2.2. Object storage types
Each object storage type has its own set of required fields which are configured directly in the ObservabilityInstaller CR.
2.2.1. Amazon S3 with Secure Token Service (STS) - Short lived 링크 복사링크가 클립보드에 복사되었습니다!
S3 with STS is supported by Tempo and Loki.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
s3STS:
bucket: bucket-name
roleARN:
region: us-east-1
Use the following command to create the secret containing the access key:
$ oc create secret generic storage-secret \
--from-literal=bucket="<BUCKET_NAME>" \
--from-literal=role_arn="<AWS_ROLE_ARN>" \
--from-literal=region="<AWS_REGION_YOUR_BUCKET_LIVES_IN>"
2.2.2. Amazon S3 / MinIO 링크 복사링크가 클립보드에 복사되었습니다!
Amazon S3 / MinIO is supported by Tempo and Loki.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
s3:
bucket: bucket-name
endpoint: http://minio.minio.svc:9000
accessKeyID: tempo
accessKeySecret:
name: minio-secret
key: access_key_secret
region: us-east-1
Use the following command to create the secret containing the access key:
$ oc create secret generic minio-secret \
--from-literal=access_key_secret="supersecret"
2.2.2.1. Secret supported by Tempo and Loki operators 링크 복사링크가 클립보드에 복사되었습니다!
$ oc create secret generic storage-secret \
--from-literal=bucket="<BUCKET_NAME>" \
--from-literal=endpoint="<AWS_BUCKET_ENDPOINT>" \
--from-literal=access_key_id="<AWS_ACCESS_KEY_ID>" \
--from-literal=access_key_secret="<AWS_ACCESS_KEY_SECRET>" \
--from-literal=region="<AWS_REGION_YOUR_BUCKET_LIVES_IN>"
-
regionis optional in Tempo and required by Loki.
2.2.3. Microsoft Azure Blob Storage 링크 복사링크가 클립보드에 복사되었습니다!
Microsoft Azure Blob Storag is supported by Tempo and Loki.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
azure:
container:
accountName:
accountKeySecret:
name: azure-secret
key: account_key
Use the following command to create the secret containing the access key:
$ oc create secret generic azure-secret \
--from-literal=account_key="<ACCOUNT_KEY>"
2.2.3.1. Secret supported by Tempo and Loki operators 링크 복사링크가 클립보드에 복사되었습니다!
$ oc create secret generic storage-secret \
--from-literal=container="<BLOB_STORAGE_CONTAINER_NAME>" \
--from-literal=account_name="<BLOB_STORAGE_ACCOUNT_NAME>" \
--from-literal=account_key="<BLOB_STORAGE_ACCOUNT_KEY>"
The Loki operator also supports the following fields:
-
environment -
endpoint_suffix- optional
2.2.4. Azure WIF - Short lived 링크 복사링크가 클립보드에 복사되었습니다!
Azure WIF short lived is supported by Tempo.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
azureWIF:
container:
accountName:
audience:
clientID:
tenantID:
2.2.4.1. Secret supported by Tempo and Loki operators 링크 복사링크가 클립보드에 복사되었습니다!
$ oc create secret generic storage-secret \
--from-literal=container="<BLOB_STORAGE_CONTAINER_NAME>" \
--from-literal=account_name="<BLOB_STORAGE_ACCOUNT_NAME>" \
--from-literal=audience="<AUDIENCE>" \
--from-literal=client_id="CLIENT_ID>" \
--from-literal=tenant_id="<TENANT_ID>"
-
audience- optional and defaults toapi://AzureADTokenExchange
2.2.5. Google Cloud Storage 링크 복사링크가 클립보드에 복사되었습니다!
Google Cloud Storage is supported by Tempo and Loki.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
gcs:
bucket: bucket-name
keyJSONSecret:
name: gcs-secret
key: key.json
Use the following command to create the secret:
$ oc -n $NAMESPACE create secret generic gcs-secret \
--from-file=key.json="$GCS_KEY_FILE_PATH"
2.2.5.1. Secret supported by Tempo and Loki operators 링크 복사링크가 클립보드에 복사되었습니다!
$ oc create secret generic storage-secret \
--from-literal=bucketname="<BUCKET_NAME>" \
--from-literal=key.json="<PATH_TO_JSON_KEY_FILE>"
2.2.5.2. Google Cloud Storage WIF - Short lived 링크 복사링크가 클립보드에 복사되었습니다!
Google Cloud Storage WIF short lived is supported by Tempo.
spec:
capabilities:
tracing:
enabled: true
storage:
objectStorage:
gcsWIF:
bucket: bucket-name
keyJSONSecret:
name: gcs-secret
key: key.json
audience: # optional
Use the following command to create the secret:
$ oc -n $NAMESPACE create secret generic gcs-secret \
--from-file=key.json="$GCS_KEY_FILE_PATH"