A trust provide project-specific role delegation between users, with optional impersonation. Requires the OS-TRUST extension. Applies to Identity v3.
Create new trust
openstack trust create
--project <project>
--role <role>
[--impersonate]
[--expiration <expiration>]
[--project-domain <project-domain>]
[--trustor-domain <trustor-domain>]
[--trustee-domain <trustee-domain>]
<trustor-user>
<trustee-user>
Project being delegated (name or ID) (required)
Roles to authorize (name or ID) (repeat option to set multiple values, required)
Tokens generated from the trust will represent <trustor> (defaults to False)
Sets an expiration date for the trust (format of YYYY-mm-ddTHH:MM:SS)
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
Domain that contains <trustor> (name or ID)
Domain that contains <trustee> (name or ID)
User that is delegating authorization (name or ID)
User that is assuming authorization (name or ID)
Delete trust(s)
openstack trust delete <trust> [<trust> ...]
Trust(s) to delete
List trusts
openstack trust list
[--format-config-file FORMAT_CONFIG]
[--sort-column SORT_COLUMN]
[--sort-ascending | --sort-descending]
[--trustor <trustor-user>]
[--trustee <trustee-user>]
[--trustor-domain <trustor-domain>]
[--trustee-domain <trustee-domain>]
[--auth-user]
Config file for the dict-to-csv formatter
specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated
sort the column(s) in ascending order
sort the column(s) in descending order
Trustor user to filter (name or ID)
Trustee user to filter (name or ID)
Domain that contains <trustor> (name or ID)
Domain that contains <trustee> (name or ID)
Only list trusts related to the authenticated user
Display trust details
openstack trust show <trust>
Trust to display
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.