diff --git a/fleet/lib/rook-ceph-conf/charts/antu/templates/cephobjectstoreuser-loki.yaml b/fleet/lib/rook-ceph-conf/charts/antu/templates/cephobjectstoreuser-loki.yaml
new file mode 100644
index 000000000..5340b5309
--- /dev/null
+++ b/fleet/lib/rook-ceph-conf/charts/antu/templates/cephobjectstoreuser-loki.yaml
@@ -0,0 +1,35 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephObjectStoreUser
+metadata:
+  name: loki
+  namespace: rook-ceph
+spec:
+  store: lfa
+  clusterNamespace: rook-ceph
+  quotas:
+    maxBuckets: 3
+---
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: rook-ceph-object-user-lfa-loki
+  namespace: rook-ceph
+spec:
+  secretStoreRefs:
+    - kind: ClusterSecretStore
+      name: onepassword
+  selector:
+    secret:
+      name: rook-ceph-object-user-lfa-loki
+  data:
+    - match:
+        secretKey: AccessKey
+        remoteRef:
+          remoteKey: loki
+          property: AWS_ACCESS_KEY_ID
+    - match:
+        secretKey: SecretKey
+        remoteRef:
+          remoteKey: loki
+          property: AWS_SECRET_ACCESS_KEY