queens swift s3 api authentication failing

[Edward Hope-Morley]

With Xenial queens I get:

Traceback (most recent call last):
  File "./s3test.py", line 75, in <module>
    all_buckets = conn.get_all_buckets()
  File "/usr/lib/python2.7/dist-packages/boto/s3/connection.py", line 440, in get_all_buckets
    response.status, response.reason, body)
boto.exception.S3ResponseError: S3ResponseError: 403 Forbidden
<?xml version='1.0' encoding='UTF-8'?>
<Error><Code>SignatureDoesNotMatch</Code><Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message><RequestId>tx91a60f066c904e9ba569f-005b16e500</RequestId></Error>

And in Swift I see:

Jun 5 19:31:12 juju-a57fc7-swift-3 swift: Calling S3Token middleware.
Jun 5 19:31:12 juju-a57fc7-swift-3 swift: You did not specify an auth or a storage token. skipping.
Jun 5 19:31:12 juju-a57fc7-swift-3 swift: Deferring reject downstream
Jun 5 19:31:12 juju-a57fc7-swift-3 swift: Received request from
Jun 5 19:31:12 juju-a57fc7-swift-3 swift: Authorizing as anonymous (txn: tx91a60f066c904e9ba569f-005b16e500)
Jun 5 19:31:12 juju-a57fc7-swift-3 swift: 10.5.0.92 10.5.0.92 05/Jun/2018/19/31/12 GET / HTTP/1.0 403 - Boto/2.38.0%20Python/2.7.12%20Linux/4.4.0-122-generic - - 277 - tx91a60f066c904e9ba569f-005b16e500 - 0.0103 - - 1528227072.243205070 1528227072.253505945 -

Which according to https://github.com/openstack/swift/blob/master/swift/common/middleware/keystoneauth.py#L238 implies that the s3 user credentials failed to be validated.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/572538

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/572538
Committed: https://git.openstack.org/cgit/openstack/charm-swift-proxy/commit/?id=fc145319991d738e5ca54ea166c96fe32b025af2
Submitter: Zuul
Branch: master

commit fc145319991d738e5ca54ea166c96fe32b025af2
Author: Edward Hope-Morley <email address hidden>
Date: Tue Jun 5 20:57:15 2018 +0100

    Fix Queens Swift S3 API

    Adds new template for Queens that correctly configures
    swift3, s3token and proxy pipeline.

    Also fixes amulet tests that are currently failing due
    to vdb being already mounted in guest and templates
    that fail py3.5 due to jinja syntax.

    Change-Id: I8ed8a12d2d6adc1f1f3158808101b123ec6bd20d
    Closes-Bug: #1775260

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/18.05
Review: https://review.openstack.org/576531

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/576531
Committed: https://git.openstack.org/cgit/openstack/charm-swift-proxy/commit/?id=345fc978ed0e5e9abf526cd1d39de007f580e599
Submitter: Zuul
Branch: stable/18.05

commit 345fc978ed0e5e9abf526cd1d39de007f580e599
Author: Edward Hope-Morley <email address hidden>
Date: Tue Jun 5 20:57:15 2018 +0100

    Fix Queens Swift S3 API

    Adds new template for Queens that correctly configures
    swift3, s3token and proxy pipeline.

    Also fixes amulet tests that are currently failing due
    to vdb being already mounted in guest and templates
    that fail py3.5 due to jinja syntax.

    Change-Id: I8ed8a12d2d6adc1f1f3158808101b123ec6bd20d
    Closes-Bug: #1775260
    (cherry picked from commit fc145319991d738e5ca54ea166c96fe32b025af2)