openstack team mailing list archive

[Dean Troyer <dtroyer@xxxxxxxxx>]

On Fri, Feb 8, 2013 at 9:19 AM, Anne Gentle <anne@xxxxxxxxxxxxx> wrote:
> My understanding is that API keys are a provider's term. They are specially
> generated per user by the provider.

In general, Anne is right that a word like 'key' is context sensitive.
 AWS and Rax use it for access to the APIs but in different ways.  The
only place that OpenStack itself uses it in a user context is in
relation to the EC2 API or the ssh keypairs.

In regards to the EC2 keys, they can be generated with this:

keystone ec2-credentials-create

The other place 'key' is used is with the ssh key pair used for
instance logins.  Those are also long-lived and generated on demand.
However they are not related to controlling API acces, just to
controlling login to running instances.  They are controlled in the
Compute API and can be seen with:

nova help | grep key

dt

-- 

Dean Troyer
dtroyer@xxxxxxxxx