403 Permission Issues importing Azimuth Images from new R2 Cloudflare bucket

[anish-mudaraddi]

Hi azimuth image maintainers

We're having issues updating our azimuth images to the latest versions stored on your Cloudflare bucket:
https://pub-43c699d9199b4b1aad735a1767cb4592.r2.dev

Our workflow involves us importing your image as the base image, and applying our bespoke security policies on top using Packer.
When we try to import your base image we get a permission issue - We believe this happens trying to read metadata

here are our glance logs

2026-02-06 14:23:08.082 41 WARNING glance.async_.taskflow_executor [-] Task 'api_image_import-WebDownload-08e662ab-0574-4080-aba5-51bd7c16a52f' (2a9e9101-cc35-4572-94f2-3e947c52fde6) transitioned into state 'FAILURE' from state 'RUNNING'
4 predecessors (most recent first):
  Flow 'api_image_import'
  |__Atom 'api_image_import-ImageLock-08e662ab-0574-4080-aba5-51bd7c16a52f' {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {}, 'provides': None}
     |__Atom 'api_image_import_retry' {'intention': 'EXECUTE', 'state': 'SUCCESS', 'requires': {}, 'provides': [(None, {})]}
        |__Flow 'api_image_import': urllib.error.HTTPError: HTTP Error 403: Forbidden
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor Traceback (most recent call last):
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     result = task.execute(**arguments)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/glance/async_/flows/_internal_plugins/web_download.py", line 120, in execute
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     "task_id": self.task_id})
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/oslo_utils/excutils.py", line 227, in __exit__
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     self.force_reraise()
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/oslo_utils/excutils.py", line 200, in force_reraise
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     raise self.value
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/glance/async_/flows/_internal_plugins/web_download.py", line 115, in execute
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     data = script_utils.get_image_data_iter(self.uri)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/var/lib/kolla/venv/lib/python3.6/site-packages/glance/common/scripts/utils.py", line 142, in get_image_data_iter
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     return urllib.request.urlopen(uri)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     return opener.open(url, data, timeout)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 532, in open
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     response = meth(req, response)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 642, in http_response
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     'http', request, response, code, msg, hdrs)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 570, in error
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     return self._call_chain(*args)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     result = func(*args)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor   File "/usr/lib64/python3.6/urllib/request.py", line 650, in http_error_default
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor     raise HTTPError(req.full_url, code, msg, hdrs, fp)
2026-02-06 14:23:08.082 41 ERROR glance.async_.taskflow_executor urllib.error.HTTPError: HTTP Error 403: Forbidden`

This doesn't happen with the previous endpoint - https://object.arcus.openstack.hpc.cam.ac.uk/swift/v1 - so this indicates to me that it is an issue with your new storage endpoint - are there any permissions you could tweak on your side ?

If you need any extra information from us please let me know