diff --git a/deploy/helm/csi-s3/README.md b/deploy/helm/csi-s3/README.md
index 71abd1a..d6fac03 100644
--- a/deploy/helm/csi-s3/README.md
+++ b/deploy/helm/csi-s3/README.md
@@ -35,7 +35,8 @@ The following table lists all configuration parameters and their default values.
 | `secret.accessKey`           | S3 Access Key                                                          |                                                        |
 | `secret.secretKey`           | S3 Secret Key                                                          |                                                        |
 | `secret.endpoint`            | Endpoint                                                               | https://storage.yandexcloud.net                        |
-| `secret.region`              | Region                                                                 |                         |
+| `secret.region`              | Region                                                                 |                                                        |
 | `tolerations.all`            | Tolerate all taints by the CSI-S3 node driver (mounter)                | false                                                  |
 | `tolerations.node`           | Custom tolerations for the CSI-S3 node driver (mounter)                | []                                                     |
 | `tolerations.controller`     | Custom tolerations for the CSI-S3 controller (provisioner)             | []                                                     |
+| `imagePullSecrets`           | List of image pull secrets                                             | []                                                     |
diff --git a/deploy/helm/csi-s3/templates/csi-s3.yaml b/deploy/helm/csi-s3/templates/csi-s3.yaml
index 9732b6c..f2f8b95 100644
--- a/deploy/helm/csi-s3/templates/csi-s3.yaml
+++ b/deploy/helm/csi-s3/templates/csi-s3.yaml
@@ -50,6 +50,10 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
       serviceAccount: csi-s3
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: driver-registrar
           image: {{ .Values.images.registrar }}
diff --git a/deploy/helm/csi-s3/templates/provisioner.yaml b/deploy/helm/csi-s3/templates/provisioner.yaml
index 7b5102c..264b14a 100644
--- a/deploy/helm/csi-s3/templates/provisioner.yaml
+++ b/deploy/helm/csi-s3/templates/provisioner.yaml
@@ -81,6 +81,10 @@ spec:
       nodeSelector:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: csi-provisioner
           image: {{ .Values.images.provisioner }}
diff --git a/deploy/helm/csi-s3/values.yaml b/deploy/helm/csi-s3/values.yaml
index efabe17..9371f7d 100644
--- a/deploy/helm/csi-s3/values.yaml
+++ b/deploy/helm/csi-s3/values.yaml
@@ -48,3 +48,9 @@ tolerations:
 nodeSelector: {}
 
 kubeletPath: /var/lib/kubelet
+
+# Image pull secrets for private registries
+# Example:
+# imagePullSecrets:
+#   - name: myregistrykey
+imagePullSecrets: []