5SaVJiSrlb+1+F3wTK9Fb/3X6Jg4LQxIOEt8+bDQs=,tag:Ec0JpHeISVV8+xE4+q4Qxg==,type:str]
 redisSessionsSecret: ENC[AES256_GCM,data:06HgZOWPj+IukWSw39jBIA==,iv:phE0bAAxQFF1jluls9bmdcjJFxA0yN7V3j5hRJhe+8Q=,tag:6IXJCNg/SPTjBxSim6U3eg==,type:str]
+s3AccessKeyId: ENC[AES256_GCM,data:dzDyGZGhu/sb4aemkc6b2E7T388=,iv:4nDNIGSOROJz7l1JIZW8GQF78HuGq0GDKp++17l6gkM=,tag:pSd5hEFnDnUmldOijZOC8w==,type:str]
+s3AccessKeySecret: ENC[AES256_GCM,data:l2a70R1JmTSWDlS+AZD5fg6N2KDSgYRuTHv/tZsPwDbIzCD33VQMEw==,iv:4sFp48HmPspjGDLc1LYp2tCVEI1DrspAS8p/1qe+RMg=,tag:+8F2glqxZf2FBnJZrwGc5Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
@@ -4,11 +6,11 @@
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-02-06T15:50:27Z"
-    mac: ENC[AES256_GCM,data:bMsQk6rd4vXxqAUJUSH2akuA+qKY970tDONYG3gMQOvayXGpSL+RG4zslQSG1GXiEwGxjKFKnJ+rg8d3/5v5c46fzM3qKK3IHf6+CeHbOWGXH1bKN/ov76XwxKn53wDZvSAX/kwCwZ2MCcQw6Y8sCXypgHOHOxZWlKv36LBaWtQ=,iv:weBr5bnipSVzjU/MSOWpk8+rUrmTX7Se72uPNt1cHLY=,tag:q1QLna6PxTzJGWzTvjYlBw==,type:str]
+    lastmodified: "2024-03-20T14:25:04Z"
+    mac: ENC[AES256_GCM,data:6WdkS2+wQiv3QefobLtU6xyg4y1znWWpbxdt7E9RRo4/IL240SpXBjGe3cIxW/qlSBIhPv8xZEYVNLeUNjVoKJmbKakOmIiG2weiqiKOMGVQKhbhYCl/BEwlYkKbtgdfTWcz1DyjlnAAvOnU3r/nRuWtvx2zWX4QLWWqvkQMVw0=,iv:Ku7HnM/gT0i//pgzY2jrP2/wh0e/lhzSsvCas27v2t4=,tag:cbsmcKlkLUORvuzsnAdFDQ==,type:str]
     pgp:
         - created_at: "2024-02-06T15:50:27Z"
           enc: |-
diff --git a/deploy/values.yaml.gotmpl b/deploy/values.yaml.gotmpl
index 87db1e60a5262c2d6a01d5fa06a722dd2d0f2c1c_ZGVwbG95L3ZhbHVlcy55YW1sLmdvdG1wbA==..d6faddfabe1f46a2950c18703d2db2957c9b2dbd_ZGVwbG95L3ZhbHVlcy55YW1sLmdvdG1wbA== 100644
--- a/deploy/values.yaml.gotmpl
+++ b/deploy/values.yaml.gotmpl
@@ -37,6 +37,7 @@
 dropDbAfterDeletingHelmRelease: {{ .StateValues.dropDbAfterDeletingHelmRelease }}
 
 env:
+  AWS_S3_ENDPOINT_URL: https://minio.k.intra.logilab.fr
   CW_ACCESS_CONTROL_ALLOW_HEADERS: "*"
   CW_ACCESS_CONTROL_ALLOW_METHODS: GET, POST, OPTIONS
   CW_ACCESS_CONTROL_ALLOW_ORIGIN: https://rodolf.k.intra.logilab.fr
@@ -46,5 +47,6 @@
   CW_DB_NAME: rodolf
   CW_DB_USER: rodolf
   PYRAMID_API_ENABLE_LOGIN_ROUTE: "yes"
+  RODOLF_S3_BUCKET: rodolf
 
 secretEnv:
@@ -49,5 +51,7 @@
 
 secretEnv:
+  AWS_ACCESS_KEY_ID: {{ .StateValues.s3AccessKeyId }}
+  AWS_SECRET_ACCESS_KEY: {{ .StateValues.s3AccessKeySecret }}
   CW_PASSWORD: {{ .StateValues.cwPassword }}
   CW_DB_PASSWORD: {{ .StateValues.cwDbPassword }}
   REDIS_SESSIONS_SECRET: {{ .StateValues.redisSessionsSecret }}