From ae74ed778a2daef5490caa085ee33029e693fc5c Mon Sep 17 00:00:00 2001 From: Jim Rollenhagen Date: Thu, 12 Feb 2015 07:33:36 -0800 Subject: [PATCH] Make swift user an admin This breaks Ironic's use of temp URLs, which the key for the service account is configured via the Swift user. Change-Id: I69f6f6eef4ad573f406d64d579a9811c70ac5d28 Closes-Bug: #1421006 --- lib/swift | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/swift b/lib/swift index e4d8b5fe19..56baa12445 100644 --- a/lib/swift +++ b/lib/swift @@ -603,7 +603,9 @@ function create_swift_accounts { local another_role=$(openstack role list | awk "/ anotherrole / { print \$2 }") - create_service_user "swift" + # NOTE(jroll): Swift doesn't need the admin role here, however Ironic uses + # temp urls, which break when uploaded by a non-admin role + create_service_user "swift" "admin" if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then