Storage usage by folder Runs in the background — large buckets can take several minutes.

{#if usageStatus}

{#if usageStatus.running}

Scanning… {usageStatus.scanned_objects.toLocaleString()} objects inspected {#if usageStatus.current_prefix} — currently under {usageStatus.current_prefix} {/if}

{:else if usageStatus.finished_at}

Scanned {usageStatus.scanned_objects.toLocaleString()} objects · finished at {new Date( usageStatus.finished_at ).toLocaleString()}

{/if} {#if usageStatus.error}

Error: {usageStatus.error}

{/if} {#if usageStatus.folders.length > 0}

{#each usageStatus.folders as item (item.prefix)}

{item.prefix} {displaySize(item.size) ?? '0 B'}{item.partial ? ' (partial)' : ''}

{/each}

Total{usageStatus.running ? ' (partial)' : ''} {displaySize(usageStatus.folders.reduce((acc, item) => acc + item.size, 0)) ?? '0 B'}

{:else if !usageStatus.running && usageStatus.finished_at}

No objects found in the bucket.

{/if}

Clean up expired logs Delete expired service & job logs from object storage and disk now, then scan the bucket for orphan log files left behind by previously deleted jobs. Uses batched deletes (up to 1000 objects per request).

{#if cleanupStatus} {@const total = cleanupStatus.total_service + cleanupStatus.total_jobs} {@const processed = cleanupStatus.processed_service + cleanupStatus.processed_jobs}

Phase: {cleanupStatus.phase} S3 deleted: {cleanupStatus.s3_deleted.toLocaleString()} {#if (cleanupStatus.s3_not_found ?? 0) > 0} · already absent (404): {(cleanupStatus.s3_not_found ?? 0).toLocaleString()} {/if} {#if cleanupStatus.errors > 0} · errors: {cleanupStatus.errors.toLocaleString()} {/if}

DB: {processed.toLocaleString()} / {total.toLocaleString()} rows deleted ({cleanupProgress}%) · service {cleanupStatus.processed_service.toLocaleString()}/{cleanupStatus.total_service.toLocaleString()}, job {cleanupStatus.processed_jobs.toLocaleString()}/{cleanupStatus.total_jobs.toLocaleString()}

Orphan scan: {cleanupStatus.orphans_scanned.toLocaleString()} scanned, {cleanupStatus.orphans_deleted.toLocaleString()} deleted

{#if !cleanupStatus.running && cleanupStatus.finished_at}

Finished at {new Date(cleanupStatus.finished_at).toLocaleString()}

{/if} {#if cleanupStatus.last_error}

Last error: {cleanupStatus.last_error}

{/if}

{ if (e.detail === 'S3' && bucket_config?.type !== 'S3') { bucket_config = { type: 'S3', bucket: '', region: '', access_key: '', secret_key: '', endpoint: '', allow_http: true } } else if (e.detail === 'Azure' && bucket_config?.type !== 'Azure') { bucket_config = { type: 'Azure', accountName: '', containerName: '', useSSL: false, tenantId: '', clientId: '', accessKey: '' } } else if (e.detail === 'Gcs' && bucket_config?.type !== 'Gcs') { bucket_config = { type: 'Gcs', bucket: '', serviceAccountKey: {} } } else if (e.detail === 'AwsOidc' && bucket_config?.type !== 'AwsOidc') { bucket_config = { type: 'AwsOidc', bucket: '', region: '', roleArn: '' } } }} >

{#if bucket_config.type === 'S3'} Bucket (bucket_config as S3Config).bucket, (v) => (bucket_config = { ...(bucket_config as S3Config), bucket: v }) } /> Region If left empty, will be derived automatically from $AWS_REGION (bucket_config as S3Config).region, (v) => (bucket_config = { ...(bucket_config as S3Config), region: v }) } /> Access key ID If left empty, will be derived automatically from $AWS_ACCESS_KEY_ID, pod or ec2 profile (bucket_config as S3Config).access_key, (v) => (bucket_config = { ...(bucket_config as S3Config), access_key: v }) } /> Secret key If left empty, will be derived automatically from $AWS_SECRET_KEY, pod or ec2 profile (bucket_config as S3Config).secret_key, (v) => (bucket_config = { ...(bucket_config as S3Config), secret_key: v }) } /> Endpoint Only needed for non AWS S3 providers like R2 or MinIo (bucket_config as S3Config).endpoint, (v) => (bucket_config = { ...(bucket_config as S3Config), endpoint: v }) } />

Disable if using https only policy

{ if (bucket_config?.type === 'S3') { bucket_config = { ...bucket_config, allow_http: e.detail } } }} options={{ right: 'Allow http' }} />

{:else if bucket_config.type === 'Azure'} Account name (bucket_config as AzureConfig).accountName, (v) => (bucket_config = { ...(bucket_config as AzureConfig), accountName: v }) } /> Container name (bucket_config as AzureConfig).containerName, (v) => (bucket_config = { ...(bucket_config as AzureConfig), containerName: v }) } /> Access key (bucket_config as AzureConfig).accessKey, (v) => (bucket_config = { ...(bucket_config as AzureConfig), accessKey: v }) } /> Tenant ID (optional) (bucket_config as AzureConfig).tenantId, (v) => (bucket_config = { ...(bucket_config as AzureConfig), tenantId: v }) } /> Client ID (optional) (bucket_config as AzureConfig).clientId, (v) => (bucket_config = { ...(bucket_config as AzureConfig), clientId: v }) } /> Federated token file (optional) Path to the projected service account token when using AKS Workload Identity with the tenant ID and client ID above (bucket_config as AzureConfig).federatedTokenFile, (v) => (bucket_config = { ...(bucket_config as AzureConfig), federatedTokenFile: v === '' ? undefined : v }) } /> Endpoint (optional) Only needed for non Azure Blob providers like Azurite (bucket_config as AzureConfig).endpoint, (v) => (bucket_config = { ...(bucket_config as AzureConfig), endpoint: v }) } /> {:else if bucket_config.type === 'AwsOidc'} Bucket (bucket_config as AwsOidcConfig).bucket, (v) => (bucket_config = { ...(bucket_config as AwsOidcConfig), bucket: v }) } /> Region (bucket_config as AwsOidcConfig).region, (v) => (bucket_config = { ...(bucket_config as AwsOidcConfig), region: v }) } /> Role ARN (bucket_config as AwsOidcConfig).roleArn, (v) => (bucket_config = { ...(bucket_config as AwsOidcConfig), roleArn: v }) } /> {:else if bucket_config.type === 'Gcs'} (bucket_config as GcsConfig).bucket, (v) => (bucket_config = { ...(bucket_config as GcsConfig), bucket: v }) } /> JSON content of the service account key file. Leave empty to use the instance's ambient credentials (e.g. GKE Workload Identity / the GCP metadata server). {#if hasServiceAccountKey && !showServiceAccountKey}

A service account key is configured and hidden as it contains a private key.

{:else} {#if hasServiceAccountKey}

{/if} { if (bucket_config?.type === 'Gcs') { if (e.detail.code === undefined || e.detail.code === '') { bucket_config = { ...bucket_config, serviceAccountKey: undefined } return } try { const parsed = JSON.parse(e.detail.code ?? '{}') lastEditorSyncedJson = JSON.stringify(parsed) bucket_config = { ...bucket_config, serviceAccountKey: parsed } } catch (_) { bucket_config = { ...bucket_config, serviceAccountKey: undefined } } } }} class="h-80" /> {/if} {:else}

Unknown bucket type {bucket_config['type']}

{/if}