stratumctl objectstorage
Manage S3 object storage — buckets, access keys, objects
stratumctl objectstorage [flags]Aliases: s3, object-storage
Subcommands
Section titled “Subcommands”stratumctl objectstorage access-keys: Manage per-project S3 access keysstratumctl objectstorage buckets: Manage S3 bucketsstratumctl objectstorage health: Aggregate object-storage health (admin): bucket counts, stuck age, reconciler, RGW reachabilitystratumctl objectstorage objects: List / put / get / delete / presign objects (via the CP data path)
stratumctl objectstorage access-keys
Section titled “stratumctl objectstorage access-keys”Manage per-project S3 access keys
stratumctl objectstorage access-keys [flags]Aliases: access-key, keys
Subcommands
Section titled “Subcommands”stratumctl objectstorage access-keys create: Issue an S3 access key (the secret is shown ONCE)stratumctl objectstorage access-keys delete: Revoke an S3 access keystratumctl objectstorage access-keys get-secret: Retrieve an access key’s secret (audited, Critical)stratumctl objectstorage access-keys list: List a project’s S3 access keys (never secrets)
stratumctl objectstorage access-keys create
Section titled “stratumctl objectstorage access-keys create”Issue an S3 access key (the secret is shown ONCE)
stratumctl objectstorage access-keys create [flags]Examples
Section titled “Examples”stratumctl objectstorage access-keys createstratumctl objectstorage access-keys create --display-name terraform| Flag | Type | Default | Description |
|---|---|---|---|
--display-name |
string | Human-friendly label | |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage access-keys delete
Section titled “stratumctl objectstorage access-keys delete”Revoke an S3 access key
stratumctl objectstorage access-keys delete <access-key-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage access-keys delete K3M9X2ABQT7K2M9X4QAB| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage access-keys get-secret
Section titled “stratumctl objectstorage access-keys get-secret”Retrieve an access key’s secret (audited, Critical)
stratumctl objectstorage access-keys get-secret <access-key-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage access-keys get-secret K3M9X2ABQT7K2M9X4QAB| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage access-keys list
Section titled “stratumctl objectstorage access-keys list”List a project’s S3 access keys (never secrets)
stratumctl objectstorage access-keys list [flags]Examples
Section titled “Examples”stratumctl objectstorage access-keys liststratumctl objectstorage access-keys list --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets
Section titled “stratumctl objectstorage buckets”Manage S3 buckets
stratumctl objectstorage buckets [flags]Aliases: bucket
Subcommands
Section titled “Subcommands”stratumctl objectstorage buckets acl: Set a bucket’s canned S3 ACL (–allow-public for a public-* ACL)stratumctl objectstorage buckets create: Create an S3 bucket (desired-state; the reconciler provisions RGW)stratumctl objectstorage buckets delete: Delete an S3 bucket (use –force to purge a non-empty bucket)stratumctl objectstorage buckets encryption: Set a bucket’s default server-side encryption (AES256=SSE-S3, aws:kms=SSE-KMS)stratumctl objectstorage buckets get: Describe an S3 bucket (incl. client endpoint URLs)stratumctl objectstorage buckets lifecycle: Manage a bucket’s lifecycle rulesstratumctl objectstorage buckets list: List S3 buckets in a projectstratumctl objectstorage buckets policy: Manage a bucket’s S3 policystratumctl objectstorage buckets settings: Show a bucket’s data-management settings (versioning/encryption)stratumctl objectstorage buckets versioning: Set object versioning on a bucket
stratumctl objectstorage buckets acl
Section titled “stratumctl objectstorage buckets acl”Set a bucket’s canned S3 ACL (–allow-public for a public-* ACL)
stratumctl objectstorage buckets acl <bucket-id> <private|public-read|public-read-write|authenticated-read> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets acl bkt-6k2m8x4q7a privatestratumctl objectstorage buckets acl bkt-6k2m8x4q7a public-read --allow-public| Flag | Type | Default | Description |
|---|---|---|---|
--allow-public |
bool | false |
Accept a public-* ACL (grants anonymous access) |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets create
Section titled “stratumctl objectstorage buckets create”Create an S3 bucket (desired-state; the reconciler provisions RGW)
stratumctl objectstorage buckets create <name> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets create app-assetsstratumctl objectstorage buckets create app-assets --region lab-1 --tag env=prod| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) | |
--region |
string | Region (optional) | |
--tag |
stringArray | Tag key=value (repeatable) |
stratumctl objectstorage buckets delete
Section titled “stratumctl objectstorage buckets delete”Delete an S3 bucket (use –force to purge a non-empty bucket)
stratumctl objectstorage buckets delete <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets delete bkt-6k2m8x4q7astratumctl objectstorage buckets delete bkt-6k2m8x4q7a --force| Flag | Type | Default | Description |
|---|---|---|---|
--force |
bool | false |
Force-purge: delete ALL objects + versions before removing (destructive) |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets encryption
Section titled “stratumctl objectstorage buckets encryption”Set a bucket’s default server-side encryption (AES256=SSE-S3, aws:kms=SSE-KMS)
stratumctl objectstorage buckets encryption <bucket-id> <none|AES256|aws:kms> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets encryption bkt-6k2m8x4q7a AES256stratumctl objectstorage buckets encryption bkt-6k2m8x4q7a none| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets get
Section titled “stratumctl objectstorage buckets get”Describe an S3 bucket (incl. client endpoint URLs)
stratumctl objectstorage buckets get <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets get bkt-6k2m8x4q7astratumctl objectstorage buckets get bkt-6k2m8x4q7a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets lifecycle
Section titled “stratumctl objectstorage buckets lifecycle”Manage a bucket’s lifecycle rules
stratumctl objectstorage buckets lifecycle [flags]Subcommands
Section titled “Subcommands”stratumctl objectstorage buckets lifecycle clear: Remove all lifecycle rules from a bucketstratumctl objectstorage buckets lifecycle get: Show a bucket’s lifecycle rules documentstratumctl objectstorage buckets lifecycle set: Set a bucket’s lifecycle rules from a JSON document
stratumctl objectstorage buckets lifecycle clear
Section titled “stratumctl objectstorage buckets lifecycle clear”Remove all lifecycle rules from a bucket
stratumctl objectstorage buckets lifecycle clear <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets lifecycle clear bkt-6k2m8x4q7a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets lifecycle get
Section titled “stratumctl objectstorage buckets lifecycle get”Show a bucket’s lifecycle rules document
stratumctl objectstorage buckets lifecycle get <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets lifecycle get bkt-6k2m8x4q7a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets lifecycle set
Section titled “stratumctl objectstorage buckets lifecycle set”Set a bucket’s lifecycle rules from a JSON document
stratumctl objectstorage buckets lifecycle set <bucket-id> --rules-file <file> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets lifecycle set bkt-6k2m8x4q7a --rules-file lifecycle.json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) | |
--rules-file |
string | Path to a file with the lifecycle rules JSON |
stratumctl objectstorage buckets list
Section titled “stratumctl objectstorage buckets list”List S3 buckets in a project
stratumctl objectstorage buckets list [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets liststratumctl objectstorage buckets list --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets policy
Section titled “stratumctl objectstorage buckets policy”Manage a bucket’s S3 policy
stratumctl objectstorage buckets policy [flags]Subcommands
Section titled “Subcommands”stratumctl objectstorage buckets policy clear: Remove a bucket’s S3 policystratumctl objectstorage buckets policy get: Show a bucket’s S3 policystratumctl objectstorage buckets policy set: Set a bucket’s S3 policy (–allow-public to accept a public grant)
stratumctl objectstorage buckets policy clear
Section titled “stratumctl objectstorage buckets policy clear”Remove a bucket’s S3 policy
stratumctl objectstorage buckets policy clear <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets policy clear bkt-6k2m8x4q7a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets policy get
Section titled “stratumctl objectstorage buckets policy get”Show a bucket’s S3 policy
stratumctl objectstorage buckets policy get <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets policy get bkt-6k2m8x4q7a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets policy set
Section titled “stratumctl objectstorage buckets policy set”Set a bucket’s S3 policy (–allow-public to accept a public grant)
stratumctl objectstorage buckets policy set <bucket-id> --policy-file <file> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets policy set bkt-6k2m8x4q7a --policy-file policy.jsonstratumctl objectstorage buckets policy set bkt-6k2m8x4q7a --policy-file public-read.json --allow-public| Flag | Type | Default | Description |
|---|---|---|---|
--allow-public |
bool | false |
Accept a policy that grants public/anonymous access |
--policy-file |
string | Path to a file with the S3 policy JSON | |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets settings
Section titled “stratumctl objectstorage buckets settings”Show a bucket’s data-management settings (versioning/encryption)
stratumctl objectstorage buckets settings <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets settings bkt-6k2m8x4q7astratumctl objectstorage buckets settings bkt-6k2m8x4q7a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage buckets versioning
Section titled “stratumctl objectstorage buckets versioning”Set object versioning on a bucket
stratumctl objectstorage buckets versioning <bucket-id> <Enabled|Suspended> [flags]Examples
Section titled “Examples”stratumctl objectstorage buckets versioning bkt-6k2m8x4q7a Enabledstratumctl objectstorage buckets versioning bkt-6k2m8x4q7a Suspended| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage health
Section titled “stratumctl objectstorage health”Aggregate object-storage health (admin): bucket counts, stuck age, reconciler, RGW reachability
stratumctl objectstorage health [flags]Examples
Section titled “Examples”stratumctl objectstorage healthstratumctl objectstorage health --output jsonstratumctl objectstorage objects
Section titled “stratumctl objectstorage objects”List / put / get / delete / presign objects (via the CP data path)
stratumctl objectstorage objects [flags]Aliases: object
Subcommands
Section titled “Subcommands”stratumctl objectstorage objects delete: Delete an objectstratumctl objectstorage objects list: List objects in a bucketstratumctl objectstorage objects presign: Get a presigned URL for an object (GET download or PUT upload)stratumctl objectstorage objects put: Upload an object (proxied through the control plane)
stratumctl objectstorage objects delete
Section titled “stratumctl objectstorage objects delete”Delete an object
stratumctl objectstorage objects delete <bucket-id> --key <key> [flags]Examples
Section titled “Examples”stratumctl objectstorage objects delete bkt-6k2m8x4q7a --key reports/2026-10.csv| Flag | Type | Default | Description |
|---|---|---|---|
--key |
string | Object key | |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage objects list
Section titled “stratumctl objectstorage objects list”List objects in a bucket
stratumctl objectstorage objects list <bucket-id> [flags]Examples
Section titled “Examples”stratumctl objectstorage objects list bkt-6k2m8x4q7astratumctl objectstorage objects list bkt-6k2m8x4q7a --prefix reports/ --output json| Flag | Type | Default | Description |
|---|---|---|---|
--prefix |
string | Only list keys with this prefix | |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage objects presign
Section titled “stratumctl objectstorage objects presign”Get a presigned URL for an object (GET download or PUT upload)
stratumctl objectstorage objects presign <bucket-id> --key <key> [flags]Examples
Section titled “Examples”stratumctl objectstorage objects presign bkt-6k2m8x4q7a --key reports/2026-10.csvstratumctl objectstorage objects presign bkt-6k2m8x4q7a --key uploads/new.csv --method PUT --expires 3600| Flag | Type | Default | Description |
|---|---|---|---|
--expires |
int | 0 |
URL lifetime in seconds (default 900) |
--key |
string | Object key | |
--method |
string | GET |
GET (download) or PUT (upload) |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |
stratumctl objectstorage objects put
Section titled “stratumctl objectstorage objects put”Upload an object (proxied through the control plane)
stratumctl objectstorage objects put <bucket-id> --key <key> --file <path> [flags]Examples
Section titled “Examples”stratumctl objectstorage objects put bkt-6k2m8x4q7a --key reports/2026-10.csv --file./2026-10.csv| Flag | Type | Default | Description |
|---|---|---|---|
--file |
string | Local file to upload | |
--key |
string | Object key | |
--project |
string | Project ID (defaults to STRATUM_PROJECT or profile project_id) |