Keystone

Learn about actions >

• get-admin-password

  Retrieve the admin password for the Keystone service.

• list-service-usernames

  List the usernames of the services as known by keystone. This may differ from those expected due to either prefixes or a service providing multiple endpoints. The service username passed to 'rotate-service-user-password' needs to be one of this list.

• openstack-upgrade

  Perform openstack upgrades. Config option action-managed-upgrade must be set to True.

• pause

  Pause keystone services. If the keystone deployment is clustered using the hacluster charm, the corresponding hacluster unit on the node must first be paused as well. Not doing so may lead to an interruption of service.

• resume

  Resume keystone services. If the keystone deployment is clustered using the hacluster charm, the corresponding hacluster unit on the node must be resumed as well.

• rotate-admin-password

  Rotate the admin user's password. The current password is replaced with a randomly generated password. The new password is stored in the leader's admin_passwd bucket.

• rotate-service-user-password

  Rotate the specified service user's password. The current password is replaced with a randomly generated password. The password is changed on the relation to the service user's units. This may result in a control plane outage for the duration of the password changing process.

  Params

  • service-user string

    The name of the service as specified by the service user charm. e.g. 'cinder' for the cinder charm, 'glance' for the glance charm.

• security-checklist

  Validate the running configuration against the OpenStack security guides checklist.