Workspace volumes
Each agent is a directory on a fleet volume, and every turn runs in its own sandbox against it. The fleet needs an XFS StorageClass with project quotas: setfleet.storage.createClass: true, or name an existing one in fleet.storage.className. Without it, the fleet refuses to start rather than run unbounded. Sizing: Sizing and requirements.
The Computer view in xpander Chat browses the workspace. Credential stores such as .aws, .ssh and .kube never appear in it. See Agent workspace.
Object storage
A self-hosted install needs 48 GiB of volumes for the chart’s stores, plus 500 GiB per executor for the fleet volume, plus 5 GiB for each agent whose harness is xpander and that uses a workspace. On Air-Gapped, Supabase Storage keeps objects on its own in-cluster volume (supabase.storage.persistence, 50 GiB by default):
S3 as a skill
The Amazon S3 skill is served by the AWS Operator in your cluster. The operator assumes a per-skill IAM role and signs each call, so no bucket credential ever reaches an agent. See IAM best practices and Amazon S3.Next steps
Size the executor fleet
Workspace sizing
Design IAM roles for AWS skills
Per-skill roles

