Example usage and Identity features¶
The openstack CLI is used to interact with the Identity service.
It is set up to expect commands in the general
form of openstack command argument, followed by flag-like keyword
arguments to provide additional (often optional) information. For
example, the openstack user list and
openstack project create commands can be invoked as follows:
# Using token auth env variables
export OS_TOKEN=secret
export OS_URL=http://127.0.0.1:5000/v3/
openstack user list
openstack project create demo --domain default
# Using token auth flags
openstack --os-token secret --os-url http://127.0.0.1:5000/v3/ user list
openstack --os-token secret --os-url http://127.0.0.1:5000/v3/ project create demo
# Using user + password + project_name env variables
export OS_USERNAME=admin
export OS_PASSWORD=secret
export OS_PROJECT_NAME=admin
openstack user list
openstack project create demo --domain default
# Using user + password + project-name flags
openstack --os-username admin --os-password secret --os-project-name admin user list
openstack --os-username admin --os-password secret --os-project-name admin project create demo
Logging¶
You configure logging externally to the rest of Identity. The name of
the file specifying the logging configuration is set using the
log_config_append option in the [DEFAULT] section of the
/etc/keystone/keystone.conf file. To route logging through syslog,
set use_syslog=true in the [DEFAULT] section.
A sample logging configuration file is available with the project in
etc/logging.conf.sample. Like other OpenStack projects, Identity
uses the Python logging module, which provides extensive configuration
options that let you define the output levels and formats.
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.