How to configure LokiStack ObjectStorage CA certificate when not a S3 solution in RHOCP 4

Solution Verified - Updated -

Issue

  • How to configure the Certificate Authority (CA) certificate for the ObjectStorage endpoint in the LokiStack for using as object storage backend OpenStack Swift?
  • How to configure the Certificate Authority (CA) certificate for the ObjectStorage endpoint in the LokiStack for using as object storage backend Azure?
  • After configuring the CA as described in the article How to configure LokiStack ObjectStorage CA certificate in RHOCP 4 , it continues giving the error:

    2023-10-04T10:47:04.237909733Z level=error ts=2023-10-04T10:47:04.237661363Z caller=log.go:171 msg="error running loki" err="Get \"https://192.168.1.1:443/swift/v1/AUTH_XXXXXXXXXXXXXXXXX\": tls: failed to verify certificate: x509: certificate signed by unknown authority\nerror creating object client\ngithub.com/grafana/loki/pkg/storage.(*store).chunkClientForPeriod\n\t/remote-source/loki/app/pkg/storage/store.go:187\ngithub.com/grafana/loki/pkg/storage.(*store).init\n\t/remote-source/loki/app/pkg/storage/store.go:155\ngithub.com/grafana/loki/pkg/storage.NewStore\n\t/remote-source/loki/app/pkg/storage/store.go:147\ngithub.com/grafana/loki/pkg/loki.(*Loki).initStore\n\t/remote-source/loki/app/pkg/loki/modules.go:656\ngithub.com/grafana/dskit/modules.(*Manager).initModule\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:120\ngithub.com/grafana/dskit/modules.(*Manager).InitModuleServices\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:92\ngithub.com/grafana/loki/pkg/loki.(*Loki).Run\n\t/remote-source/loki/app/pkg/loki/loki.go:458\nmain.main\n\t/remote-source/loki/app/cmd/loki/main.go:110\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:250\nruntime.goexit\n\t/usr/lib/golang/src/runtime/asm_amd64.s:1598\nerror initialising module: store\ngithub.com/grafana/dskit/modules.(*Manager).initModule\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:122\ngithub.com/grafana/dskit/modules.(*Manager).InitModuleServices\n\t/remote-source/loki/app/vendor/github.com/grafana/dskit/modules/modules.go:92\ngithub.com/grafana/loki/pkg/loki.(*Loki).Run\n\t/remote-source/loki/app/pkg/loki/loki.go:458\nmain.main\n\t/remote-source/loki/app/cmd/loki/main.go:110\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:250\nruntime.goexit\n\t/usr/lib/golang/src/runtime/asm_amd64.s:1598"
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4
  • Red Hat OpenShift Logging (RHOL)
    • 5
  • OpenStack Swift as object storage
  • Loki

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content