0f0fe2ba1b
Fix for bug 929591. Change glance to require server certificate validation by default when using https. The standard system CA file will be used if available (and an alternative was not provided). The --insecure option can be used by clients to skip server certificate validation if appropriate. * This change will impact Nova clients accessing glance over https. If the standard CA file is not suitable they will need to provide a CA file or else create an 'insecure' glance client. * Accesses to a https registry server must now perform server certificate validation. * If the package which provides the standard system CA file is installed then that file will be used by default. It probably makes sense for the glance package to have a dependency on whichever package provides the default CA bundle. (In Ubuntu this is 'ca-certificates') Change-Id: I7c83361ba0881559ec77d4baf10dfeb5b8e32185
2.9 KiB
glance
Glance command line interface
- Author
- Date
-
2012-01-03
- Copyright
-
OpenStack LLC
- Version
-
2012.1-dev
- Manual section
-
1
- Manual group
-
cloud computing
SYNOPSIS
glance <command> [options] [args]
COMMANDS
- help <command>
Output help for one of the commands below
- add
Adds a new image to Glance
- update
Updates an image's metadata in Glance
- delete
Deletes an image from Glance
- index
Return brief information about images in Glance
- details
Return detailed information about images in Glance
- show
Show detailed information about an image in Glance
- clear
Removes all images and metadata from Glance
MEMBER COMMANDS
- image-members
List members an image is shared with
- member-images
List images shared with a member
- member-add
Grants a member access to an image
- member-delete
Revokes a member's access to an image
- members-replace
Replaces all membership for an image
OPTIONS
- --version
show program's version number and exit
- -h, --help
show this help message and exit
- -v, --verbose
Print more verbose output
- -d, --debug
Print more verbose output
- -H ADDRESS, --host=ADDRESS
Address of Glance API host. Default: 0.0.0.0
- -p PORT, --port=PORT
Port the Glance API host listens on. Default: 9292
- -U URL, --url=URL
URL of Glance service. This option can be used to specify the hostname, port and protocol (http/https) of the glance server, for example -U https://localhost:9292/v1 Default: None
- -k, --insecure
Explicitly allow glance to perform insecure SSL (https) requests. The server certificate will not be verified against any certificate authorities. This option should be used with caution.
- -A TOKEN, --auth_token=TOKEN
Authentication token to use to identify the client to the glance server
- --limit=LIMIT
Page size to use while requesting image metadata
- --marker=MARKER
Image index after which to begin pagination
- --sort_key=KEY
Sort results by this image attribute.
- --sort_dir=[desc|asc]
Sort results in this direction.
- -f, --force
Prevent select actions from requesting user confirmation
- --dry-run
Don't actually execute the command, just print output showing what WOULD happen.
- --can-share
Allow member to further share image.
SEE ALSO
BUGS
- Glance is sourced in Launchpad so you can view current bugs at OpenStack Glance