The commands "receipt_setup" and "receipt_rotate" are used for control receipt keys. They should be exposed to operators. Update the cli doc in alpha order as well. Change-Id: Id8f062ce1d713cd029a11fe8fdc81c256a771471
1.4 KiB
1.4 KiB
General keystone-manage options:
--help: display verbose help output.
Invoking keystone-manage by itself will give you some
usage information.
Available commands:
bootstrap: Perform the basic bootstrap process.credential_migrate: Encrypt credentials using a new primary key.credential_rotate: Rotate Fernet keys for credential encryption.credential_setup: Setup a Fernet key repository for credential encryption.db_sync: Sync the database.db_version: Print the current migration version of the database.doctor: Diagnose common problems with keystone deployments.domain_config_upload: Upload domain configuration file.fernet_rotate: Rotate keys in the Fernet key repository.fernet_setup: Setup a Fernet key repository for token encryption.mapping_populate: Prepare domain-specific LDAP backend.mapping_purge: Purge the identity mapping table.mapping_engine: Test your federation mapping rules.receipt_rotate: Rotate auth receipts encryption keys.receipt_setup: Setup a key repository for auth receipts.saml_idp_metadata: Generate identity provider metadata.token_rotate: Rotate token keys in the key repository.token_setup: Setup a token key repository for token encryption.trust_flush: Purge expired trusts.