openstack/keystone
Code Issues Proposed changes
8fe72cfe5d
keystone/doc/source/cli/commands.rst
Lance Bragstad 1abe8a2ec0 Add keystone-manage create_jws_keypair functionality 
Thw JSON Web Token provider implementation is going to need keys in
order to issue and validate tokens, very similar to how the fernet
provider operates, but using asymmetric signing instead of symmetric
encryption.

This commit addes a new subcommand to the keystone-manage binary that
creates a ECDSA key pair for creating and validating JWS tokens.

bp json-web-tokens

Change-Id: I9cf5c168bae2a90aba3d696e3f6ce3028998121a
2019-01-31 19:41:25 +00:00

1.4 KiB
Raw Blame History

General keystone-manage options:

  • --help : display verbose help output.

Invoking keystone-manage by itself will give you some usage information.

Available commands:

  • bootstrap: Perform the basic bootstrap process.
  • create_jws_keypair: Create an ECDSA key pair for JWS token signing.
  • credential_migrate: Encrypt credentials using a new primary key.
  • credential_rotate: Rotate Fernet keys for credential encryption.
  • credential_setup: Setup a Fernet key repository for credential encryption.
  • db_sync: Sync the database.
  • db_version: Print the current migration version of the database.
  • doctor: Diagnose common problems with keystone deployments.
  • domain_config_upload: Upload domain configuration file.
  • fernet_rotate: Rotate keys in the Fernet key repository.
  • fernet_setup: Setup a Fernet key repository for token encryption.
  • mapping_populate: Prepare domain-specific LDAP backend.
  • mapping_purge: Purge the identity mapping table.
  • mapping_engine: Test your federation mapping rules.
  • receipt_rotate: Rotate auth receipts encryption keys.
  • receipt_setup: Setup a key repository for auth receipts.
  • saml_idp_metadata: Generate identity provider metadata.
  • token_rotate: Rotate token keys in the key repository.
  • token_setup: Setup a token key repository for token encryption.
  • trust_flush: Purge expired trusts.