Using GCS for storage with Workload Identity

Essentially, the title says it all. I’m attempting to get Loki to store logs on GCS with workload identity enabled. I think I have things configured properly, but for some reason it keeps complaining about Error 403: Primary: /namespaces/PROJECT-NAME.svc.id.goog with additional claims does not have storage.objects.list

I’m pretty sure it’s sometihng trivial I’m overlooking and would appreciate a pointer in the right direction.

There is this topic where @rajatvig mentions having Loki working with Wokload Identity, but I don’t want to hijack the post as the issues aren’t the same.

Nevermind, got this working. It was an error on my end with the binding between GCP service account and k8s service account. Sorry about the false alarm