Loki s3 configuration failed with oidc and serviceaccount

[haironggao]

Hi everyone,
I’m trying to integrate loki with oidc in EKS so that I don’t need to pass AK/SK in the configurations

serviceAccount:
  create: true
  name: loki-sa
  annotations:
    eks.amazonaws.com/role-arn: arn:aws-cn:iam::XXXXXX

But I got the errors like

Query error
WebIdentityErr: failed to retrieve credentials caused by: RequestError: send request failed caused by: Post "http://sts.cn-northwest-1.amazonaws.com.cn/": dial tcp 52.82.208.227:80: connect: connection refused 

So I presume this link " http://sts.cn-northwest-1.amazonaws.com.cn/ " is the endpoint define in SDK or somewhere , not sure if this is a bug or I’m missing something else.

[ezziomoreira]

Hello, @haironggao how are you?

Can you solve this problem?
I’m have the same problem with EKS and Grafana loki when writing on s3 bucket.

RequestError: send request failed\ncaused by: Post "http://sts.amazonaws.com/\“: dial tcp 54.239.29.25:80: connect: connection refused”