How to configure LokiStack ObjectStorage CA certificate when not a S3 solution in RHOCP 4
Issue
- How to configure the Certificate Authority (CA) certificate for the ObjectStorage endpoint in the LokiStack for using as object storage backend OpenStack Swift?
- How to configure the Certificate Authority (CA) certificate for the ObjectStorage endpoint in the LokiStack for using as object storage backend Azure?
-
After configuring the CA as described in the article How to configure LokiStack ObjectStorage CA certificate in RHOCP 4 , it continues giving the error:
2023-10-04T10:47:04.237909733Z level=error ts=2023-10-04T10:47:04.237661363Z caller=log.go:171 msg="error running loki" err="Get \"https://192.168.1.1:443/swift/v1/AUTH_XXXXXXXXXXXXXXXXX\": tls: failed to verify certificate: x509: certificate signed by unknown authority\nerror creating object client\ngithub.com/grafana/loki/pkg/storage.(*store).chunkClientForPeriod\n\t/remote-source/loki/app/pkg/storage/store.go:187\ngithub.com/grafana/loki/pkg/storage.(*store).init\n\t/remote-source/loki/app/pkg/storage/store.go:155\ngithub.com/grafana/loki/pkg/storage.NewStore\n\t/remote-source/loki/app/pkg/storage/store.go:147\ngithub.com/grafana/loki/pkg/loki.(*Loki).initStore\n\t/remote-source/loki/app/pkg/loki/modules.go:656\ngithub.com/grafana/dskit/modules.(*Manager).initModule\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:120\ngithub.com/grafana/dskit/modules.(*Manager).InitModuleServices\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:92\ngithub.com/grafana/loki/pkg/loki.(*Loki).Run\n\t/remote-source/loki/app/pkg/loki/loki.go:458\nmain.main\n\t/remote-source/loki/app/cmd/loki/main.go:110\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:250\nruntime.goexit\n\t/usr/lib/golang/src/runtime/asm_amd64.s:1598\nerror initialising module: store\ngithub.com/grafana/dskit/modules.(*Manager).initModule\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:122\ngithub.com/grafana/dskit/modules.(*Manager).InitModuleServices\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:92\ngithub.com/grafana/loki/pkg/loki.(*Loki).Run\n\t/remote-source/loki/app/pkg/loki/loki.go:458\nmain.main\n\t/remote-source/loki/app/cmd/loki/main.go:110\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:250\nruntime.goexit\n\t/usr/lib/golang/src/runtime/asm_amd64.s:1598"
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
- Red Hat OpenShift Logging (RHOL)
- 5
- OpenStack Swift as object storage
- Loki
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.