{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/31522","repository_url":"https://api.github.com/repos/saltstack/salt","labels_url":"https://api.github.com/repos/saltstack/salt/issues/31522/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/31522/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/31522/events","html_url":"https://github.com/saltstack/salt/issues/31522","id":136835464,"number":31522,"title":"s3 modules unable to authenticate with Google Cloud Storage s3:// interface","user":{"login":"jim-raney-physiq","id":15000219,"avatar_url":"https://avatars.githubusercontent.com/u/15000219?v=3","gravatar_id":"","url":"https://api.github.com/users/jim-raney-physiq","html_url":"https://github.com/jim-raney-physiq","followers_url":"https://api.github.com/users/jim-raney-physiq/followers","following_url":"https://api.github.com/users/jim-raney-physiq/following{/other_user}","gists_url":"https://api.github.com/users/jim-raney-physiq/gists{/gist_id}","starred_url":"https://api.github.com/users/jim-raney-physiq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim-raney-physiq/subscriptions","organizations_url":"https://api.github.com/users/jim-raney-physiq/orgs","repos_url":"https://api.github.com/users/jim-raney-physiq/repos","events_url":"https://api.github.com/users/jim-raney-physiq/events{/privacy}","received_events_url":"https://api.github.com/users/jim-raney-physiq/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/saltstack/salt/labels/Bug","name":"Bug","color":"e11d21"},{"url":"https://api.github.com/repos/saltstack/salt/labels/Execution%20Module","name":"Execution Module","color":"006b75"},{"url":"https://api.github.com/repos/saltstack/salt/labels/High%20Severity","name":"High Severity","color":"ff9143"},{"url":"https://api.github.com/repos/saltstack/salt/labels/P4","name":"P4","color":"031a39"},{"url":"https://api.github.com/repos/saltstack/salt/labels/RIoT","name":"RIoT","color":"fef2c0"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/saltstack/salt/milestones/13","html_url":"https://github.com/saltstack/salt/milestones/Approved","labels_url":"https://api.github.com/repos/saltstack/salt/milestones/13/labels","id":9265,"number":13,"title":"Approved","description":"All issues that are ready to be worked on, both bugs and features.","creator":{"login":"thatch45","id":507599,"avatar_url":"https://avatars.githubusercontent.com/u/507599?v=3","gravatar_id":"","url":"https://api.github.com/users/thatch45","html_url":"https://github.com/thatch45","followers_url":"https://api.github.com/users/thatch45/followers","following_url":"https://api.github.com/users/thatch45/following{/other_user}","gists_url":"https://api.github.com/users/thatch45/gists{/gist_id}","starred_url":"https://api.github.com/users/thatch45/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thatch45/subscriptions","organizations_url":"https://api.github.com/users/thatch45/orgs","repos_url":"https://api.github.com/users/thatch45/repos","events_url":"https://api.github.com/users/thatch45/events{/privacy}","received_events_url":"https://api.github.com/users/thatch45/received_events","type":"User","site_admin":false},"open_issues":3144,"closed_issues":3907,"state":"open","created_at":"2011-05-14T04:00:56Z","updated_at":"2016-08-10T20:31:11Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2016-02-26T22:42:06Z","updated_at":"2016-08-10T22:27:42Z","closed_at":null,"body":"### Expected Behavior\r\nTo be able to pull files via s3:// protocol from Google Cloud Storage.\r\n\r\n### Actual Behavior\r\nAuthentication fails.  It appears that GCS only supports the v2 aws authentication signature for s3:// access, while Salt now only supports v4\r\n\r\n### Steps to Reproduce Issue\r\nCreate a storage bucket in GCS, turn on interoperability, and generate a secret key and access key.  In salt minion config set s3.key_id: and s3.access_key: with the generated keys, and set \"s3.service_url: storage.googleapis.com\".  When attempting to access a bucket the salt minion will log \"\\<Error\\>\\<Code\\>InvalidSecurity\\</Code\\>\\<Message\\>The provided security credentials are not valid.\\</Message\\><\\Details\\>Incorrect Authorization header\\</Details\\>\\</Error\\>\"\r\n\r\n### Versions Report\r\nSalt Version:\r\n           Salt: 2015.8.7\r\n \r\nDependency Versions:\r\n         Jinja2: 2.8\r\n       M2Crypto: 0.21.1\r\n           Mako: Not Installed\r\n         PyYAML: 3.11\r\n          PyZMQ: 15.2.0\r\n         Python: 2.7.5 (default, Nov 20 2015, 02:00:19)\r\n           RAET: Not Installed\r\n        Tornado: 4.3\r\n            ZMQ: 4.1.2\r\n           cffi: 1.5.2\r\n       cherrypy: Not Installed\r\n       dateutil: Not Installed\r\n          gitdb: Not Installed\r\n      gitpython: Not Installed\r\n          ioflo: Not Installed\r\n        libgit2: Not Installed\r\n        libnacl: Not Installed\r\n   msgpack-pure: Not Installed\r\n msgpack-python: 0.4.7\r\n   mysql-python: Not Installed\r\n      pycparser: 2.14\r\n       pycrypto: 2.6.1\r\n         pygit2: Not Installed\r\n   python-gnupg: Not Installed\r\n          smmap: Not Installed\r\n        timelib: Not Installed\r\n \r\nSystem Versions:\r\n           dist: centos 7.2.1511 Core\r\n        machine: x86_64\r\n        release: 3.10.0-327.10.1.el7.x86_64\r\n         system: CentOS Linux 7.2.1511 Core\r\n\r\n\r\n### Relevant Logs, Configs, or States\r\nPre- 2015.5.5 the above steps work without an issue - files can be successfully pulled from GCS via s3://.  I'm assuming it's due to https://github.com/saltstack/salt/pull/25420 .  We have been working with an older version of Salt and have only recently encountered this issue while trying to upgrade for some other bugfixes.  It would be great if Salt would fall back to v2 after a v4 auth attempt fails, or if there was a setting like \"s3.sig_version: 2\" we could set in the minion config. \r\n\r\n"},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/239024241","html_url":"https://github.com/saltstack/salt/issues/31522#issuecomment-239024241","issue_url":"https://api.github.com/repos/saltstack/salt/issues/31522","id":239024241,"user":{"login":"jim-raney-physiq","id":15000219,"avatar_url":"https://avatars.githubusercontent.com/u/15000219?v=3","gravatar_id":"","url":"https://api.github.com/users/jim-raney-physiq","html_url":"https://github.com/jim-raney-physiq","followers_url":"https://api.github.com/users/jim-raney-physiq/followers","following_url":"https://api.github.com/users/jim-raney-physiq/following{/other_user}","gists_url":"https://api.github.com/users/jim-raney-physiq/gists{/gist_id}","starred_url":"https://api.github.com/users/jim-raney-physiq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim-raney-physiq/subscriptions","organizations_url":"https://api.github.com/users/jim-raney-physiq/orgs","repos_url":"https://api.github.com/users/jim-raney-physiq/repos","events_url":"https://api.github.com/users/jim-raney-physiq/events{/privacy}","received_events_url":"https://api.github.com/users/jim-raney-physiq/received_events","type":"User","site_admin":false},"created_at":"2016-08-10T22:27:42Z","updated_at":"2016-08-10T22:27:42Z","body":"We got a note from our account rep that Google updated their storage service to use V4 auth.  I haven't been able to get it working yet (get \"The request signature we calculated does not match the signature you provided. Check your Google secret key and signing method\" on every request).  I haven't been able to spend any real time on it.\r\n"}}
{"actor":{"display_login":"jim-raney-physiq"}}