keystoneclient.v3.contrib package¶

Subpackages¶

Submodules¶

keystoneclient.v3.contrib.endpoint_filter module¶

class keystoneclient.v3.contrib.endpoint_filter.EndpointFilterManager(client)¶

Bases: Manager

Manager class for manipulating project-endpoint associations.

Project-endpoint associations can be with endpoints directly or via endpoint groups.

OS_EP_FILTER_EXT = '/OS-EP-FILTER'¶

add_endpoint_group_to_project(endpoint_group, project)¶: Create a project-endpoint group association.

add_endpoint_to_project(project, endpoint)¶: Create a project-endpoint association.

check_endpoint_group_in_project(endpoint_group, project)¶: Check if project-endpoint group association exists.

check_endpoint_in_project(project, endpoint)¶: Check if project-endpoint association exists.

delete_endpoint_from_project(project, endpoint)¶: Remove a project-endpoint association.

delete_endpoint_group_from_project(endpoint_group, project)¶: Remove a project-endpoint group association.

list_endpoint_groups_for_project(project)¶: List all endpoint groups for a given project.

list_endpoints_for_project(project)¶: List all endpoints for a given project.

list_projects_for_endpoint(endpoint)¶: List all projects for a given endpoint.

list_projects_for_endpoint_group(endpoint_group)¶: List all projects associated with a given endpoint group.

keystoneclient.v3.contrib.endpoint_policy module¶

class keystoneclient.v3.contrib.endpoint_policy.EndpointPolicyManager(client)¶

Bases: Manager

Manager class for manipulating endpoint-policy associations.

OS_EP_POLICY_EXT = 'OS-ENDPOINT-POLICY'¶

check_policy_association_for_endpoint(policy, endpoint)¶: Check an association between a policy and an endpoint.

check_policy_association_for_region_and_service(policy, region, service)¶: Check an association between a policy and a service in a region.

check_policy_association_for_service(policy, service)¶: Check an association between a policy and a service.

create_policy_association_for_endpoint(policy, endpoint)¶: Create an association between a policy and an endpoint.

create_policy_association_for_region_and_service(policy, region, service)¶: Create an association between a policy and a service in a region.

create_policy_association_for_service(policy, service)¶: Create an association between a policy and a service.

delete_policy_association_for_endpoint(policy, endpoint)¶: Delete an association between a policy and an endpoint.

delete_policy_association_for_region_and_service(policy, region, service)¶: Delete an association between a policy and a service in a region.

delete_policy_association_for_service(policy, service)¶: Delete an association between a policy and a service.

get_policy_for_endpoint(endpoint)¶

Get the effective policy for an endpoint.

Parameters:: endpoint – endpoint object or ID
Returns:: policies.Policy object

list_endpoints_for_policy(policy)¶

List endpoints with the effective association to a policy.

Parameters:: policy – policy object or ID
Returns:: list of endpoints that are associated with the policy

keystoneclient.v3.contrib.simple_cert module¶

class keystoneclient.v3.contrib.simple_cert.SimpleCertManager(client)¶

Bases: object

Manager for the OS-SIMPLE-CERT extension.

get_ca_certificates()¶

Get CA certificates.

Returns:: PEM-formatted string.
Return type:: str

get_certificates()¶

Get signing certificates.

Returns:: PEM-formatted string.
Return type:: str

keystoneclient.v3.contrib.trusts module¶

class keystoneclient.v3.contrib.trusts.Trust(manager, info, loaded=False)¶

Bases: Resource

Represents a Trust.

Attributes:

id: a uuid that identifies the trust
impersonation: allow explicit impersonation
project_id: project ID
trustee_user_id: a uuid that identifies the trustee
trustor_user_id: a uuid that identifies the trustor

class keystoneclient.v3.contrib.trusts.TrustManager(client)¶

Bases: CrudManager

Manager class for manipulating Trusts.

base_url = '/OS-TRUST'¶

collection_key = 'trusts'¶

create(trustee_user, trustor_user, role_names=None, role_ids=None, project=None, impersonation=False, expires_at=None, remaining_uses=None, **kwargs)¶

Create a Trust.

Parameters:

trustee_user (string) – user who is capable of consuming the trust
trustor_user (string) – user who’s authorization is being delegated
role_names (string) – subset of trustor’s roles to be granted
role_ids (string) – subset of trustor’s roles to be granted
project (string) – project which the trustor is delegating
impersonation (boolean) – enable explicit impersonation
expires_at (datetime.datetime) – expiry time
remaining_uses (integer) – how many times this trust can be used to generate a token. None means unlimited tokens.

delete(trust)¶: Delete a trust.

get(trust)¶: Get a specific trust.

key = 'trust'¶

list(trustee_user=None, trustor_user=None, **kwargs)¶: List Trusts.

resource_class¶: alias of Trust

update()¶

keystoneclient.v3.contrib package