)]}'
{"doc/source/configuration.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"080633ef719d12b89108a15e2a62a305b858ffd0","unresolved":false,"context_lines":[{"line_number":1360,"context_line":"be running the keystone service to ensure proper ownership for the private key"},{"line_number":1361,"context_line":"file and the associated certificates."},{"line_number":1362,"context_line":""},{"line_number":1363,"context_line":"Adding Users, Projects, and Roles via Command Line Interfaces"},{"line_number":1364,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":1365,"context_line":""},{"line_number":1366,"context_line":"Keystone APIs are protected by the rules in the policy file. The default policy"},{"line_number":1367,"context_line":"rules require admin credentials to administer ``users``, ``projects``, and"},{"line_number":1368,"context_line":"``roles``. See section"},{"line_number":1369,"context_line":"`Keystone API protection with Role Based Access Control (RBAC)`_ for more"},{"line_number":1370,"context_line":"details on policy files."},{"line_number":1371,"context_line":""},{"line_number":1372,"context_line":"The keystone command line interface packaged in `python-keystoneclient`_ only"},{"line_number":1373,"context_line":"supports the Identity v2.0 API. The OpenStack common command line interface"},{"line_number":1374,"context_line":"packaged in `python-openstackclient`_ supports both v2.0 and v3 APIs."},{"line_number":1375,"context_line":""},{"line_number":1376,"context_line":"With both command line interfaces there are two ways to configure the client to"},{"line_number":1377,"context_line":"use admin credentials, using either an existing token or password credentials."},{"line_number":1378,"context_line":""},{"line_number":1379,"context_line":".. NOTE::"},{"line_number":1380,"context_line":""},{"line_number":1381,"context_line":"    As of the Juno release, it is recommended to use"},{"line_number":1382,"context_line":"    ``python-openstackclient``, as it supports both v2.0 and v3 APIs. For the"},{"line_number":1383,"context_line":"    purpose of backwards compatibility, the CLI packaged in"},{"line_number":1384,"context_line":"    ``python-keystoneclient`` is not being removed."},{"line_number":1385,"context_line":""},{"line_number":1386,"context_line":".. _`python-openstackclient`: http://docs.openstack.org/developer/python-openstackclient/"},{"line_number":1387,"context_line":".. _`python-keystoneclient`: http://docs.openstack.org/developer/python-keystoneclient/"},{"line_number":1388,"context_line":""},{"line_number":1389,"context_line":"Authenticating with a Token"},{"line_number":1390,"context_line":"---------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_c8f0c2cc","line":1387,"range":{"start_line":1363,"start_character":0,"end_line":1387,"end_character":87},"updated":"2016-10-18 02:37:27.000000000","message":"i\u0027d be OK with removing this entirely, i think folks have mostly moved to OSC for keystone commands -- i haven\u0027t had to field a question about \"wheres the keystone CLI\" on IRC in a while.","commit_id":"e3962e5f1b54bb477c78ccda2576f52ae71e9e47"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"44bfa0d0474ff3585a4bc13a4ef7be86ff555e76","unresolved":false,"context_lines":[{"line_number":1360,"context_line":"be running the keystone service to ensure proper ownership for the private key"},{"line_number":1361,"context_line":"file and the associated certificates."},{"line_number":1362,"context_line":""},{"line_number":1363,"context_line":"Adding Users, Projects, and Roles via Command Line Interfaces"},{"line_number":1364,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":1365,"context_line":""},{"line_number":1366,"context_line":"Keystone APIs are protected by the rules in the policy file. The default policy"},{"line_number":1367,"context_line":"rules require admin credentials to administer ``users``, ``projects``, and"},{"line_number":1368,"context_line":"``roles``. See section"},{"line_number":1369,"context_line":"`Keystone API protection with Role Based Access Control (RBAC)`_ for more"},{"line_number":1370,"context_line":"details on policy files."},{"line_number":1371,"context_line":""},{"line_number":1372,"context_line":"The keystone command line interface packaged in `python-keystoneclient`_ only"},{"line_number":1373,"context_line":"supports the Identity v2.0 API. The OpenStack common command line interface"},{"line_number":1374,"context_line":"packaged in `python-openstackclient`_ supports both v2.0 and v3 APIs."},{"line_number":1375,"context_line":""},{"line_number":1376,"context_line":"With both command line interfaces there are two ways to configure the client to"},{"line_number":1377,"context_line":"use admin credentials, using either an existing token or password credentials."},{"line_number":1378,"context_line":""},{"line_number":1379,"context_line":".. NOTE::"},{"line_number":1380,"context_line":""},{"line_number":1381,"context_line":"    As of the Juno release, it is recommended to use"},{"line_number":1382,"context_line":"    ``python-openstackclient``, as it supports both v2.0 and v3 APIs. For the"},{"line_number":1383,"context_line":"    purpose of backwards compatibility, the CLI packaged in"},{"line_number":1384,"context_line":"    ``python-keystoneclient`` is not being removed."},{"line_number":1385,"context_line":""},{"line_number":1386,"context_line":".. _`python-openstackclient`: http://docs.openstack.org/developer/python-openstackclient/"},{"line_number":1387,"context_line":".. _`python-keystoneclient`: http://docs.openstack.org/developer/python-keystoneclient/"},{"line_number":1388,"context_line":""},{"line_number":1389,"context_line":"Authenticating with a Token"},{"line_number":1390,"context_line":"---------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_8876cad6","line":1387,"range":{"start_line":1363,"start_character":0,"end_line":1387,"end_character":87},"in_reply_to":"fa6399be_c8f0c2cc","updated":"2016-10-18 03:08:01.000000000","message":"++ maybe briefly introduce of OSC, so that we know how to create those resource.","commit_id":"e3962e5f1b54bb477c78ccda2576f52ae71e9e47"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"080633ef719d12b89108a15e2a62a305b858ffd0","unresolved":false,"context_lines":[{"line_number":1386,"context_line":".. _`python-openstackclient`: http://docs.openstack.org/developer/python-openstackclient/"},{"line_number":1387,"context_line":".. _`python-keystoneclient`: http://docs.openstack.org/developer/python-keystoneclient/"},{"line_number":1388,"context_line":""},{"line_number":1389,"context_line":"Authenticating with a Token"},{"line_number":1390,"context_line":"---------------------------"},{"line_number":1391,"context_line":""},{"line_number":1392,"context_line":".. NOTE::"},{"line_number":1393,"context_line":""},{"line_number":1394,"context_line":"    If your keystone deployment is brand new, you will need to use this"},{"line_number":1395,"context_line":"    authentication method, along with your ``[DEFAULT] admin_token``."},{"line_number":1396,"context_line":""},{"line_number":1397,"context_line":"To authenticate with keystone using a token and ``python-openstackclient``, set"},{"line_number":1398,"context_line":"the following flags."},{"line_number":1399,"context_line":""},{"line_number":1400,"context_line":"* ``--os-url OS_URL``: Keystone endpoint the user communicates with"},{"line_number":1401,"context_line":"* ``--os-token OS_TOKEN``: User\u0027s service token"},{"line_number":1402,"context_line":""},{"line_number":1403,"context_line":"To administer a keystone endpoint, your token should be either belong to a user"},{"line_number":1404,"context_line":"with the ``admin`` role, or, if you haven\u0027t created one yet, should be equal to"},{"line_number":1405,"context_line":"the value defined by ``[DEFAULT] admin_token`` in your ``keystone.conf``."},{"line_number":1406,"context_line":""},{"line_number":1407,"context_line":"You can also set these variables in your environment so that they do not need"},{"line_number":1408,"context_line":"to be passed as arguments each time:"},{"line_number":1409,"context_line":""},{"line_number":1410,"context_line":".. code-block:: bash"},{"line_number":1411,"context_line":""},{"line_number":1412,"context_line":"    $ export OS_URL\u003dhttp://localhost:35357/v2.0"},{"line_number":1413,"context_line":"    $ export OS_TOKEN\u003dADMIN"},{"line_number":1414,"context_line":""},{"line_number":1415,"context_line":"Instead of ``python-openstackclient``, if using ``python-keystoneclient``, set"},{"line_number":1416,"context_line":"the following:"},{"line_number":1417,"context_line":""},{"line_number":1418,"context_line":"* ``--os-endpoint OS_SERVICE_ENDPOINT``: equivalent to ``--os-url OS_URL``"},{"line_number":1419,"context_line":"* ``--os-service-token OS_SERVICE_TOKEN``: equivalent to"},{"line_number":1420,"context_line":"  ``--os-token OS_TOKEN``"},{"line_number":1421,"context_line":""},{"line_number":1422,"context_line":""},{"line_number":1423,"context_line":"Authenticating with a Password"},{"line_number":1424,"context_line":"------------------------------"},{"line_number":1425,"context_line":""},{"line_number":1426,"context_line":"To authenticate with keystone using a password and ``python-openstackclient``,"},{"line_number":1427,"context_line":"set the following flags, note that the following user referenced below should"},{"line_number":1428,"context_line":"be granted the ``admin`` role."},{"line_number":1429,"context_line":""},{"line_number":1430,"context_line":"* ``--os-username OS_USERNAME``: Name of your user"},{"line_number":1431,"context_line":"* ``--os-password OS_PASSWORD``: Password for your user"},{"line_number":1432,"context_line":"* ``--os-project-name OS_PROJECT_NAME``: Name of your project"},{"line_number":1433,"context_line":"* ``--os-auth-url OS_AUTH_URL``: URL of the keystone authentication server"},{"line_number":1434,"context_line":""},{"line_number":1435,"context_line":"You can also set these variables in your environment so that they do not need"},{"line_number":1436,"context_line":"to be passed as arguments each time:"},{"line_number":1437,"context_line":""},{"line_number":1438,"context_line":".. code-block:: bash"},{"line_number":1439,"context_line":""},{"line_number":1440,"context_line":"    $ export OS_USERNAME\u003dmy_username"},{"line_number":1441,"context_line":"    $ export OS_PASSWORD\u003dmy_password"},{"line_number":1442,"context_line":"    $ export OS_PROJECT_NAME\u003dmy_project"},{"line_number":1443,"context_line":"    $ export OS_AUTH_URL\u003dhttp://localhost:35357/v2.0"},{"line_number":1444,"context_line":""},{"line_number":1445,"context_line":"If using ``python-keystoneclient``, set the following instead:"},{"line_number":1446,"context_line":""},{"line_number":1447,"context_line":"* ``--os-tenant-name OS_TENANT_NAME``: equivalent to"},{"line_number":1448,"context_line":"  ``--os-project-name OS_PROJECT_NAME``"},{"line_number":1449,"context_line":""},{"line_number":1450,"context_line":""},{"line_number":1451,"context_line":"Example usage"},{"line_number":1452,"context_line":"-------------"},{"line_number":1453,"context_line":""},{"line_number":1454,"context_line":"``python-openstackclient`` is set up to expect commands in the general form of:"},{"line_number":1455,"context_line":""},{"line_number":1456,"context_line":".. code-block:: bash"},{"line_number":1457,"context_line":""},{"line_number":1458,"context_line":"  $ openstack [\u003cglobal-options\u003e] \u003cobject-1\u003e \u003caction\u003e [\u003cobject-2\u003e] [\u003ccommand-arguments\u003e]"},{"line_number":1459,"context_line":""},{"line_number":1460,"context_line":"For example, the commands ``user list`` and ``project create`` can be invoked"},{"line_number":1461,"context_line":"as follows:"},{"line_number":1462,"context_line":""},{"line_number":1463,"context_line":".. code-block:: bash"},{"line_number":1464,"context_line":""},{"line_number":1465,"context_line":"    # Using token authentication, with environment variables"},{"line_number":1466,"context_line":"    $ export OS_URL\u003dhttp://127.0.0.1:35357/v2.0/"},{"line_number":1467,"context_line":"    $ export OS_TOKEN\u003dsecrete_token"},{"line_number":1468,"context_line":"    $ openstack user list"},{"line_number":1469,"context_line":"    $ openstack project create demo"},{"line_number":1470,"context_line":""},{"line_number":1471,"context_line":"    # Using token authentication, with flags"},{"line_number":1472,"context_line":"    $ openstack --os-token\u003dsecrete --os-url\u003dhttp://127.0.0.1:35357/v2.0/ user list"},{"line_number":1473,"context_line":"    $ openstack --os-token\u003dsecrete --os-url\u003dhttp://127.0.0.1:35357/v2.0/ project create demo"},{"line_number":1474,"context_line":""},{"line_number":1475,"context_line":"    # Using password authentication, with environment variables"},{"line_number":1476,"context_line":"    $ export OS_USERNAME\u003dadmin"},{"line_number":1477,"context_line":"    $ export OS_PASSWORD\u003dsecrete"},{"line_number":1478,"context_line":"    $ export OS_PROJECT_NAME\u003dadmin"},{"line_number":1479,"context_line":"    $ export OS_AUTH_URL\u003dhttp://localhost:35357/v2.0"},{"line_number":1480,"context_line":"    $ openstack user list"},{"line_number":1481,"context_line":"    $ openstack project create demo"},{"line_number":1482,"context_line":""},{"line_number":1483,"context_line":"    # Using password authentication, with flags"},{"line_number":1484,"context_line":"    $ openstack --os-username\u003dadmin --os-password\u003dsecrete --os-project-name\u003dadmin --os-auth-url\u003dhttp://localhost:35357/v2.0 user list"},{"line_number":1485,"context_line":"    $ openstack --os-username\u003dadmin --os-password\u003dsecrete --os-project-name\u003dadmin --os-auth-url\u003dhttp://localhost:35357/v2.0 project create demo"},{"line_number":1486,"context_line":""},{"line_number":1487,"context_line":"Removing Expired Tokens"},{"line_number":1488,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa6399be_88940a45","line":1485,"range":{"start_line":1389,"start_character":0,"end_line":1485,"end_character":143},"updated":"2016-10-18 02:37:27.000000000","message":"i\u0027d also be OK with removing all of this, but feel free to propose this, and my other comment in a separate patch. IMO there\u0027s no need to keep OSC stuff in the keystone docs (though i probably added it there a long time ago)","commit_id":"e3962e5f1b54bb477c78ccda2576f52ae71e9e47"}]}