The keystone shell utility

Warning

COMING SOON

The command line interface is not yet completed. This document serves as a reference for the implementation.

The keystone shell utility interacts with OpenStack Keystone API from the command line. It supports the entirety of the OpenStack Keystone API.

First, you’ll need an OpenStack Keystone account. You get this by using the keystone-manage command in OpenStack Keystone.

You’ll need to provide keystone with your OpenStack username and password. You can do this with the --username, --password. You can optionally specify a --tenant_id or --tenant_name, to scope your token to a specific tenant. If you don’t specify a tenant, you will be scoped to your default tenant if you have one. Instead of using options, it is easier to just set them as environment variables:

OS_USERNAME

Your Keystone username.

OS_PASSWORD

Your Keystone password.

OS_TENANT_NAME

Name of Keystone Tenant.

OS_TENANT_ID

ID of Keystone Tenant.

OS_AUTH_URL

The OpenStack API server URL.

KEYSTONE_VERSION

The OpenStack API version.

For example, in Bash you’d use:

export OS_USERNAME=yourname
export OS_PASSWORD=yadayadayada
export OS_TENANT_NAME=myproject
export OS_AUTH_URL=http://example.com:5000/v2.0/
export KEYSTONE_VERSION=2.0

From there, all shell commands take the form:

keystone <command> [arguments...]

Run keystone help to get a full list of all possible commands, and run keystone help <command> to get detailed help for that command.