glance/doc/source/man/glance.rst
Stuart McLaren 0f0fe2ba1b New -k/--insecure command line option
Fix for bug 929591.

Change glance to require server certificate validation
by default when using https. The standard system
CA file will be used if available (and an alternative was not
provided).

The --insecure option can be used by clients to skip server
certificate validation if appropriate.

* This change will impact Nova clients accessing glance over https.
  If the standard CA file is not suitable they will need to provide
  a CA file or else create an 'insecure' glance client.
* Accesses to a https registry server must now perform server
  certificate validation.
* If the package which provides the standard
  system CA file is installed then that file will be used by default.
  It probably makes sense for the glance package to have a
  dependency on whichever package provides the default CA bundle.
  (In Ubuntu this is 'ca-certificates')

Change-Id: I7c83361ba0881559ec77d4baf10dfeb5b8e32185
2012-02-13 13:57:13 +00:00

137 lines
2.9 KiB
ReStructuredText

======
glance
======
-----------------------------
Glance command line interface
-----------------------------
:Author: glance@lists.launchpad.net
:Date: 2012-01-03
:Copyright: OpenStack LLC
:Version: 2012.1-dev
:Manual section: 1
:Manual group: cloud computing
SYNOPSIS
========
glance <command> [options] [args]
COMMANDS
========
**help <command>**
Output help for one of the commands below
**add**
Adds a new image to Glance
**update**
Updates an image's metadata in Glance
**delete**
Deletes an image from Glance
**index**
Return brief information about images in Glance
**details**
Return detailed information about images in Glance
**show**
Show detailed information about an image in Glance
**clear**
Removes all images and metadata from Glance
MEMBER COMMANDS
===============
**image-members**
List members an image is shared with
**member-images**
List images shared with a member
**member-add**
Grants a member access to an image
**member-delete**
Revokes a member's access to an image
**members-replace**
Replaces all membership for an image
OPTIONS
=======
**--version**
show program's version number and exit
**-h, --help**
show this help message and exit
**-v, --verbose**
Print more verbose output
**-d, --debug**
Print more verbose output
**-H ADDRESS, --host=ADDRESS**
Address of Glance API host. Default: 0.0.0.0
**-p PORT, --port=PORT**
Port the Glance API host listens on. Default: 9292
**-U URL, --url=URL**
URL of Glance service. This option can be used to specify the hostname,
port and protocol (http/https) of the glance server, for example
-U https://localhost:9292/v1
Default: None
**-k, --insecure**
Explicitly allow glance to perform insecure SSL (https) requests.
The server certificate will not be verified against any certificate
authorities. This option should be used with caution.
**-A TOKEN, --auth_token=TOKEN**
Authentication token to use to identify the client to the glance server
**--limit=LIMIT**
Page size to use while requesting image metadata
**--marker=MARKER**
Image index after which to begin pagination
**--sort_key=KEY**
Sort results by this image attribute.
**--sort_dir=[desc|asc]**
Sort results in this direction.
**-f, --force**
Prevent select actions from requesting user confirmation
**--dry-run**
Don't actually execute the command, just print output showing what
WOULD happen.
**--can-share**
Allow member to further share image.
SEE ALSO
========
* `OpenStack Glance <http://glance.openstack.org>`__
BUGS
====
* Glance is sourced in Launchpad so you can view current bugs at `OpenStack Glance <http://glance.openstack.org>`__