Object Storage (S3-Compatible)

Yes. Leafcloud object storage is fully compatible with Terraform's S3 backend:

terraform {
  backend "s3" {
    bucket                      = "tf-state"
    key                         = "my-project/terraform.tfstate"
    region                      = "europe-nl-ams1"
    access_key                  = "YOUR-ACCESS-KEY"
    secret_key                  = "YOUR-SECRET-KEY"
    skip_credentials_validation = true
    skip_requesting_account_id  = true
    skip_s3_checksum            = true
    skip_region_validation      = true
    use_path_style              = true
    endpoints = {
      s3  = "https://leafcloud.store"
      sts = "https://leafcloud.store"
    }
  }
}

See our full Terraform backend tutorial for complete setup instructions.

Yes. Velero works seamlessly with Leafcloud object storage for Kubernetes backup and disaster recovery. Our S3-compatible storage provides reliable, cost-effective backup storage for your Kubernetes clusters.

Prerequisites:

1. Create EC2 credentials: openstack ec2 credentials create
2. Create a bucket for backups (e.g., velero-backups) via dashboard or CLI
3. Install Velero CLI on your local machine

Setup Steps:

1. Create credentials file (velero-credentials):

[default]
aws_access_key_id=YOUR-ACCESS-KEY
aws_secret_access_key=YOUR-SECRET-KEY

2. Install Velero in your cluster:

velero install \
  --provider aws \
  --plugins velero/velero-plugin-for-aws:v1.5.0 \
  --bucket velero-backups \
  --secret-file ./velero-credentials \
  --backup-location-config region=europe-nl-ams1,s3ForcePathStyle=true,s3Url=https://leafcloud.store

3. Create your first backup:

velero backup create my-backup --include-namespaces default

4. Verify backup:

velero backup describe my-backup

Best Practices:

• Scheduled backups: Set up daily/hourly backups with velero schedule create
• Retention policies: Configure backup TTL to manage storage costs
• Namespace selection: Use --include-namespaces or --exclude-namespaces for targeted backups
• PV backups: Enable volume snapshots with --snapshot-volumes=true
• Disaster recovery: Test restore procedures regularly with velero restore create

Cost Benefits: At €0.006/GB/month, backing up a 100GB Kubernetes cluster costs only €0.60/month. No egress fees within Leafcloud infrastructure means free restore operations.

EU Data Sovereignty: All backups stay in Amsterdam datacenter under EU jurisdiction—critical for GDPR compliance and data residency requirements.

No, versioning is not currently enabled on our Ceph cluster.

If versioning is a critical requirement for your use case, contact support to discuss options. Enabling versioning requires infrastructure changes and typically takes 4-8 weeks.

Alternatives:

• Implement application-level versioning (store versions with different object keys)
• Use backup tools that handle versioning independently (e.g., Kopia, Restic)

Leafcloud object storage provides multiple access methods for different workflows, all using the S3-compatible API at leafcloud.store endpoint.

1. OpenStack Dashboard (Web UI): Navigate to Object Store > Containers at create.leaf.cloud. Upload files, create containers, and manage permissions through the web interface. Best for manual file management and quick uploads.

2. S3-Compatible Clients: Use any S3-compatible tool with the endpoint https://leafcloud.store and region europe-nl-ams1:

• AWS CLI: aws s3 ls --endpoint-url https://leafcloud.store
• rclone: Configure with S3-compatible provider type
• Cyberduck: Add S3 connection with custom endpoint
• s3cmd: Configure with leafcloud.store endpoint
• MinIO Client (mc): mc alias set leafcloud https://leafcloud.store

3. Programmatic Access (SDKs):

• Python (boto3): Configure with endpoint_url='https://leafcloud.store'
• Node.js (AWS SDK): Set endpoint and region in client config
• Go (AWS SDK): Use custom endpoint resolver
• Java/C#/.NET: All AWS SDKs work with custom endpoint

EC2 Credentials Setup: S3 access requires EC2 credentials (separate from dashboard login). Create them via OpenStack CLI:

openstack ec2 credentials create

This returns an access_key and secret_key for S3 API authentication. Store these securely—the secret is only shown once.

Environment Variables Example:

export AWS_ACCESS_KEY_ID="your-access-key"
export AWS_SECRET_ACCESS_KEY="your-secret-key"
export AWS_ENDPOINT_URL="https://leafcloud.store"
export AWS_DEFAULT_REGION="europe-nl-ams1"

Common Use Cases: Dashboard for manual operations, CLI tools for automation, SDKs for application integration, rclone for sync/backup workflows.

Connection details:

• Endpoint: leafcloud.store (or https://leafcloud.store)
• Region: europe-nl-ams1
• Path Style: Enable "Path Style" or "Use path style URLs"

Cyberduck example:

1. Connection type: Amazon S3
2. Server: leafcloud.store
3. Access Key ID: Your EC2 access key
4. Secret Access Key: Your EC2 secret key

MinIO Client (mc) example:

mc alias set leafcloud https://leafcloud.store YOUR-ACCESS-KEY YOUR-SECRET-KEY
mc ls leafcloud

boto3 (Python) example:

import boto3

s3 = boto3.client(
    's3',
    endpoint_url='https://leafcloud.store',
    aws_access_key_id='YOUR-ACCESS-KEY',
    aws_secret_access_key='YOUR-SECRET-KEY',
    region_name='europe-nl-ams1'
)

Leafcloud object storage is built on Ceph, an enterprise-grade open-source distributed storage system, providing S3-compatible object storage in Amsterdam, Netherlands.

Core Specifications:

• Endpoint: leafcloud.store with S3-compatible API
• Region: europe-nl-ams1 (Amsterdam datacenter)
• Backend: Ceph with erasure coding and triple replication
• Replication: 3x redundancy—data stored on 3 separate physical nodes
• Max object size: 5TB per object using multipart upload
• Encryption: TLS 1.2+ in transit, AES-256 at-rest encryption available
• Location: Netherlands (EU jurisdiction)

Performance & Durability: Ceph's erasure coding ensures high durability (99.999999999% "eleven nines") while triple replication protects against hardware failures. Data is distributed across separate physical nodes in our Amsterdam datacenter, ensuring availability even during maintenance or node failures.

S3 Compatibility: Full S3 API support means you can use standard tools like AWS CLI, boto3, rclone, Cyberduck, or any S3-compatible client. Supports bucket policies, ACLs, versioning, multipart uploads, presigned URLs, and lifecycle policies.

Compliance & Security: ISO 27001 and SOC2 Type II certified infrastructure. GDPR-compliant data residency with all data staying in Netherlands. No US CLOUD Act exposure. Optional server-side encryption for data at rest.

Integration: Works seamlessly with Kubernetes (Velero backups), Terraform (remote state backend), GitLab CI/CD, and standard DevOps tooling.

This is the most common issue. There are two separate credential types:

Credential Type	Used For	How to Get
Dashboard password	Logging into create.leaf.cloud	Account settings
EC2 credentials	S3/object storage API access	openstack ec2 credentials create

Your dashboard password will NOT work for S3 access. You must generate EC2 credentials.

Quick fix:

# Generate new EC2 credentials
openstack ec2 credentials create

# Output example:
# access | 67fd5d4526114c97b87ace3981bd75cb
# secret | 9da048142f604573bef0fa97sfb3509d

Use the access value as your Access Key ID and secret as your Secret Access Key.