We received S3 credentials in T425973 and have successfully used them locally to create and interact with buckets, both manually and via an Airflow DAG (T426764).

Now we would like to use these credentials to access an S3 bucket from a Kubernetes container in DSE.

A draft for the corresponding helm chart exists as a CR. In there we currently reference the credentials in values.yaml:

init:
  image: wdqs-backend-init
  version: latest
  config:
    public:
      KAFKA_GROUP: wdqs-updater-${WDQS_NODE_NAME}
      ...
    private:
      S3_ACCESS_KEY: accesskey
      S3_SECRET_KEY: privatekey

The two keys on the bottom are the ones in question. As of this writing the chart is in draft and does surely contain issues. Feedback on how to use the secret better would be welcome.
For a quick overview of the targeted architecture please see the WDQS Gitlab overview page and/or simply ping the Wikidata platform team.