Loki authentication#

The secrets are injected in Loki via a Kubernetes secret.

Compatibility FE/AWS#

With Trackbone pretask we create a file that contains the S3 credentials.

The path to that file is specified in an environment variable:

Env: [{
  - name: AWS_SHARED_CREDENTIALS_FILE
    value: /etc/secrets/credentials
}]

The name of the bucket and the endpoint are not included in the file that contains the secret, they are defined as values in helm chart.

The only difference are the following two configuration values in helm chart.

For AWS:

s3_endpoint_or_region: eu-west-3
s3forcepathstyle: false

Note

No need to specify the full endpoint for AWS.

For FE:

s3_endpoint_or_region: oss.eu-west-0.prod-cloud-ocb.orange-business.com
s3forcepathstyle: true

The Azure storage credentials are retrieved from vault by using a Trackone pretask.

The path to the file that contains the secrets, is specified in an environment variable:

Env: [{
  - name: AZURE_STORAGE_ACCESS_KEY 
    value: "\(loki_credentials.access_key)"
}]