Keystone middleware for ec2 doesn't work with keystone v3

[Mike Lowe]

When using ec2 credentials and a v3 url for keystone_ec2_url in nova.conf a 400 bad request error is returned, if a v2 url is used then only users in the default domain are functional and auth fails for users with non-default domain credentials. This indicates that this portion of keystonemiddleware isn't able to handle keystone v3.

[Mike Lowe (jomlowe)]

Steps to reproduce:

Create a default domain user and project
Create a non default domain and add a user and project

enable ec2 in nova-api

openstack ec2 create <default domain user id> <default domain project id>
openstack ec2 create <non-default domain user id> <non-default domain project id>

use these credentials with boto
"""
import boto
default_conn = boto.connect_ec2_endpoint('http://controller:8773/services/Cloud',aws_access_key_id= ,aws_secret_access_key= )
nondefault_conn = boto.connect_ec2_endpoint('http://controller:8773/services/Cloud',aws_access_key_id= ,aws_secret_access_key= )
default_conn.get_all_instances()
nondefault_conn.get_all_instances()
"""

[Steve Martinelli (stevemar)]

Automatically unassigning due to inactivity.

[Mike Lowe (jomlowe)]

This has since been fixed in at least keystone 8.1

[Steve Martinelli (stevemar)]

Thanks for confirming Mike!