Introduction to Keystone

Keystone is an Identity service that integrates with OpenStack for managing authentication, authorization, and catalog services. It provides a truly scalable and secure framework for handling identity management and access controls for cloud environments. Below we introduce dozens of useful APIs followed by practical code snippets:

API Overview

1. Authentication

This API is used to verify user credentials and obtain an authentication token.

  POST /v3/auth/tokens
  {
    "auth": {
        "identity": {
            "methods": ["password"],
            "password": {
                "user": {
                    "id": "user_id",
                    "password": "user_password"
                }
            }
        }
    }
  }

2. Retrieve User Information

Retrieve details of a specific user.

  GET /v3/users/{user_id}

3. List All Projects

Get a list of all projects.

  GET /v3/projects

4. Create a New User

Create a new user in the Keystone service.

  POST /v3/users
  {
    "user": {
        "name": "new_user",
        "domain_id": "default",
        "enabled": true,
        "password": "new_password"
    }
  }

5. Update User Information

Update the details of an existing user.

  PATCH /v3/users/{user_id}
  {
    "user": {
        "email": "new_email@example.com",
        "enabled": false
    }
  }

6. Delete a User

Remove an existing user from the Keystone service.

  DELETE /v3/users/{user_id}

Practical App Example

Below is an example of a Python application that uses some of the above Keystone APIs.

  import requests

  # Authenticate and get token
  auth_url = "http://keystone.local/v3/auth/tokens"
  auth_data = {
    "auth": {
        "identity": {
            "methods": ["password"],
            "password": {
                "user": {
                    "id": "user_id",
                    "password": "user_password"
                }
            }
        }
    }
  }
  response = requests.post(auth_url, json=auth_data)
  token = response.headers['X-Subject-Token']

  # Get user information
  user_url = "http://keystone.local/v3/users/{user_id}"
  headers = {"X-Auth-Token": token}
  user_info = requests.get(user_url, headers=headers).json()
  print(user_info)
  
  # Create a new user
  create_user_url = "http://keystone.local/v3/users"
  new_user_data = {
    "user": {
        "name": "new_user",
        "domain_id": "default",
        "enabled": True,
        "password": "new_password"
    }
  }
  response = requests.post(create_user_url, json=new_user_data, headers=headers)
  print(response.json())

This app provides a simple example on how to interact with Keystone APIs using Python. By authenticating first, you can obtain your token necessary for subsequent API calls such as retrieving user information and creating new users.

Hash: 4cc7a4b341d8ce3315ea112ebb01e664bd328e88781db0f4bbc0e3f65e201bf9