---
title: Charmhub | Deploy Keystone using Charmhub - The Open Operator Collection
description: Deploy the latest version of Keystone on any cloud.
url: https://charmhub.io/keystone/actions
---

# Keystone

[OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")

* [OpenStack Charmers](https://charmhub.io/publisher/openstack-charmers "View all packages from OpenStack Charmers")
* [Cloud](https://charmhub.io/?filter=cloud)
* [Security](https://charmhub.io/?filter=security)

Platform:

24.04

23.10

23.04

22.10

22.04

20.04

18.04

14.04

12.04

yoga/stable 894

```
juju deploy keystone --channel yoga/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [get-admin-password](https://charmhub.io/keystone/actions#get-admin-password)
* [list-service-usernames](https://charmhub.io/keystone/actions#list-service-usernames)
* [openstack-upgrade](https://charmhub.io/keystone/actions#openstack-upgrade)
* [pause](https://charmhub.io/keystone/actions#pause)
* [resume](https://charmhub.io/keystone/actions#resume)
* [rotate-admin-password](https://charmhub.io/keystone/actions#rotate-admin-password)
* [rotate-service-user-password](https://charmhub.io/keystone/actions#rotate-service-user-password)
* [security-checklist](https://charmhub.io/keystone/actions#security-checklist)

[Learn about actions >](https://juju.is/docs/juju/action)

* get-admin-password

  Retrieve the admin password for the Keystone service.
* list-service-usernames

  List the usernames of the services as known by keystone. This may differ
  from those expected due to either prefixes or a service providing multiple
  endpoints. The service username passed to 'rotate-service-user-password'
  needs to be one of this list.
* openstack-upgrade

  Perform openstack upgrades. Config option action-managed-upgrade must be
  set to True.
* pause

  Pause keystone services.
  If the keystone deployment is clustered using the hacluster charm, the
  corresponding hacluster unit on the node must first be paused as well.
  Not doing so may lead to an interruption of service.
* resume

  Resume keystone services.
  If the keystone deployment is clustered using the hacluster charm, the
  corresponding hacluster unit on the node must be resumed as well.
* rotate-admin-password

  Rotate the admin user's password.
  The current password is replaced with a randomly generated password. The
  new password is stored in the leader's admin\_passwd bucket.
* rotate-service-user-password

  Rotate the specified service user's password. The current password is
  replaced with a randomly generated password. The password is changed on the
  relation to the service user's units. This may result in a control plane
  outage for the duration of the password changing process.

  Params

  + service-user
    string

    The name of the service as specified by the service user charm. e.g.
    'cinder' for the cinder charm, 'glance' for the glance charm.
* security-checklist

  Validate the running configuration against the OpenStack security guides
  checklist.