This breaks Ironic's use of temp URLs, which the key for the service
account is configured via the Swift user.
Change-Id: I69f6f6eef4ad573f406d64d579a9811c70ac5d28
Closes-Bug: #1421006
| ... | ... |
@@ -603,7 +603,9 @@ function create_swift_accounts {
|
| 603 | 603 |
|
| 604 | 604 |
local another_role=$(openstack role list | awk "/ anotherrole / { print \$2 }")
|
| 605 | 605 |
|
| 606 |
- create_service_user "swift" |
|
| 606 |
+ # NOTE(jroll): Swift doesn't need the admin role here, however Ironic uses |
|
| 607 |
+ # temp urls, which break when uploaded by a non-admin role |
|
| 608 |
+ create_service_user "swift" "admin" |
|
| 607 | 609 |
|
| 608 | 610 |
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then |
| 609 | 611 |
|