pause:
  description: |
    Pause keystone services.
    If the keystone deployment is clustered using the hacluster charm, the
    corresponding hacluster unit on the node must first be paused as well.
    Not doing so may lead to an interruption of service.
resume:
  description: |
    Resume keystone services.
    If the keystone deployment is clustered using the hacluster charm, the
    corresponding hacluster unit on the node must be resumed as well.
get-admin-password:
  description: |
    Retrieve the admin password for the Keystone service.
rotate-admin-password:
  description: |
    Rotate the admin user's password.
    The current password is replaced with a randomly generated password. The
    new password is stored in the leader's admin_passwd bucket.
openstack-upgrade:
  description: |
    Perform openstack upgrades. Config option action-managed-upgrade must be
    set to True.
security-checklist:
  description: |
    Validate the running configuration against the OpenStack security guides
    checklist.