The openstack_dashboard.api.keystone Module

class openstack_dashboard.api.keystone.IdentityAPIVersionManager(service_type, preferred_version=None)

Bases: openstack_dashboard.api.base.APIVersionManager

IdentityAPIVersionManager.get_project_manager(*args, **kwargs)

IdentityAPIVersionManager.upgrade_v2_user(user)

class openstack_dashboard.api.keystone.Service(service, region, *args, **kwargs)

Bases: openstack_dashboard.api.base.APIDictWrapper

Wrapper for a dict based on the service data from keystone.

openstack_dashboard.api.keystone.add_group_role(request, role, group, domain=None, project=None)

Adds a role for a group on a domain or project.

openstack_dashboard.api.keystone.add_group_user(request, group_id, user_id)

openstack_dashboard.api.keystone.add_tenant_user_role(request, project=None, user=None, role=None, group=None, domain=None)

Adds a role for a user on a tenant.

openstack_dashboard.api.keystone.create_ec2_credentials(request, user_id, tenant_id)

openstack_dashboard.api.keystone.domain_create(request, name, description=None, enabled=None)

openstack_dashboard.api.keystone.domain_delete(request, domain_id)

openstack_dashboard.api.keystone.domain_get(request, domain_id)

openstack_dashboard.api.keystone.domain_list(request)

openstack_dashboard.api.keystone.domain_update(request, domain_id, name=None, description=None, enabled=None)

openstack_dashboard.api.keystone.ec2_manager(request)

openstack_dashboard.api.keystone.get_default_domain(request)

Gets the default domain object to use when creating Identity object. Returns the domain context if is set, otherwise return the domain of the logon user.

openstack_dashboard.api.keystone.get_default_role(request)

Gets the default role object from Keystone and saves it as a global since this is configured in settings and should not change from request to request. Supports lookup by name or id.

openstack_dashboard.api.keystone.get_user_ec2_credentials(request, user_id, access_token)

openstack_dashboard.api.keystone.group_create(request, domain_id, name, description=None)

openstack_dashboard.api.keystone.group_delete(request, group_id)

openstack_dashboard.api.keystone.group_get(request, group_id, admin=True)

openstack_dashboard.api.keystone.group_list(request, domain=None, project=None, user=None)

openstack_dashboard.api.keystone.group_update(request, group_id, name=None, description=None)

openstack_dashboard.api.keystone.keystone_backend_name()

openstack_dashboard.api.keystone.keystone_can_edit_domain()

openstack_dashboard.api.keystone.keystone_can_edit_group()

openstack_dashboard.api.keystone.keystone_can_edit_project()

openstack_dashboard.api.keystone.keystone_can_edit_role()

openstack_dashboard.api.keystone.keystone_can_edit_user()

openstack_dashboard.api.keystone.keystoneclient(request, admin=False)

Returns a client connected to the Keystone backend.

Several forms of authentication are supported:

• Username + password -> Unscoped authentication
• Username + password + tenant id -> Scoped authentication
• Unscoped token -> Unscoped authentication
• Unscoped token + tenant id -> Scoped authentication
• Scoped token -> Scoped authentication

Available services and data from the backend will vary depending on whether the authentication was scoped or unscoped.

Lazy authentication if an endpoint parameter is provided.

Calls requiring the admin endpoint should have admin=True passed in as a keyword argument.

The client is cached so that subsequent API calls during the same request/response cycle don’t have to be re-authenticated.

openstack_dashboard.api.keystone.list_ec2_credentials(request, user_id)

openstack_dashboard.api.keystone.remove_group_role(request, role, group, domain=None, project=None)

Removes a given single role for a group from a domain or project.

openstack_dashboard.api.keystone.remove_group_roles(request, group, domain=None, project=None)

Removes all roles from a group on a domain or project, removing them from it.

openstack_dashboard.api.keystone.remove_group_user(request, group_id, user_id)

openstack_dashboard.api.keystone.remove_tenant_user(request, project=None, user=None, domain=None)

Removes all roles from a user on a tenant, removing them from it.

openstack_dashboard.api.keystone.remove_tenant_user_role(request, project=None, user=None, role=None, group=None, domain=None)

Removes a given single role for a user from a tenant.

openstack_dashboard.api.keystone.role_create(request, name)

openstack_dashboard.api.keystone.role_delete(request, role_id)

openstack_dashboard.api.keystone.role_get(request, role_id)

openstack_dashboard.api.keystone.role_list(request)

Returns a global list of available roles.

openstack_dashboard.api.keystone.role_update(request, role_id, name=None)

openstack_dashboard.api.keystone.roles_for_group(request, group, domain=None, project=None)

openstack_dashboard.api.keystone.roles_for_user(request, user, project)

openstack_dashboard.api.keystone.tenant_create(request, name, description=None, enabled=None, domain=None, **kwargs)

openstack_dashboard.api.keystone.tenant_delete(request, project)

openstack_dashboard.api.keystone.tenant_get(request, project, admin=True)

openstack_dashboard.api.keystone.tenant_list(request, paginate=False, marker=None, domain=None, user=None)

openstack_dashboard.api.keystone.tenant_update(request, project, name=None, description=None, enabled=None, domain=None, **kwargs)

openstack_dashboard.api.keystone.user_create(request, name=None, email=None, password=None, project=None, enabled=None, domain=None)

openstack_dashboard.api.keystone.user_delete(request, user_id)

openstack_dashboard.api.keystone.user_get(request, user_id, admin=True)

openstack_dashboard.api.keystone.user_list(request, project=None, domain=None, group=None)

openstack_dashboard.api.keystone.user_update(request, user, **data)

openstack_dashboard.api.keystone.user_update_enabled(request, user, enabled)

openstack_dashboard.api.keystone.user_update_own_password(request, origpassword, password)

openstack_dashboard.api.keystone.user_update_password(request, user, password, admin=True)

openstack_dashboard.api.keystone.user_update_tenant(request, user, project, admin=True)