S3 buckets
Create S3-compatible object storage buckets, manage access keys, and browse objects from the console.
Buckets provide S3-compatible object storage inside your project. Any tool or SDK that speaks the S3 protocol can read and write objects using the bucket's endpoint and an access key; the console also includes a built-in object browser.
Buckets are available on storage pools whose driver supports object storage. If bucket creation is unavailable in your deployment, ask your administrator.
Create a bucket
-
Go to Storage → Buckets and click Create bucket.
-
Fill in the form:
Field Notes Storage poolMust be a bucket-capable pool. Cannot be changed later. NameCannot be changed later. SizeQuota for the bucket's total size. DescriptionOptional. -
Click Create.
The bucket list shows each bucket's name, pool, size, description, its S3 URL, and the number of access keys. The S3 endpoint address in the URL is specific to your deployment — use the value shown in the S3 URL column, or ask your administrator if it is not reachable from where you need it.
You can edit a bucket's size quota and description later; the name and pool are fixed. To remove buckets, use the delete action on a bucket or select several in the list for bulk delete.
Manage access keys
S3 clients authenticate with an access key and secret key pair. Each key has a role:
Admin— full read/write access to the bucket.Read-only— can list and download objects but not modify them.
To create a key:
- Open the bucket and go to the Keys tab.
- Click Create key and set a name, a role, and optionally a description.
- Leave the
Access KeyandSecret Keyfields empty to have credentials generated for you, or paste your own values. - Save, then copy the access key and secret key into your S3 client configuration.
You can edit or delete keys from the same tab. Delete a key to revoke its access immediately.
Browse objects
The Objects tab on a bucket is a built-in S3 browser:
- Navigate folders — object keys with
/separators are shown as a folder tree, and you can drill into prefixes and search within them. - Upload files from your machine, with a progress bar and cancel.
- Download or delete individual objects.
The object browser requires the deployment's S3 gateway to be configured; if the tab shows a gateway notice instead of your objects, contact your administrator.
Use a bucket from an S3 client
Point your client at the bucket's S3 URL and authenticate with an access key. For example, with the AWS CLI:
aws s3 ls s3://my-bucket \
--endpoint-url https://<s3-endpoint-from-console>
Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY to the key pair you created in the Keys tab.