Skip to content

Enable Loki to reload AWS credentials at certain frequency to avoid ExpiredToken errors when using S3 as storage #8964

Open
@ec-appsoss

Description

@ec-appsoss

Is your feature request related to a problem? Please describe.
We have implemented OSS Loki on pods but would like to use S3 as storage. This is working until the AWS credentials expire (10 hours). When the token has expired, Loki is not able to write on the S3 storage therefore making it unusable. The only way to avoid is bounce the Loki pods before it expires.

Describe the solution you'd like
An ideal solution would be to let Loki reload or re-read AWS credentials which are stored in a meta-directory or environment variables.

Describe alternatives you've considered
Currently, we are using local filesystem to store everything. However, this prevents us from breaking down Loki into micro services, i.e. Loki-read and Loki-write (ingester/querier) as it requires a common storage system like S3/Minio etc.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions