Question... when working on a on-prem k8s cluster with the metadata service running in S3, where is the right place to put credentials that are to be used by the pods to download the code package from S3?

you can check out this repo for inspiration. It creates a K8s secrets to access data in Minio but the same idea can apply for AWS creds