diff --git a/.gitignore b/.gitignore
index 0c825bcd..24edb7f6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -149,3 +149,6 @@ docker-compose.simcore.yml
 repo.config
 .temp
 .temp/**
+
+# By convention: `.secret` files are gitignored
+**/*.secret
diff --git a/charts/csi-s3/values.yaml.gotmpl b/charts/csi-s3/values.yaml.gotmpl
new file mode 100644
index 00000000..7e6ff4c9
--- /dev/null
+++ b/charts/csi-s3/values.yaml.gotmpl
@@ -0,0 +1,7 @@
+secret:
+  accessKey: {{ requiredEnv "S3_ACCESS_KEY" }}
+  secretKey: {{ requiredEnv "S3_SECRET_KEY" }}
+  region: {{ requiredEnv "S3_REGION" }}
+  endpoint: {{ requiredEnv "S3_ENDPOINT" }}
+storageClass:
+  singleBucket:  {{ requiredEnv "S3_K8S_CSI_BUCKET_NAME" }}
diff --git a/charts/portainer/values.yaml.gotmpl b/charts/portainer/values.yaml.gotmpl
index e89f2457..1f5f5c44 100644
--- a/charts/portainer/values.yaml.gotmpl
+++ b/charts/portainer/values.yaml.gotmpl
@@ -18,6 +18,12 @@ serviceAccount:
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
   name: portainer-sa-clusteradmin
+persistence:
+  enabled: true
+  size: "1Gi"
+  annotations: {}
+  storageClass: "csi-s3"
+  existingClaim:
 
 podAnnotations: {}
 podLabels: {}