Unable to use private CA with S3 ClusterOutput to trust s3_endpoint

[pipoe2h]

When using fluentd S3 output with an S3-compatible object storage configured with a private CA for HTTPS, it seems there isn't a way to pass the CA bundle for the HTTP client connection. The workaround at this time is to use ssl_verify_peer: "false", but it isn't ideal.

I can see the fluent plugin has ssl_ca_bundle, but I cannot find this option in the operator.

Is there a way to pass the private CA file to the fluentd S3 output?

[csatib02]

Hey @pipoe2h,

Thanks for reporting, yeah we are a bit behind with some plugins' flags added later, but this is an easy fix.
Missing fields can be added to the s3 definition here: https://github.com/kube-logging/logging-operator/blob/master/pkg/sdk/logging/model/output/s3.go

Are you planning to work on this?

[pipoe2h]

Thank you for confirming.

I'm afraid I won't be of much help because I don't have any experience with Go. I'll check if there is anything I can do.