Skip to content

Storage Backends

OpenDepot stores module archives and provider binaries in a configurable storage backend. Choose the backend that matches your deployment environment.

  •  Amazon S3

    Production object storage using AWS SDK credentials and optional pre-signed provider downloads.

  •  Azure Blob Storage

    Production object storage using Azure identity and optional user delegation SAS URLs.

  •  Google Cloud Storage

    Production object storage using Application Default Credentials and optional signed provider URLs.

  •  Local Filesystem

    Shared-volume storage for development, testing, and air-gapped environments.

  •  Pre-signed URL Redirects

    Let clients download provider binaries directly from object storage instead of proxying them through the Server.

Storage Configuration Scope

storageConfig can be set at multiple levels:

  • Depot.spec.globalConfig.storageConfig applies to resources managed by a Depot unless overridden.
  • Module.spec.moduleConfig.storageConfig configures a module.
  • Provider.spec.providerConfig.storageConfig configures a provider.
  • Inline Version.spec.moduleConfigRef.storageConfig or Version.spec.providerConfigRef.storageConfig configures a version.

Backend Comparison

Feature Amazon S3 Azure Blob Google Cloud Storage Filesystem
Production ready Yes Yes Yes With PVC
Checksum validation SHA256 (native) SHA256 (metadata) SHA256 (metadata) SHA256 (computed)
Authentication AWS SDK v2 defaults DefaultAzureCredential ADC None
Server download route Yes Yes Yes Yes
Shared volume required No No No Yes (PVC or hostPath)
Pre-signed URL redirects Yes Yes Yes No