keystone.trust package

Subpackages

• keystone.trust.backends package
  • Submodules
  • keystone.trust.backends.sql module
  • Module contents

Submodules

keystone.trust.controllers module

class keystone.trust.controllers.TrustV3(*args, **kwargs)

Bases: keystone.common.controller.V3Controller

classmethod base_url(context, path=None)

Construct a path and pass it to V3Controller.base_url method.

collection_name = 'trusts'

create_trust(context, *args, **kwargs)

Create a new trust.

The user creating the trust must be the trustor.

delete_trust(context, *args, **kwargs)

get_role_for_trust(context, *args, **kwargs)

Get a role that has been assigned to a trust.

get_trust(context, trust_id)

list_roles_for_trust(context, *args, **kwargs)

list_trusts(context, *args, **kwargs)

member_name = 'trust'

keystone.trust.core module

Main entry point into the Trust service.

class keystone.trust.core.Manager(*args, **kwargs)

Bases: keystone.common.manager.Manager

Default pivot point for the Trust backend.

See keystone.common.manager.Manager for more details on how this dynamically calls the backend.

create_trust(*args, **kwargs)

Create a new trust.

Returns:a new trust

delete_trust(*args, **kwargs)

Remove a trust.

Raises keystone.exception.TrustNotFound:  If the trust doesn’t exist.

Recursively remove given and redelegated trusts

driver_namespace = 'keystone.trust'

get_trust(*args, **kwargs)

get_trust_pedigree(*args, **kwargs)

class keystone.trust.core.TrustDriverV8

Bases: object

consume_use(trust_id)

Consume one use of a trust.

One use of a trust is consumed when the trust was created with a limitation on its uses, provided there are still uses available.

Raises:

• keystone.exception.TrustUseLimitReached – If no remaining uses for trust.
• keystone.exception.TrustNotFound – If the trust doesn’t exist.

create_trust(trust_id, trust, roles)

Create a new trust.

Returns:a new trust

delete_trust(trust_id)

get_trust(trust_id, deleted=False)

Get a trust by the trust id.

Parameters:

• trust_id (string) – the trust identifier
• deleted (bool) – return the trust even if it is deleted, expired, or has no consumptions left

list_trusts()

list_trusts_for_trustee(trustee)

list_trusts_for_trustor(trustor)

keystone.trust.routers module

WSGI Routers for the Trust service.

class keystone.trust.routers.Routers

Bases: keystone.common.wsgi.RoutersBase

append_v3_routers(mapper, routers)

keystone.trust.schema module

Module contents