openstack/keystone
Code Issues Proposed changes
e120ac341a
keystone/doc/source/man/commands.rst
Steve Martinelli 2edc392567 Update configuration.rst documentation 
* landing page: increase toc depth for configuration for easier navigation
* landing page: move keystone-manage man page to bottom

* created common keystone-manage commands doc, so config and man page can
  reference

* moved the sample config files section up near config file section
* moved fernet token section up near token section
* moved token flush near token section
* moved endpoint policy and endpoint filter near catalog

* removed references to devstack files that do not exist
* removed references to experimental and stable status for stable features
* removed references to keystoneclient CLI

* removed IANA portions, not config related
* removed section about user CRUD on v2.0 API, not config related

* lots of minor cleanup with syntax and wording

Change-Id: Id814b70d626299ba0717d6759ec6be5e97645a39
2016-11-21 10:40:41 -05:00

1.2 KiB
Raw Blame History

General keystone-manage options:

  • --help : display verbose help output.

Invoking keystone-manage by itself will give you some usage information.

Available commands:

  • bootstrap: Perform the basic bootstrap process.
  • credential_migrate: Encrypt credentials using a new primary key.
  • credential_rotate: Rotate Fernet keys for credential encryption.
  • credential_setup: Setup a Fernet key repository for credential encryption.
  • db_sync: Sync the database.
  • db_version: Print the current migration version of the database.
  • doctor: Diagnose common problems with keystone deployments.
  • domain_config_upload: Upload domain configuration file.
  • fernet_rotate: Rotate keys in the Fernet key repository.
  • fernet_setup: Setup a Fernet key repository for token encryption.
  • mapping_populate: Prepare domain-specific LDAP backend.
  • mapping_purge: Purge the identity mapping table.
  • mapping_engine: Test your federation mapping rules.
  • pki_setup: Initialize the certificates used to sign revocation lists. deprecated
  • saml_idp_metadata: Generate identity provider metadata.
  • token_flush: Purge expired tokens.