Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[loki-distributed] extraVolumes and extraVolumeMounts for memcached statefulsets #3098

Open
justinbwood opened this issue Apr 23, 2024 · 0 comments

Comments

@justinbwood
Copy link

Currently in the loki-distributed Helm chart, the memcached-chunks service is the only memcached statefulset that supports extraVolumeMounts, and none of the memcached statefulsets support extraVolumes

Example of mounting a TLS cert to the ingester service:

ingester:
  volumes:
    - name: loki-rsa-cert
      secret:
        secretName: loki-rsa-cert
  volumeMounts:
    - mountPath: /var/loki-tls
      name: loki-rsa-cert
      readOnly: true

I'd like to mount a cert-manager certificate secret as a volume to all the memcached pods to simplify the TLS setup, but I don't see a way of doing so. Loki's memcached_client config only supports file paths for TLS, so I can't inject the cert directly as an environment variable.

https://grafana.com/docs/loki/latest/configure/#cache_config

I'd like to be able to use the secret to configure memcached:

memcached_client:
  # ...
  tls_enabled: true
  tls_cert_path: "/var/loki-tls/tls.crt"
  tls_key_path: "/var/loki-tls/tls.key"
  tls_ca_path: "/var/loki-tls/ca.crt"
  tls_server_name: "loki.svc.cluster.local"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant