Using S3 as a storage source means that Spinnaker will store all of its persistent data in a Bucket.


You need an AWS Account, and an associated access key (secret access key & access key id). The service in charge of storage does not support STS AssumeRole style auth, so the access key & id are required.

Editing your Storage Settings

If you do not already have a bucket that you want to use, Halyard will create one for you (either with the --bucket name provided, or with a random string generated matching spin-<uuid>). In either case, you will need to to supply the new bucket’s desired region (e.g. REGION=us-west-1).

To configure the S3 settings, run the following (notice, do not supply the value of --secret-access-key on the command line, you will be prompted to enter the value on STDIN once the command has started running):

hal config storage s3 edit \
    --access-key-id $YOUR_SECRET_KEY_ID \
    --secret-access-key \
    --region $REGION

If you instead already have a bucket you want to use, or you want to change the bucket’s root folder, check out the additional command parameters in the command reference.

Finally, set the storage source to S3:

hal config storage edit --type s3