Tag: Irsa

Problems related to IAM Roles for Service Accounts (IRSA), such as permission denials or misbindings

ID	Title	Description	Category	Technology	Tags
CRE-2025-0029 Low Impact: 6/10 Mitigation: 5/10	Loki fails to retrieve AWS credentials when specifying S3 endpoint with IRSA	When deploying Grafana Loki with AWS S3 as the storage backend and specifying a custom S3 endpoint (e.g., for FIPS compliance or GovCloud regions), Loki may fail to retrieve AWS credentials via IAM Roles for Service Accounts (IRSA). This results in errors during startup or when attempting to upload index tables, preventing Loki from functioning correctly.	Storage	loki	Loki S3 AWS Irsa Storage Authentication Helm Public