From f1501b99e18d42bfcb6282197b723133941f7438 Mon Sep 17 00:00:00 2001 From: wangxiyuan Date: Mon, 14 Jan 2019 11:05:43 +0800 Subject: [PATCH] Expose receipt_setup and receipt_rotate command The commands "receipt_setup" and "receipt_rotate" are used for control receipt keys. They should be exposed to operators. Update the cli doc in alpha order as well. Change-Id: Id8f062ce1d713cd029a11fe8fdc81c256a771471 --- doc/source/cli/commands.rst | 8 +++++--- keystone/cmd/cli.py | 2 ++ 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/doc/source/cli/commands.rst b/doc/source/cli/commands.rst index bbac02ad16..03e2477096 100644 --- a/doc/source/cli/commands.rst +++ b/doc/source/cli/commands.rst @@ -17,10 +17,12 @@ Available commands: * ``domain_config_upload``: Upload domain configuration file. * ``fernet_rotate``: Rotate keys in the Fernet key repository. * ``fernet_setup``: Setup a Fernet key repository for token encryption. -* ``token_rotate``: Rotate token keys in the key repository. -* ``token_setup``: Setup a token key repository for token encryption. * ``mapping_populate``: Prepare domain-specific LDAP backend. * ``mapping_purge``: Purge the identity mapping table. * ``mapping_engine``: Test your federation mapping rules. +* ``receipt_rotate``: Rotate auth receipts encryption keys. +* ``receipt_setup``: Setup a key repository for auth receipts. * ``saml_idp_metadata``: Generate identity provider metadata. -* ``trust_flush``: Purge expired trusts. \ No newline at end of file +* ``token_rotate``: Rotate token keys in the key repository. +* ``token_setup``: Setup a token key repository for token encryption. +* ``trust_flush``: Purge expired trusts. diff --git a/keystone/cmd/cli.py b/keystone/cmd/cli.py index 087f2dbcd7..47c105611c 100644 --- a/keystone/cmd/cli.py +++ b/keystone/cmd/cli.py @@ -1288,6 +1288,8 @@ CMDS = [ MappingPopulate, MappingPurge, MappingEngineTester, + ReceiptRotate, + ReceiptSetup, SamlIdentityProviderMetadata, TokenRotate, TokenSetup,