diff --git a/infra/k8s/gitlab/values.yaml b/infra/k8s/gitlab/values.yaml
index 581550595..e10db55c8 100644
--- a/infra/k8s/gitlab/values.yaml
+++ b/infra/k8s/gitlab/values.yaml
@@ -57,6 +57,16 @@ global:
       connection:
         secret: gitlab-s3-credentials
         key: connection
+    # Terraform/OpenTofu state object storage. MUST be present — without it the
+    # Terraform::StateUploader has no object store and every TF-state API call 403s
+    # ("Object Storage is not enabled for Terraform::StateUploader"). State files already
+    # live in foxhunt-gitlab-artifacts (6b/86/<sha256(project_id)>/<state>/<ver>.tfstate).
+    terraformState:
+      enabled: true
+      bucket: foxhunt-gitlab-artifacts
+      connection:
+        secret: gitlab-s3-credentials
+        key: connection
     gitlab_kas:
       enabled: false