ETCD backup S3 to Garage HQ

[gizmo15]

Hi!

I try to configure ETCD backup S3 with GarageHQ :
https://garagehq.deuxfleurs.fr/

The configuration on GarageHQ is OK (tested with aws s3 py client) :

aws s3 ls
2025-12-06 17:46:55 rancher-etcd-bucket

And i see this request :

Feb 04 15:46:31 web01.adm.securmail.fr garage[1993936]: 2026-02-04T14:46:31.578452Z  INFO garage_api_common::generic_server: [2a0e:f41:0:3:5a76:ed08:e3e3:de4b]:48988 (key GK6eXXXXXXXXX) GET /
Feb 04 15:46:36 web01.adm.securmail.fr garage[1993936]: 2026-02-04T14:46:36.935728Z  INFO garage_api_common::generic_server: [2a0e:f41:0:3:5a76:ed08:e3e3:de4b]:46052 (key GK6eXXXXXXXXX) GET /rancher-etcd-bucket?list-type=2&prefix=&delimiter=%2F&encoding-type=url

I configured backup S3 on rancher side :

    etcd:
      s3:
        bucket: rancher-etcd-bucket
        cloudCredentialName: cattle-global-data:cc-xkbm7
        endpoint: web01.adm.securmail.fr:3900
        region: garage
        skipSSLVerify: true
      snapshotRetention: 10
      snapshotScheduleCron: 0 */12 * * *

But ! When i launch a snapshot, i have no error on web side and 0 connection on GarageHQ.
I tried to check the logs on the pods etcd-master-node-XXXX but i don't know what to search !

Have anybody already did this or have any help on that ?

Thanks !

[gizmo15]

Force path style: Garage does not support DNS-style buckets, which are now by default on Amazon S3. Instead, Garage uses the legacy path-style bucket addressing. Remember to configure your client to acknowledge this fact.

the option forcePathStyle can be set ? i tried via the yaml edition but the option doesn't stay after the save

[gizmo15]

i tried to create a specific DNS record :

s3.adm.securmail.fr
rancher-etcd-bucket.s3.adm.securmail.fr

if DNS-style is used and update the conf on rancher side but nothing changed.

    etcd:
      s3:
        bucket: rancher-etcd-bucket
        cloudCredentialName: cattle-global-data:cc-xkbm7
        endpoint: s3.adm.securmail.fr:3900
        region: garage
        skipSSLVerify: true
      snapshotRetention: 10
      snapshotScheduleCron: 0 */12 * * *

[brandond]

There is a flag that the docs don't currently cover and you cannot set via Rancher. If you place this on your node, it should work.

# /etc/rancher/rke2/config.yaml.d/99-lookuptype.yaml
etcd-s3-bucket-lookup-type: path

[gizmo15]

Thanks a lot ! it's ok !

Feb 04 20:40:54 master-node-ca74c31f rke2[13774]: time="2026-02-04T20:40:54Z" level=info msg="Saving etcd snapshot on-demand-master-node-ca74c31f-1770237654 to S3"
Feb 04 20:40:54 master-node-ca74c31f rke2[13774]: time="2026-02-04T20:40:54Z" level=info msg="Uploading snapshot to s3://rancher-etcd-bucket/on-demand-master-node-ca74c31f-1770237654"
Feb 04 20:40:54 master-node-ca74c31f rke2[13774]: time="2026-02-04T20:40:54Z" level=info msg="Uploaded snapshot metadata s3://rancher-etcd-bucket/.metadata/on-demand-master-node-ca74c31f-1770237654"